# Flog Txt Version 1 # Analyzer Version: 3.2.1 # Analyzer Build Date: Feb 18 2020 07:49:07 # Log Creation Date: 20.02.2020 00:39:07.251 Process: id = "1" image_name = "ssvchost.exe" filename = "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ssvchost.exe" page_root = "0x3475e000" os_pid = "0x328" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "analysis_target" parent_id = "0" os_parent_pid = "0x444" cmd_line = "\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ssvchost.exe\" " cur_dir = "C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\" os_username = "XDUWTFONO\\5p5NrGJn0jS HALPmcxz" bitness = "32" os_groups = "XDUWTFONO\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000e6e5" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 1 os_tid = 0x5b0 [0027.674] CoInitializeEx (pvReserved=0x0, dwCoInit=0x2) returned 0x0 [0028.312] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ssvchost.exe", nBufferLength=0x105, lpBuffer=0x12df10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ssvchost.exe", lpFilePart=0x0) returned 0x32 [0028.320] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ssvchost.exe", nBufferLength=0x105, lpBuffer=0x12de50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ssvchost.exe", lpFilePart=0x0) returned 0x32 [0028.325] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\", nBufferLength=0x105, lpBuffer=0x12dd60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\", lpFilePart=0x0) returned 0x26 [0028.330] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\", nBufferLength=0x105, lpBuffer=0x12df50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\", lpFilePart=0x0) returned 0x26 [0028.330] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\", nBufferLength=0x105, lpBuffer=0x12de50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\", lpFilePart=0x0) returned 0x26 [0028.399] GetVersionExW (in: lpVersionInformation=0x12deb0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0x0, dwMinorVersion=0x0, dwBuildNumber=0x0, dwPlatformId=0x0, szCSDVersion="") | out: lpVersionInformation=0x12deb0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0x6, dwMinorVersion=0x1, dwBuildNumber=0x1db1, dwPlatformId=0x2, szCSDVersion="Service Pack 1")) returned 1 [0028.404] GetVersionExW (in: lpVersionInformation=0x12deb0*(dwOSVersionInfoSize=0x11c, dwMajorVersion=0x0, dwMinorVersion=0x0, dwBuildNumber=0x0, dwPlatformId=0x0, szCSDVersion="") | out: lpVersionInformation=0x12deb0*(dwOSVersionInfoSize=0x11c, dwMajorVersion=0x6, dwMinorVersion=0x1, dwBuildNumber=0x1db1, dwPlatformId=0x2, szCSDVersion="Service Pack 1")) returned 1 [0029.225] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Windows.Forms\\2.0.0.0__b77a5c561934e089\\System.Windows.Forms.dll", nBufferLength=0x105, lpBuffer=0x12e370, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Windows.Forms\\2.0.0.0__b77a5c561934e089\\System.Windows.Forms.dll", lpFilePart=0x0) returned 0x64 [0029.251] IsAppThemed () returned 0x1 [0029.256] CoTaskMemAlloc (cb=0xca) returned 0x29da10 [0029.256] CreateActCtxA (pActCtx=0x12e808) returned 0x292c58 [0029.308] CoTaskMemFree (pv=0x29da10) [0029.338] RegisterClipboardFormatW (lpszFormat="WM_GETCONTROLNAME") returned 0xc053 [0029.339] RegisterClipboardFormatW (lpszFormat="WM_GETCONTROLTYPE") returned 0xc16e [0029.389] CoTaskMemAlloc (cb=0x204) returned 0x29fd20 [0029.389] GetComputerNameW (in: lpBuffer=0x29fd20, nSize=0x12d908 | out: lpBuffer="XDUWTFONO", nSize=0x12d908) returned 1 [0029.391] CoTaskMemFree (pv=0x29fd20) [0029.478] GetSystemMetrics (nIndex=75) returned 1 [0029.539] AdjustWindowRectEx (in: lpRect=0x12e6b0, dwStyle=0x56cf0000, bMenu=0, dwExStyle=0x50001 | out: lpRect=0x12e6b0) returned 1 [0029.546] GetCurrentProcess () returned 0xffffffffffffffff [0029.547] GetCurrentThread () returned 0xfffffffffffffffe [0029.547] GetCurrentProcess () returned 0xffffffffffffffff [0029.548] DuplicateHandle (in: hSourceProcessHandle=0xffffffffffffffff, hSourceHandle=0xfffffffffffffffe, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x12e420, dwDesiredAccess=0x0, bInheritHandle=0, dwOptions=0x2 | out: lpTargetHandle=0x12e420*=0x17c) returned 1 [0029.552] GetCurrentThreadId () returned 0x5b0 [0029.617] GetCurrentActCtx (in: lphActCtx=0x12e430 | out: lphActCtx=0x12e430*=0x0) returned 1 [0029.617] ActivateActCtx (in: hActCtx=0x292c58, lpCookie=0x12e470 | out: hActCtx=0x292c58, lpCookie=0x12e470) returned 1 [0029.622] lstrlenW (lpString="䅁") returned 1 [0029.626] GetModuleHandleW (lpModuleName="user32.dll") returned 0x77040000 [0029.628] GetACP () returned 0x4e4 [0029.705] CoTaskMemAlloc (cb=0x10) returned 0x298a90 [0029.705] GetProcAddress (hModule=0x77040000, lpProcName="DefWindowProcW") returned 0x7716b0ac [0029.705] CoTaskMemFree (pv=0x298a90) [0029.709] GetStockObject (i=5) returned 0x1900015 [0029.711] GetModuleHandleW (lpModuleName=0x0) returned 0xae0000 [0029.714] CoTaskMemAlloc (cb=0x4c) returned 0x26b680 [0029.714] RegisterClassW (lpWndClass=0x12e110) returned 0xc052 [0029.714] CoTaskMemFree (pv=0x26b680) [0029.714] GetModuleHandleW (lpModuleName=0x0) returned 0xae0000 [0029.715] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.Window.8.app.0.378734a", lpWindowName=0x0, dwStyle=0x2010000, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0xfffffffffffffffd, hMenu=0x0, hInstance=0xae0000, lpParam=0x0) returned 0x60132 [0029.719] SetWindowLongPtrW (hWnd=0x60132, nIndex=-4, dwNewLong=0x7716b0ac) returned 0x9a14bc [0029.723] GetWindowLongPtrW (hWnd=0x60132, nIndex=-4) returned 0x7716b0ac [0029.727] lstrlenW (lpString="䅁") returned 1 [0029.731] GetVersionExW (in: lpVersionInformation=0x12c2f0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0x0, dwMinorVersion=0x0, dwBuildNumber=0x0, dwPlatformId=0x0, szCSDVersion="") | out: lpVersionInformation=0x12c2f0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0x6, dwMinorVersion=0x1, dwBuildNumber=0x1db1, dwPlatformId=0x2, szCSDVersion="Service Pack 1")) returned 1 [0029.742] RegOpenKeyExW (in: hKey=0xffffffff80000002, lpSubKey="Software\\Microsoft\\.NETFramework", ulOptions=0x0, samDesired=0x20019, phkResult=0x12d3a8 | out: phkResult=0x12d3a8*=0x180) returned 0x0 [0029.747] RegQueryValueExW (in: hKey=0x180, lpValueName="DbgJITDebugLaunchSetting", lpReserved=0x0, lpType=0x12d32c, lpData=0x0, lpcbData=0x12d328*=0x0 | out: lpType=0x12d32c*=0x0, lpData=0x0, lpcbData=0x12d328*=0x0) returned 0x2 [0029.748] RegQueryValueExW (in: hKey=0x180, lpValueName="DbgManagedDebugger", lpReserved=0x0, lpType=0x12d32c, lpData=0x0, lpcbData=0x12d328*=0x0 | out: lpType=0x12d32c*=0x0, lpData=0x0, lpcbData=0x12d328*=0x0) returned 0x2 [0029.752] RegCloseKey (hKey=0x180) returned 0x0 [0029.755] SetWindowLongPtrW (hWnd=0x60132, nIndex=-4, dwNewLong=0x9a150c) returned 0x7716b0ac [0029.755] GetWindowLongPtrW (hWnd=0x60132, nIndex=-4) returned 0x9a150c [0029.755] GetWindowLongPtrW (hWnd=0x60132, nIndex=-16) returned 0x6c10000 [0029.760] RegisterClipboardFormatW (lpszFormat="WinFormsMouseEnter") returned 0xc113 [0029.763] CallWindowProcW (lpPrevWndFunc=0x7716b0ac, hWnd=0x60132, Msg=0x24, wParam=0x0, lParam=0x12db50) returned 0x0 [0029.763] RegisterClipboardFormatW (lpszFormat="WinFormsUnSubclass") returned 0xc055 [0029.763] CallWindowProcW (lpPrevWndFunc=0x7716b0ac, hWnd=0x60132, Msg=0x81, wParam=0x0, lParam=0x12dad0) returned 0x1 [0029.763] CallWindowProcW (lpPrevWndFunc=0x7716b0ac, hWnd=0x60132, Msg=0x83, wParam=0x0, lParam=0x12db70) returned 0x0 [0029.765] CallWindowProcW (lpPrevWndFunc=0x7716b0ac, hWnd=0x60132, Msg=0x1, wParam=0x0, lParam=0x12dad0) returned 0x0 [0029.770] GetClientRect (in: hWnd=0x60132, lpRect=0x12d320 | out: lpRect=0x12d320) returned 1 [0029.771] GetWindowRect (in: hWnd=0x60132, lpRect=0x12d320 | out: lpRect=0x12d320) returned 1 [0029.784] GetParent (hWnd=0x60132) returned 0x0 [0029.787] DeactivateActCtx (dwFlags=0x0, ulCookie=0x1002781b00000001) returned 1 [0030.057] AdjustWindowRectEx (in: lpRect=0x12e740, dwStyle=0x2cf0000, bMenu=0, dwExStyle=0x50000 | out: lpRect=0x12e740) returned 1 [0030.064] GetSystemMetrics (nIndex=59) returned 1460 [0030.064] GetSystemMetrics (nIndex=60) returned 920 [0030.064] GetSystemMetrics (nIndex=34) returned 132 [0030.064] GetSystemMetrics (nIndex=35) returned 38 [0030.068] AdjustWindowRectEx (in: lpRect=0x12e3c0, dwStyle=0x2cf0000, bMenu=0, dwExStyle=0x50000 | out: lpRect=0x12e3c0) returned 1 [0030.108] CreateCompatibleDC (hdc=0x0) returned 0x62010269 [0030.159] GetSystemDefaultLCID () returned 0x409 [0030.161] GetStockObject (i=17) returned 0x18a0025 [0030.168] GetObjectW (in: h=0x18a0025, c=92, pv=0x12e250 | out: pv=0x12e250) returned 92 [0030.169] GetDC (hWnd=0x0) returned 0x51010853 [0030.201] GetCurrentProcessId () returned 0x328 [0030.208] FindAtomW (lpString="GDI+Atom_808_1") returned 0x0 [0030.209] AddAtomW (lpString="GDI+Atom_808_1") returned 0xc000 [0030.229] GdiplusStartup (in: token=0x12d198, input=0x12d1b0, output=0x12d188 | out: token=0x12d198, output=0x12d188) returned 0x0 [0030.239] GdipCreateFontFromLogfontW (hdc=0x51010853, logfont=0x27fd58, font=0x12e268) returned 0x0 [0030.408] GdipGetFontUnit (font=0x1b3541a0, unit=0x12e170) returned 0x0 [0030.410] GdipGetFontSize (font=0x1b3541a0, size=0x12e170) returned 0x0 [0030.410] GdipGetFontStyle (font=0x1b3541a0, style=0x12e170) returned 0x0 [0030.411] GdipGetFamily (font=0x1b3541a0, family=0x12e170) returned 0x0 [0030.421] GdipGetFontSize (font=0x1b3541a0, size=0x12e0d0) returned 0x0 [0030.422] ReleaseDC (hWnd=0x0, hDC=0x51010853) returned 1 [0030.427] GetDC (hWnd=0x0) returned 0xd01081a [0030.428] GdipCreateFromHDC (hdc=0xd01081a, graphics=0x12e230) returned 0x0 [0030.435] GdipGetDpiY (graphics=0x1b1cd3c0, dpi=0x267cbb8) returned 0x0 [0030.437] GdipGetFontHeight (font=0x1b3541a0, graphics=0x1b1cd3c0, height=0x12e200) returned 0x0 [0030.442] GdipGetEmHeight (family=0x1b35c5e0, style=0, EmHeight=0x12e220) returned 0x0 [0030.444] GdipGetLineSpacing (family=0x1b35c5e0, style=0, LineSpacing=0x12e220) returned 0x0 [0030.449] FindAtomW (lpString="GDI+Atom_808_1") returned 0xc000 [0030.450] GdipDeleteGraphics (graphics=0x1b1cd3c0) returned 0x0 [0030.450] ReleaseDC (hWnd=0x0, hDC=0xd01081a) returned 1 [0030.455] GdipCreateFont (fontFamily=0x1b35c5e0, emSize=0x0, style=0, unit=0x3, font=0x12e2c0) returned 0x0 [0030.455] GdipGetFontSize (font=0x1b233a40, size=0x12e350) returned 0x0 [0030.457] FindAtomW (lpString="GDI+Atom_808_1") returned 0xc000 [0030.457] GdipDeleteFont (font=0x1b3541a0) returned 0x0 [0030.463] GetDC (hWnd=0x0) returned 0xd01081a [0030.463] GdipCreateFromHDC (hdc=0xd01081a, graphics=0x12e2f0) returned 0x0 [0030.465] GdipGetLogFontW (font=0x1b233a40, graphics=0x1b1cd3c0, logfontW=0x27fd58) returned 0x0 [0030.466] FindAtomW (lpString="GDI+Atom_808_1") returned 0xc000 [0030.466] GdipDeleteGraphics (graphics=0x1b1cd3c0) returned 0x0 [0030.466] ReleaseDC (hWnd=0x0, hDC=0xd01081a) returned 1 [0030.467] CreateFontIndirectW (lplf=0x27fd58) returned 0xffffffffff0a06dc [0030.469] SelectObject (hdc=0x62010269, h=0xffffffffff0a06dc) returned 0x18a002e [0030.470] GetTextMetricsW (in: hdc=0x62010269, lptm=0x12e490 | out: lptm=0x12e490) returned 1 [0030.471] GetTextExtentPoint32W (in: hdc=0x62010269, lpString="abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ", c=52, psizl=0x267cf98 | out: psizl=0x267cf98) returned 1 [0030.474] SelectObject (hdc=0x62010269, h=0x18a002e) returned 0xffffffffff0a06dc [0030.475] DeleteDC (hdc=0x62010269) returned 1 [0030.488] AdjustWindowRectEx (in: lpRect=0x12e2d0, dwStyle=0x2cf0000, bMenu=0, dwExStyle=0x50000 | out: lpRect=0x12e2d0) returned 1 [0030.488] AdjustWindowRectEx (in: lpRect=0x12e4a0, dwStyle=0x2cf0000, bMenu=0, dwExStyle=0x50000 | out: lpRect=0x12e4a0) returned 1 [0030.493] AdjustWindowRectEx (in: lpRect=0x12e160, dwStyle=0x2cf0000, bMenu=0, dwExStyle=0x50000 | out: lpRect=0x12e160) returned 1 [0030.493] AdjustWindowRectEx (in: lpRect=0x12e330, dwStyle=0x2cf0000, bMenu=0, dwExStyle=0x50000 | out: lpRect=0x12e330) returned 1 [0030.498] GetSystemMetrics (nIndex=34) returned 132 [0030.498] GetSystemMetrics (nIndex=35) returned 38 [0030.502] GetCurrentActCtx (in: lphActCtx=0x12e890 | out: lphActCtx=0x12e890*=0x0) returned 1 [0030.502] ActivateActCtx (in: hActCtx=0x292c58, lpCookie=0x12e8d0 | out: hActCtx=0x292c58, lpCookie=0x12e8d0) returned 1 [0030.552] GetCurrentActCtx (in: lphActCtx=0x12e2f0 | out: lphActCtx=0x12e2f0*=0x292c58) returned 1 [0030.552] AdjustWindowRectEx (in: lpRect=0x12e1a0, dwStyle=0x2cf0000, bMenu=0, dwExStyle=0x50000 | out: lpRect=0x12e1a0) returned 1 [0030.553] GetModuleHandleW (lpModuleName=0x0) returned 0xae0000 [0030.553] CreateWindowExW (dwExStyle=0x50000, lpClassName="WindowsForms10.Window.8.app.0.378734a", lpWindowName="Form1", dwStyle=0x2cf0000, X=-2147483648, Y=-2147483648, nWidth=132, nHeight=58, hWndParent=0x0, hMenu=0x0, hInstance=0xae0000, lpParam=0x0) returned 0x50018 [0030.553] SetWindowLongPtrW (hWnd=0x50018, nIndex=-4, dwNewLong=0x7716b0ac) returned 0x9a14bc [0030.553] GetWindowLongPtrW (hWnd=0x50018, nIndex=-4) returned 0x7716b0ac [0030.553] SetWindowLongPtrW (hWnd=0x50018, nIndex=-4, dwNewLong=0x9a155c) returned 0x7716b0ac [0030.553] GetWindowLongPtrW (hWnd=0x50018, nIndex=-4) returned 0x9a155c [0030.553] GetWindowLongPtrW (hWnd=0x50018, nIndex=-16) returned 0x6cf0000 [0030.558] CallWindowProcW (lpPrevWndFunc=0x7716b0ac, hWnd=0x50018, Msg=0x81, wParam=0x0, lParam=0x12d990) returned 0x1 [0030.559] CallWindowProcW (lpPrevWndFunc=0x7716b0ac, hWnd=0x50018, Msg=0x83, wParam=0x0, lParam=0x12da30) returned 0x0 [0030.662] CallWindowProcW (lpPrevWndFunc=0x7716b0ac, hWnd=0x50018, Msg=0x1, wParam=0x0, lParam=0x12d970) returned 0x0 [0030.662] GetClientRect (in: hWnd=0x50018, lpRect=0x12d180 | out: lpRect=0x12d180) returned 1 [0030.662] GetWindowRect (in: hWnd=0x50018, lpRect=0x12d180 | out: lpRect=0x12d180) returned 1 [0030.665] SetWindowTextW (hWnd=0x50018, lpString="Form1") returned 1 [0030.665] CallWindowProcW (lpPrevWndFunc=0x7716b0ac, hWnd=0x50018, Msg=0xc, wParam=0x0, lParam=0x267bb20) returned 0x1 [0030.694] GetProcessWindowStation () returned 0x44 [0030.696] GetUserObjectInformationA (in: hObj=0x44, nIndex=1, pvInfo=0x267d948, nLength=0xc, lpnLengthNeeded=0x12ce70 | out: pvInfo=0x267d948, lpnLengthNeeded=0x12ce70) returned 1 [0030.699] SetConsoleCtrlHandler (HandlerRoutine=0x9a15ec, Add=1) returned 1 [0030.700] GetModuleHandleW (lpModuleName=0x0) returned 0xae0000 [0030.700] GetModuleHandleW (lpModuleName=0x0) returned 0xae0000 [0030.701] GetClassInfoW (in: hInstance=0xae0000, lpClassName=".NET-BroadcastEventWindow.2.0.0.0.378734a.0", lpWndClass=0x267d9d0 | out: lpWndClass=0x267d9d0) returned 0 [0030.704] CoTaskMemAlloc (cb=0x58) returned 0x26b680 [0030.705] RegisterClassW (lpWndClass=0x12cd90) returned 0xc059 [0030.705] CoTaskMemFree (pv=0x26b680) [0030.706] CreateWindowExW (dwExStyle=0x0, lpClassName=".NET-BroadcastEventWindow.2.0.0.0.378734a.0", lpWindowName=".NET-BroadcastEventWindow.2.0.0.0.378734a.0", dwStyle=0x80000000, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0x0, hMenu=0x0, hInstance=0xae0000, lpParam=0x0) returned 0x60094 [0030.708] NtdllDefWindowProc_W (hWnd=0x60094, Msg=0x81, wParam=0x0, lParam=0x12c5d0) returned 0x1 [0030.708] NtdllDefWindowProc_W (hWnd=0x60094, Msg=0x83, wParam=0x0, lParam=0x12c680) returned 0x0 [0030.709] NtdllDefWindowProc_W (hWnd=0x60094, Msg=0x1, wParam=0x0, lParam=0x12c570) returned 0x0 [0030.709] NtdllDefWindowProc_W (hWnd=0x60094, Msg=0x5, wParam=0x0, lParam=0x0) returned 0x0 [0030.709] NtdllDefWindowProc_W (hWnd=0x60094, Msg=0x3, wParam=0x0, lParam=0x0) returned 0x0 [0030.718] GetStartupInfoW (in: lpStartupInfo=0x267e108 | out: lpStartupInfo=0x267e108*(cb=0x68, lpReserved="", lpDesktop="WinSta0\\Default", lpTitle="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ssvchost.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x1, wShowWindow=0x1, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0)) [0030.719] GetParent (hWnd=0x50018) returned 0x0 [0030.721] SetWindowLongPtrW (hWnd=0x50018, nIndex=-8, dwNewLong=0x0) returned 0x0 [0030.737] GetSystemMetrics (nIndex=11) returned 32 [0030.737] GetSystemMetrics (nIndex=12) returned 32 [0030.737] GetDC (hWnd=0x0) returned 0xd01081a [0030.737] GetDeviceCaps (hdc=0xd01081a, index=12) returned 32 [0030.737] GetDeviceCaps (hdc=0xd01081a, index=14) returned 1 [0030.738] ReleaseDC (hWnd=0x0, hDC=0xd01081a) returned 1 [0030.740] CreateIconFromResourceEx (presbits=0x2680fa8, dwResSize=0x10a8, fIcon=1, dwVer=0x30000, cxDesired=0, cyDesired=0, Flags=0x0) returned 0x50127 [0030.741] GetSystemMetrics (nIndex=49) returned 16 [0030.741] GetSystemMetrics (nIndex=50) returned 16 [0030.743] CreateIconFromResourceEx (presbits=0x26820a8, dwResSize=0x468, fIcon=1, dwVer=0x30000, cxDesired=0, cyDesired=0, Flags=0x0) returned 0x40235 [0030.747] SendMessageW (hWnd=0x50018, Msg=0x80, wParam=0x0, lParam=0x40235) returned 0x0 [0030.747] CallWindowProcW (lpPrevWndFunc=0x7716b0ac, hWnd=0x50018, Msg=0x80, wParam=0x0, lParam=0x40235) returned 0x0 [0030.748] SendMessageW (hWnd=0x50018, Msg=0x80, wParam=0x1, lParam=0x50127) returned 0x0 [0030.748] CallWindowProcW (lpPrevWndFunc=0x7716b0ac, hWnd=0x50018, Msg=0x80, wParam=0x1, lParam=0x50127) returned 0x0 [0030.770] CallWindowProcW (lpPrevWndFunc=0x7716b0ac, hWnd=0x50018, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x40235 [0030.773] GetSystemMenu (hWnd=0x50018, bRevert=0) returned 0xc0221 [0030.777] GetWindowPlacement (in: hWnd=0x50018, lpwndpl=0x12e1b0 | out: lpwndpl=0x12e1b0) returned 1 [0030.778] EnableMenuItem (hMenu=0xc0221, uIDEnableItem=0xf020, uEnable=0x0) returned 0 [0030.778] EnableMenuItem (hMenu=0xc0221, uIDEnableItem=0xf030, uEnable=0x0) returned 0 [0030.778] EnableMenuItem (hMenu=0xc0221, uIDEnableItem=0xf060, uEnable=0x0) returned 0 [0030.778] EnableMenuItem (hMenu=0xc0221, uIDEnableItem=0xf120, uEnable=0x1) returned 0 [0030.778] EnableMenuItem (hMenu=0xc0221, uIDEnableItem=0xf000, uEnable=0x0) returned 0 [0030.780] GetClientRect (in: hWnd=0x50018, lpRect=0x12e2d0 | out: lpRect=0x12e2d0) returned 1 [0030.780] GetClientRect (in: hWnd=0x50018, lpRect=0x12e1b0 | out: lpRect=0x12e1b0) returned 1 [0030.780] GetWindowRect (in: hWnd=0x50018, lpRect=0x12e1b0 | out: lpRect=0x12e1b0) returned 1 [0030.782] GetWindowLongPtrW (hWnd=0x50018, nIndex=-16) returned 0x6cf0000 [0030.783] GetWindowTextLengthW (hWnd=0x50018) returned 5 [0030.783] CallWindowProcW (lpPrevWndFunc=0x7716b0ac, hWnd=0x50018, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x5 [0030.783] GetSystemMetrics (nIndex=42) returned 0 [0030.785] CoTaskMemAlloc (cb=0x10) returned 0x299010 [0030.785] GetWindowTextW (in: hWnd=0x50018, lpString=0x299010, nMaxCount=6 | out: lpString="Form1") returned 5 [0030.785] CallWindowProcW (lpPrevWndFunc=0x7716b0ac, hWnd=0x50018, Msg=0xd, wParam=0x6, lParam=0x299010) returned 0x5 [0030.785] CoTaskMemFree (pv=0x299010) [0030.785] GetWindowTextLengthW (hWnd=0x50018) returned 5 [0030.785] CallWindowProcW (lpPrevWndFunc=0x7716b0ac, hWnd=0x50018, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x5 [0030.785] GetSystemMetrics (nIndex=42) returned 0 [0030.785] CoTaskMemAlloc (cb=0x10) returned 0x299010 [0030.785] GetWindowTextW (in: hWnd=0x50018, lpString=0x299010, nMaxCount=6 | out: lpString="Form1") returned 5 [0030.785] CallWindowProcW (lpPrevWndFunc=0x7716b0ac, hWnd=0x50018, Msg=0xd, wParam=0x6, lParam=0x299010) returned 0x5 [0030.785] CoTaskMemFree (pv=0x299010) [0030.785] GetWindowLongPtrW (hWnd=0x50018, nIndex=-16) returned 0x6cf0000 [0030.786] GetWindowLongPtrW (hWnd=0x50018, nIndex=-20) returned 0x50100 [0030.787] SetWindowLongPtrW (hWnd=0x50018, nIndex=-16, dwNewLong=0x2cf0000) returned 0x6cf0000 [0030.787] CallWindowProcW (lpPrevWndFunc=0x7716b0ac, hWnd=0x50018, Msg=0x7c, wParam=0xfffffffffffffff0, lParam=0x12e1f0) returned 0x0 [0030.787] CallWindowProcW (lpPrevWndFunc=0x7716b0ac, hWnd=0x50018, Msg=0x7d, wParam=0xfffffffffffffff0, lParam=0x12e1f0) returned 0x0 [0030.788] SetWindowLongPtrW (hWnd=0x50018, nIndex=-20, dwNewLong=0x50000) returned 0x50100 [0030.789] CallWindowProcW (lpPrevWndFunc=0x7716b0ac, hWnd=0x50018, Msg=0x7c, wParam=0xffffffffffffffec, lParam=0x12e1f0) returned 0x0 [0030.789] CallWindowProcW (lpPrevWndFunc=0x7716b0ac, hWnd=0x50018, Msg=0x7d, wParam=0xffffffffffffffec, lParam=0x12e1f0) returned 0x0 [0030.790] SetWindowPos (hWnd=0x50018, hWndInsertAfter=0x0, X=0, Y=0, cx=0, cy=0, uFlags=0x37) returned 1 [0030.791] CallWindowProcW (lpPrevWndFunc=0x7716b0ac, hWnd=0x50018, Msg=0x46, wParam=0x0, lParam=0x12e290) returned 0x0 [0030.791] CallWindowProcW (lpPrevWndFunc=0x7716b0ac, hWnd=0x50018, Msg=0x83, wParam=0x1, lParam=0x12e260) returned 0x0 [0030.793] GetWindowPlacement (in: hWnd=0x50018, lpwndpl=0x12dcf0 | out: lpwndpl=0x12dcf0) returned 1 [0030.794] CallWindowProcW (lpPrevWndFunc=0x7716b0ac, hWnd=0x50018, Msg=0x47, wParam=0x0, lParam=0x12e290) returned 0x0 [0030.794] GetClientRect (in: hWnd=0x50018, lpRect=0x12da90 | out: lpRect=0x12da90) returned 1 [0030.794] GetWindowRect (in: hWnd=0x50018, lpRect=0x12da90 | out: lpRect=0x12da90) returned 1 [0030.796] CallWindowProcW (lpPrevWndFunc=0x7716b0ac, hWnd=0x50018, Msg=0x83, wParam=0x1, lParam=0x12dbf0) returned 0x0 [0030.798] RedrawWindow (hWnd=0x50018, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1 [0030.799] GetSystemMenu (hWnd=0x50018, bRevert=0) returned 0xc0221 [0030.799] GetWindowPlacement (in: hWnd=0x50018, lpwndpl=0x12e1b0 | out: lpwndpl=0x12e1b0) returned 1 [0030.799] EnableMenuItem (hMenu=0xc0221, uIDEnableItem=0xf020, uEnable=0x0) returned 0 [0030.799] EnableMenuItem (hMenu=0xc0221, uIDEnableItem=0xf030, uEnable=0x0) returned 0 [0030.799] EnableMenuItem (hMenu=0xc0221, uIDEnableItem=0xf060, uEnable=0x0) returned 0 [0030.799] EnableMenuItem (hMenu=0xc0221, uIDEnableItem=0xf120, uEnable=0x1) returned 1 [0030.799] EnableMenuItem (hMenu=0xc0221, uIDEnableItem=0xf000, uEnable=0x0) returned 0 [0030.800] ShowWindow (hWnd=0x50018, nCmdShow=5) returned 1 [0030.802] CallWindowProcW (lpPrevWndFunc=0x7716b0ac, hWnd=0x50018, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0 [0030.808] GetWindowTextLengthW (hWnd=0x50018) returned 5 [0030.808] CallWindowProcW (lpPrevWndFunc=0x7716b0ac, hWnd=0x50018, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x5 [0030.808] GetSystemMetrics (nIndex=42) returned 0 [0030.808] CoTaskMemAlloc (cb=0x10) returned 0x299050 [0030.808] GetWindowTextW (in: hWnd=0x50018, lpString=0x299050, nMaxCount=6 | out: lpString="Form1") returned 5 [0030.808] CallWindowProcW (lpPrevWndFunc=0x7716b0ac, hWnd=0x50018, Msg=0xd, wParam=0x6, lParam=0x299050) returned 0x5 [0030.808] CoTaskMemFree (pv=0x299050) [0030.862] GetWindowLongPtrW (hWnd=0x50018, nIndex=-16) returned 0x6cf0000 [0030.863] GetWindowTextLengthW (hWnd=0x50018) returned 5 [0030.863] CallWindowProcW (lpPrevWndFunc=0x7716b0ac, hWnd=0x50018, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x5 [0030.863] GetSystemMetrics (nIndex=42) returned 0 [0030.863] CoTaskMemAlloc (cb=0x10) returned 0x299050 [0030.863] GetWindowTextW (in: hWnd=0x50018, lpString=0x299050, nMaxCount=6 | out: lpString="Form1") returned 5 [0030.863] CallWindowProcW (lpPrevWndFunc=0x7716b0ac, hWnd=0x50018, Msg=0xd, wParam=0x6, lParam=0x299050) returned 0x5 [0030.863] CoTaskMemFree (pv=0x299050) [0030.863] GetWindowTextLengthW (hWnd=0x50018) returned 5 [0030.863] CallWindowProcW (lpPrevWndFunc=0x7716b0ac, hWnd=0x50018, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x5 [0030.863] GetSystemMetrics (nIndex=42) returned 0 [0030.863] CoTaskMemAlloc (cb=0x10) returned 0x299050 [0030.863] GetWindowTextW (in: hWnd=0x50018, lpString=0x299050, nMaxCount=6 | out: lpString="Form1") returned 5 [0030.863] CallWindowProcW (lpPrevWndFunc=0x7716b0ac, hWnd=0x50018, Msg=0xd, wParam=0x6, lParam=0x299050) returned 0x5 [0030.863] CoTaskMemFree (pv=0x299050) [0030.864] GetWindowLongPtrW (hWnd=0x50018, nIndex=-16) returned 0x6cf0000 [0030.864] GetWindowLongPtrW (hWnd=0x50018, nIndex=-20) returned 0x50100 [0030.864] SetWindowLongPtrW (hWnd=0x50018, nIndex=-16, dwNewLong=0x12cf0000) returned 0x6cf0000 [0030.864] CallWindowProcW (lpPrevWndFunc=0x7716b0ac, hWnd=0x50018, Msg=0x7c, wParam=0xfffffffffffffff0, lParam=0x12d840) returned 0x0 [0030.864] CallWindowProcW (lpPrevWndFunc=0x7716b0ac, hWnd=0x50018, Msg=0x7d, wParam=0xfffffffffffffff0, lParam=0x12d840) returned 0x0 [0030.865] SetWindowLongPtrW (hWnd=0x50018, nIndex=-20, dwNewLong=0xd0000) returned 0x50100 [0030.865] CallWindowProcW (lpPrevWndFunc=0x7716b0ac, hWnd=0x50018, Msg=0x7c, wParam=0xffffffffffffffec, lParam=0x12d840) returned 0x0 [0030.877] CallWindowProcW (lpPrevWndFunc=0x7716b0ac, hWnd=0x50018, Msg=0x7d, wParam=0xffffffffffffffec, lParam=0x12d840) returned 0x0 [0030.877] SetWindowPos (hWnd=0x50018, hWndInsertAfter=0x0, X=0, Y=0, cx=0, cy=0, uFlags=0x37) returned 1 [0030.877] CallWindowProcW (lpPrevWndFunc=0x7716b0ac, hWnd=0x50018, Msg=0x46, wParam=0x0, lParam=0x12d8e0) returned 0x0 [0030.877] CallWindowProcW (lpPrevWndFunc=0x7716b0ac, hWnd=0x50018, Msg=0x83, wParam=0x1, lParam=0x12d8b0) returned 0x0 [0030.878] GetWindowPlacement (in: hWnd=0x50018, lpwndpl=0x12d340 | out: lpwndpl=0x12d340) returned 1 [0030.878] CallWindowProcW (lpPrevWndFunc=0x7716b0ac, hWnd=0x50018, Msg=0x47, wParam=0x0, lParam=0x12d8e0) returned 0x0 [0030.878] GetClientRect (in: hWnd=0x50018, lpRect=0x12d0e0 | out: lpRect=0x12d0e0) returned 1 [0030.878] GetWindowRect (in: hWnd=0x50018, lpRect=0x12d0e0 | out: lpRect=0x12d0e0) returned 1 [0030.879] RedrawWindow (hWnd=0x50018, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1 [0030.879] GetSystemMenu (hWnd=0x50018, bRevert=0) returned 0xc0221 [0030.879] GetWindowPlacement (in: hWnd=0x50018, lpwndpl=0x12d800 | out: lpwndpl=0x12d800) returned 1 [0030.879] EnableMenuItem (hMenu=0xc0221, uIDEnableItem=0xf020, uEnable=0x0) returned 0 [0030.879] EnableMenuItem (hMenu=0xc0221, uIDEnableItem=0xf030, uEnable=0x0) returned 0 [0030.879] EnableMenuItem (hMenu=0xc0221, uIDEnableItem=0xf060, uEnable=0x0) returned 0 [0030.880] EnableMenuItem (hMenu=0xc0221, uIDEnableItem=0xf120, uEnable=0x1) returned 1 [0030.880] EnableMenuItem (hMenu=0xc0221, uIDEnableItem=0xf000, uEnable=0x0) returned 0 [0030.885] SetLayeredWindowAttributes (hwnd=0x50018, crKey=0x0, bAlpha=0x0, dwFlags=0x2) returned 1 [0030.896] GetCurrentThreadId () returned 0x5b0 [0030.899] EnumThreadWindows (dwThreadId=0x5b0, lpfn=0x9b1fdc, lParam=0x50018) returned 1 [0030.938] GetWindowLongPtrW (hWnd=0x60094, nIndex=-8) returned 0x0 [0030.938] GetWindowLongPtrW (hWnd=0x50018, nIndex=-8) returned 0x0 [0030.938] GetWindowLongPtrW (hWnd=0x50016, nIndex=-8) returned 0x50018 [0031.121] SetWindowLongPtrW (hWnd=0x50016, nIndex=-8, dwNewLong=0x0) returned 0x50018 [0031.154] GetFocus () returned 0x0 [0031.154] GetParent (hWnd=0x50018) returned 0x0 [0031.156] GetWindowLongPtrW (hWnd=0x50018, nIndex=-20) returned 0xd0100 [0031.157] DestroyWindow (hWnd=0x50018) returned 1 [0031.158] CallWindowProcW (lpPrevWndFunc=0x7716b0ac, hWnd=0x50018, Msg=0x90, wParam=0x0, lParam=0x0) returned 0x0 [0031.158] CallWindowProcW (lpPrevWndFunc=0x7716b0ac, hWnd=0x50018, Msg=0x46, wParam=0x0, lParam=0x12d700) returned 0x0 [0031.161] GetWindowPlacement (in: hWnd=0x50018, lpwndpl=0x12d160 | out: lpwndpl=0x12d160) returned 1 [0031.161] CallWindowProcW (lpPrevWndFunc=0x7716b0ac, hWnd=0x50018, Msg=0x47, wParam=0x0, lParam=0x12d700) returned 0x0 [0031.161] GetClientRect (in: hWnd=0x50018, lpRect=0x12cf00 | out: lpRect=0x12cf00) returned 1 [0031.161] GetWindowRect (in: hWnd=0x50018, lpRect=0x12cf00 | out: lpRect=0x12cf00) returned 1 [0031.163] GetWindowTextLengthW (hWnd=0x50018) returned 5 [0031.164] CallWindowProcW (lpPrevWndFunc=0x7716b0ac, hWnd=0x50018, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x5 [0031.164] GetSystemMetrics (nIndex=42) returned 0 [0031.164] CoTaskMemAlloc (cb=0x10) returned 0x299090 [0031.164] GetWindowTextW (in: hWnd=0x50018, lpString=0x299090, nMaxCount=6 | out: lpString="Form1") returned 5 [0031.164] CallWindowProcW (lpPrevWndFunc=0x7716b0ac, hWnd=0x50018, Msg=0xd, wParam=0x6, lParam=0x299090) returned 0x5 [0031.164] CoTaskMemFree (pv=0x299090) [0031.166] CallWindowProcW (lpPrevWndFunc=0x7716b0ac, hWnd=0x50018, Msg=0x2, wParam=0x0, lParam=0x0) returned 0x0 [0031.168] CallWindowProcW (lpPrevWndFunc=0x7716b0ac, hWnd=0x50018, Msg=0x82, wParam=0x0, lParam=0x0) returned 0x0 [0031.177] GetCurrentActCtx (in: lphActCtx=0x12d7a0 | out: lphActCtx=0x12d7a0*=0x292c58) returned 1 [0031.178] GetModuleHandleW (lpModuleName=0x0) returned 0xae0000 [0031.178] CreateWindowExW (dwExStyle=0x90000, lpClassName="WindowsForms10.Window.8.app.0.378734a", lpWindowName="Form1", dwStyle=0x2cf0000, X=75, Y=75, nWidth=132, nHeight=58, hWndParent=0x0, hMenu=0x0, hInstance=0xae0000, lpParam=0x0) returned 0x30276 [0031.178] SetWindowLongPtrW (hWnd=0x30276, nIndex=-4, dwNewLong=0x7716b0ac) returned 0x9a14bc [0031.178] GetWindowLongPtrW (hWnd=0x30276, nIndex=-4) returned 0x7716b0ac [0031.178] SetWindowLongPtrW (hWnd=0x30276, nIndex=-4, dwNewLong=0x9b202c) returned 0x7716b0ac [0031.178] GetWindowLongPtrW (hWnd=0x30276, nIndex=-4) returned 0x9b202c [0031.179] GetWindowLongPtrW (hWnd=0x30276, nIndex=-16) returned 0x6cf0000 [0031.185] CallWindowProcW (lpPrevWndFunc=0x7716b0ac, hWnd=0x30276, Msg=0x81, wParam=0x0, lParam=0x12ce40) returned 0x1 [0031.185] CallWindowProcW (lpPrevWndFunc=0x7716b0ac, hWnd=0x30276, Msg=0x83, wParam=0x0, lParam=0x12cee0) returned 0x0 [0031.185] CallWindowProcW (lpPrevWndFunc=0x7716b0ac, hWnd=0x30276, Msg=0x1, wParam=0x0, lParam=0x12ce20) returned 0x0 [0031.185] GetClientRect (in: hWnd=0x30276, lpRect=0x12c630 | out: lpRect=0x12c630) returned 1 [0031.185] GetWindowRect (in: hWnd=0x30276, lpRect=0x12c630 | out: lpRect=0x12c630) returned 1 [0031.198] SetWindowTextW (hWnd=0x30276, lpString="Form1") returned 1 [0031.198] CallWindowProcW (lpPrevWndFunc=0x7716b0ac, hWnd=0x30276, Msg=0xc, wParam=0x0, lParam=0x2682bd8) returned 0x1 [0031.198] SetLayeredWindowAttributes (hwnd=0x30276, crKey=0x0, bAlpha=0x0, dwFlags=0x2) returned 1 [0031.199] GetStartupInfoW (in: lpStartupInfo=0x26830c0 | out: lpStartupInfo=0x26830c0*(cb=0x68, lpReserved="", lpDesktop="WinSta0\\Default", lpTitle="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ssvchost.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x1, wShowWindow=0x1, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0)) [0031.199] GetParent (hWnd=0x30276) returned 0x0 [0031.201] GetStockObject (i=5) returned 0x1900015 [0031.201] GetModuleHandleW (lpModuleName=0x0) returned 0xae0000 [0031.201] CoTaskMemAlloc (cb=0x4c) returned 0x26b680 [0031.201] RegisterClassW (lpWndClass=0x12d450) returned 0xc096 [0031.202] CoTaskMemFree (pv=0x26b680) [0031.202] GetModuleHandleW (lpModuleName=0x0) returned 0xae0000 [0031.202] CreateWindowExW (dwExStyle=0x80, lpClassName="WindowsForms10.Window.0.app.0.378734a", lpWindowName=0x0, dwStyle=0x0, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0x0, hMenu=0x0, hInstance=0xae0000, lpParam=0x0) returned 0x30270 [0031.202] SetWindowLongPtrW (hWnd=0x30270, nIndex=-4, dwNewLong=0x7716b0ac) returned 0x9b207c [0031.202] GetWindowLongPtrW (hWnd=0x30270, nIndex=-4) returned 0x7716b0ac [0031.202] SetWindowLongPtrW (hWnd=0x30270, nIndex=-4, dwNewLong=0x9b20cc) returned 0x7716b0ac [0031.203] GetWindowLongPtrW (hWnd=0x30270, nIndex=-4) returned 0x9b20cc [0031.203] GetWindowLongPtrW (hWnd=0x30270, nIndex=-16) returned 0x4c00000 [0031.204] CallWindowProcW (lpPrevWndFunc=0x7716b0ac, hWnd=0x30270, Msg=0x24, wParam=0x0, lParam=0x12ce90) returned 0x0 [0031.204] CallWindowProcW (lpPrevWndFunc=0x7716b0ac, hWnd=0x30270, Msg=0x81, wParam=0x0, lParam=0x12ce10) returned 0x1 [0031.204] CallWindowProcW (lpPrevWndFunc=0x7716b0ac, hWnd=0x30270, Msg=0x83, wParam=0x0, lParam=0x12ceb0) returned 0x0 [0031.204] CallWindowProcW (lpPrevWndFunc=0x7716b0ac, hWnd=0x30270, Msg=0x1, wParam=0x0, lParam=0x12ce10) returned 0x0 [0031.204] SetWindowLongPtrW (hWnd=0x30276, nIndex=-8, dwNewLong=0x30270) returned 0x0 [0031.205] SendMessageW (hWnd=0x30276, Msg=0x80, wParam=0x0, lParam=0x40235) returned 0x0 [0031.205] CallWindowProcW (lpPrevWndFunc=0x7716b0ac, hWnd=0x30276, Msg=0x80, wParam=0x0, lParam=0x40235) returned 0x0 [0031.205] SendMessageW (hWnd=0x30276, Msg=0x80, wParam=0x1, lParam=0x50127) returned 0x0 [0031.205] CallWindowProcW (lpPrevWndFunc=0x7716b0ac, hWnd=0x30276, Msg=0x80, wParam=0x1, lParam=0x50127) returned 0x0 [0031.206] CallWindowProcW (lpPrevWndFunc=0x7716b0ac, hWnd=0x30276, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x40235 [0031.207] GetSystemMenu (hWnd=0x30276, bRevert=0) returned 0xd0221 [0031.207] GetWindowPlacement (in: hWnd=0x30276, lpwndpl=0x12d660 | out: lpwndpl=0x12d660) returned 1 [0031.207] EnableMenuItem (hMenu=0xd0221, uIDEnableItem=0xf020, uEnable=0x0) returned 0 [0031.207] EnableMenuItem (hMenu=0xd0221, uIDEnableItem=0xf030, uEnable=0x0) returned 0 [0031.207] EnableMenuItem (hMenu=0xd0221, uIDEnableItem=0xf060, uEnable=0x0) returned 0 [0031.207] EnableMenuItem (hMenu=0xd0221, uIDEnableItem=0xf120, uEnable=0x1) returned 0 [0031.207] EnableMenuItem (hMenu=0xd0221, uIDEnableItem=0xf000, uEnable=0x0) returned 0 [0031.208] GetClientRect (in: hWnd=0x30276, lpRect=0x12d780 | out: lpRect=0x12d780) returned 1 [0031.208] GetClientRect (in: hWnd=0x30276, lpRect=0x12d660 | out: lpRect=0x12d660) returned 1 [0031.208] GetWindowRect (in: hWnd=0x30276, lpRect=0x12d660 | out: lpRect=0x12d660) returned 1 [0031.208] SetWindowPos (hWnd=0x30276, hWndInsertAfter=0x0, X=0, Y=0, cx=0, cy=0, uFlags=0x57) returned 1 [0031.208] CallWindowProcW (lpPrevWndFunc=0x7716b0ac, hWnd=0x30276, Msg=0x46, wParam=0x0, lParam=0x12d620) returned 0x0 [0031.213] CallWindowProcW (lpPrevWndFunc=0x7716b0ac, hWnd=0x30276, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0031.216] GetWindowPlacement (in: hWnd=0x30276, lpwndpl=0x12d0a0 | out: lpwndpl=0x12d0a0) returned 1 [0031.217] GetClientRect (in: hWnd=0x30276, lpRect=0x12cf50 | out: lpRect=0x12cf50) returned 1 [0031.220] GetWindowTextLengthW (hWnd=0x30276) returned 5 [0031.220] CallWindowProcW (lpPrevWndFunc=0x7716b0ac, hWnd=0x30276, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x5 [0031.220] GetSystemMetrics (nIndex=42) returned 0 [0031.220] CoTaskMemAlloc (cb=0x10) returned 0x299090 [0031.220] GetWindowTextW (in: hWnd=0x30276, lpString=0x299090, nMaxCount=6 | out: lpString="Form1") returned 5 [0031.220] CallWindowProcW (lpPrevWndFunc=0x7716b0ac, hWnd=0x30276, Msg=0xd, wParam=0x6, lParam=0x299090) returned 0x5 [0031.220] CoTaskMemFree (pv=0x299090) [0031.221] GetClientRect (in: hWnd=0x30276, lpRect=0x12ccf0 | out: lpRect=0x12ccf0) returned 1 [0031.228] GetSysColor (nIndex=10) returned 0xb4b4b4 [0031.228] GetSysColor (nIndex=2) returned 0xd1b499 [0031.228] GetSysColor (nIndex=9) returned 0x0 [0031.228] GetSysColor (nIndex=12) returned 0xababab [0031.228] GetSysColor (nIndex=15) returned 0xf0f0f0 [0031.228] GetSysColor (nIndex=20) returned 0xffffff [0031.228] GetSysColor (nIndex=16) returned 0xa0a0a0 [0031.228] GetSysColor (nIndex=15) returned 0xf0f0f0 [0031.228] GetSysColor (nIndex=16) returned 0xa0a0a0 [0031.228] GetSysColor (nIndex=21) returned 0x696969 [0031.228] GetSysColor (nIndex=22) returned 0xe3e3e3 [0031.229] GetSysColor (nIndex=20) returned 0xffffff [0031.229] GetSysColor (nIndex=18) returned 0x0 [0031.229] GetSysColor (nIndex=1) returned 0x0 [0031.229] GetSysColor (nIndex=27) returned 0xead1b9 [0031.229] GetSysColor (nIndex=28) returned 0xf2e4d7 [0031.229] GetSysColor (nIndex=17) returned 0x6d6d6d [0031.229] GetSysColor (nIndex=13) returned 0xff9933 [0031.229] GetSysColor (nIndex=14) returned 0xffffff [0031.229] GetSysColor (nIndex=26) returned 0xcc6600 [0031.229] GetSysColor (nIndex=11) returned 0xfcf7f4 [0031.229] GetSysColor (nIndex=3) returned 0xdbcdbf [0031.229] GetSysColor (nIndex=19) returned 0x544e43 [0031.229] GetSysColor (nIndex=24) returned 0xe1ffff [0031.229] GetSysColor (nIndex=23) returned 0x0 [0031.229] GetSysColor (nIndex=4) returned 0xf0f0f0 [0031.229] GetSysColor (nIndex=30) returned 0xf0f0f0 [0031.229] GetSysColor (nIndex=29) returned 0xff9933 [0031.229] GetSysColor (nIndex=7) returned 0x0 [0031.229] GetSysColor (nIndex=0) returned 0xc8c8c8 [0031.230] GetSysColor (nIndex=5) returned 0xffffff [0031.230] GetSysColor (nIndex=6) returned 0x646464 [0031.230] GetSysColor (nIndex=8) returned 0x0 [0031.231] GdipCreateHalftonePalette () returned 0x330801be [0031.232] SelectPalette (hdc=0x51010853, hPal=0x330801be, bForceBkgd=1) returned 0x188000b [0031.232] GdipCreateFromHDC (hdc=0x51010853, graphics=0x12c8c0) returned 0x0 [0031.234] GdipSetPageUnit (graphics=0x1b1cd3c0, unit=0x2) returned 0x0 [0031.240] GdipCreateMatrix (matrix=0x12c7b0) returned 0x0 [0031.240] GdipGetWorldTransform (graphics=0x1b1cd3c0, matrix=0x1b3541a0) returned 0x0 [0031.253] GdipIsMatrixIdentity (matrix=0x1b3541a0, result=0x12c810) returned 0x0 [0031.255] FindAtomW (lpString="GDI+Atom_808_1") returned 0xc000 [0031.255] GdipDeleteMatrix (matrix=0x1b3541a0) returned 0x0 [0031.258] GdipCreateRegion (region=0x12c7b0) returned 0x0 [0031.260] GdipGetClip (graphics=0x1b1cd3c0, region=0x1b35e7b0) returned 0x0 [0031.262] GdipIsInfiniteRegion (region=0x1b35e7b0, graphics=0x1b1cd3c0, result=0x12c7e0) returned 0x0 [0031.263] FindAtomW (lpString="GDI+Atom_808_1") returned 0xc000 [0031.263] GdipDeleteRegion (region=0x1b35e7b0) returned 0x0 [0031.264] GdipSaveGraphics (graphics=0x1b1cd3c0, state=0x12c8b0) returned 0x0 [0031.268] GdipCreateRegion (region=0x12c780) returned 0x0 [0031.268] GdipGetClip (graphics=0x1b1cd3c0, region=0x1b35e7b0) returned 0x0 [0031.268] GdipCreateMatrix (matrix=0x12c780) returned 0x0 [0031.268] GdipGetWorldTransform (graphics=0x1b1cd3c0, matrix=0x1b1cd790) returned 0x0 [0031.269] GdipIsMatrixIdentity (matrix=0x1b1cd790, result=0x12c7e0) returned 0x0 [0031.271] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1af0e920 [0031.272] GdipGetMatrixElements (matrix=0x1b1cd790, matrixOut=0x1af0e920) returned 0x0 [0031.273] LocalFree (hMem=0x1af0e920) returned 0x0 [0031.273] FindAtomW (lpString="GDI+Atom_808_1") returned 0xc000 [0031.273] GdipDeleteMatrix (matrix=0x1b1cd790) returned 0x0 [0031.273] GdipIsInfiniteRegion (region=0x1b35e7b0, graphics=0x1b1cd3c0, result=0x12c830) returned 0x0 [0031.273] FindAtomW (lpString="GDI+Atom_808_1") returned 0xc000 [0031.273] GdipDeleteRegion (region=0x1b35e7b0) returned 0x0 [0031.274] GdipGetDC (graphics=0x1b1cd3c0, hdc=0x12c860) returned 0x0 [0031.276] GetCurrentObject (hdc=0x51010853, type=0x1) returned 0x1b00017 [0031.276] GetCurrentObject (hdc=0x51010853, type=0x2) returned 0x1900010 [0031.276] GetCurrentObject (hdc=0x51010853, type=0x7) returned 0x2405079e [0031.276] GetCurrentObject (hdc=0x51010853, type=0x6) returned 0x18a002e [0031.285] SaveDC (hdc=0x51010853) returned 1 [0031.287] OffsetViewportOrgEx (in: hdc=0x51010853, x=0, y=0, lppt=0x2683f98 | out: lppt=0x2683f98) returned 1 [0031.290] GetNearestColor (hdc=0x51010853, color=0xf0f0f0) returned 0xf0f0f0 [0031.299] CreateSolidBrush (color=0xf0f0f0) returned 0x16100a23 [0031.301] FillRect (hDC=0x51010853, lprc=0x12c830, hbr=0x16100a23) returned 1 [0031.303] DeleteObject (ho=0x16100a23) returned 1 [0031.306] RestoreDC (hdc=0x51010853, nSavedDC=-1) returned 1 [0031.311] FindAtomW (lpString="GDI+Atom_808_1") returned 0xc000 [0031.312] GdipReleaseDC (graphics=0x1b1cd3c0, hdc=0x51010853) returned 0x0 [0031.313] FindAtomW (lpString="GDI+Atom_808_1") returned 0xc000 [0031.313] GdipDeleteGraphics (graphics=0x1b1cd3c0) returned 0x0 [0031.313] SelectPalette (hdc=0x51010853, hPal=0x188000b, bForceBkgd=0) returned 0x330801be [0031.313] GetWindowPlacement (in: hWnd=0x30276, lpwndpl=0x12d080 | out: lpwndpl=0x12d080) returned 1 [0031.313] CallWindowProcW (lpPrevWndFunc=0x7716b0ac, hWnd=0x30276, Msg=0x47, wParam=0x0, lParam=0x12d620) returned 0x0 [0031.313] GetClientRect (in: hWnd=0x30276, lpRect=0x12ce20 | out: lpRect=0x12ce20) returned 1 [0031.313] GetWindowRect (in: hWnd=0x30276, lpRect=0x12ce20 | out: lpRect=0x12ce20) returned 1 [0031.314] CallWindowProcW (lpPrevWndFunc=0x7716b0ac, hWnd=0x30276, Msg=0x83, wParam=0x1, lParam=0x12cf80) returned 0x0 [0031.316] CallWindowProcW (lpPrevWndFunc=0x7716b0ac, hWnd=0x30276, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0031.317] GetWindowPlacement (in: hWnd=0x30276, lpwndpl=0x12ca30 | out: lpwndpl=0x12ca30) returned 1 [0031.317] GetClientRect (in: hWnd=0x30276, lpRect=0x12c8e0 | out: lpRect=0x12c8e0) returned 1 [0031.317] GetWindowTextLengthW (hWnd=0x30276) returned 5 [0031.317] CallWindowProcW (lpPrevWndFunc=0x7716b0ac, hWnd=0x30276, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x5 [0031.317] GetSystemMetrics (nIndex=42) returned 0 [0031.317] CoTaskMemAlloc (cb=0x10) returned 0x2990d0 [0031.317] GetWindowTextW (in: hWnd=0x30276, lpString=0x2990d0, nMaxCount=6 | out: lpString="Form1") returned 5 [0031.317] CallWindowProcW (lpPrevWndFunc=0x7716b0ac, hWnd=0x30276, Msg=0xd, wParam=0x6, lParam=0x2990d0) returned 0x5 [0031.318] CoTaskMemFree (pv=0x2990d0) [0031.318] GetClientRect (in: hWnd=0x30276, lpRect=0x12c680 | out: lpRect=0x12c680) returned 1 [0031.318] SelectPalette (hdc=0x7010787, hPal=0x330801be, bForceBkgd=1) returned 0x188000b [0031.318] GdipCreateFromHDC (hdc=0x7010787, graphics=0x12c250) returned 0x0 [0031.318] GdipSetPageUnit (graphics=0x1b1cd3c0, unit=0x2) returned 0x0 [0031.318] GdipCreateMatrix (matrix=0x12c140) returned 0x0 [0031.318] GdipGetWorldTransform (graphics=0x1b1cd3c0, matrix=0x1b3541a0) returned 0x0 [0031.318] GdipIsMatrixIdentity (matrix=0x1b3541a0, result=0x12c1a0) returned 0x0 [0031.318] FindAtomW (lpString="GDI+Atom_808_1") returned 0xc000 [0031.318] GdipDeleteMatrix (matrix=0x1b3541a0) returned 0x0 [0031.318] GdipCreateRegion (region=0x12c140) returned 0x0 [0031.318] GdipGetClip (graphics=0x1b1cd3c0, region=0x1b35e7b0) returned 0x0 [0031.318] GdipIsInfiniteRegion (region=0x1b35e7b0, graphics=0x1b1cd3c0, result=0x12c170) returned 0x0 [0031.318] FindAtomW (lpString="GDI+Atom_808_1") returned 0xc000 [0031.318] GdipDeleteRegion (region=0x1b35e7b0) returned 0x0 [0031.318] GdipSaveGraphics (graphics=0x1b1cd3c0, state=0x12c240) returned 0x0 [0031.318] GdipCreateRegion (region=0x12c110) returned 0x0 [0031.318] GdipGetClip (graphics=0x1b1cd3c0, region=0x1b35e7b0) returned 0x0 [0031.318] GdipCreateMatrix (matrix=0x12c110) returned 0x0 [0031.318] GdipGetWorldTransform (graphics=0x1b1cd3c0, matrix=0x1b1cd790) returned 0x0 [0031.319] GdipIsMatrixIdentity (matrix=0x1b1cd790, result=0x12c170) returned 0x0 [0031.319] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1af0e920 [0031.319] GdipGetMatrixElements (matrix=0x1b1cd790, matrixOut=0x1af0e920) returned 0x0 [0031.319] LocalFree (hMem=0x1af0e920) returned 0x0 [0031.319] FindAtomW (lpString="GDI+Atom_808_1") returned 0xc000 [0031.319] GdipDeleteMatrix (matrix=0x1b1cd790) returned 0x0 [0031.319] GdipIsInfiniteRegion (region=0x1b35e7b0, graphics=0x1b1cd3c0, result=0x12c1c0) returned 0x0 [0031.319] FindAtomW (lpString="GDI+Atom_808_1") returned 0xc000 [0031.319] GdipDeleteRegion (region=0x1b35e7b0) returned 0x0 [0031.319] GdipGetDC (graphics=0x1b1cd3c0, hdc=0x12c1f0) returned 0x0 [0031.319] GetCurrentObject (hdc=0x7010787, type=0x1) returned 0x1b00017 [0031.319] GetCurrentObject (hdc=0x7010787, type=0x2) returned 0x1900010 [0031.319] GetCurrentObject (hdc=0x7010787, type=0x7) returned 0x2405079e [0031.319] GetCurrentObject (hdc=0x7010787, type=0x6) returned 0x18a002e [0031.319] SaveDC (hdc=0x7010787) returned 1 [0031.320] OffsetViewportOrgEx (in: hdc=0x7010787, x=0, y=0, lppt=0x26845c8 | out: lppt=0x26845c8) returned 1 [0031.320] GetNearestColor (hdc=0x7010787, color=0xf0f0f0) returned 0xf0f0f0 [0031.320] CreateSolidBrush (color=0xf0f0f0) returned 0x17100a23 [0031.320] FillRect (hDC=0x7010787, lprc=0x12c1c0, hbr=0x17100a23) returned 1 [0031.320] DeleteObject (ho=0x17100a23) returned 1 [0031.320] RestoreDC (hdc=0x7010787, nSavedDC=-1) returned 1 [0031.320] FindAtomW (lpString="GDI+Atom_808_1") returned 0xc000 [0031.320] GdipReleaseDC (graphics=0x1b1cd3c0, hdc=0x7010787) returned 0x0 [0031.320] FindAtomW (lpString="GDI+Atom_808_1") returned 0xc000 [0031.320] GdipDeleteGraphics (graphics=0x1b1cd3c0) returned 0x0 [0031.320] SelectPalette (hdc=0x7010787, hPal=0x188000b, bForceBkgd=0) returned 0x330801be [0031.321] SetWindowLongPtrW (hWnd=0x30276, nIndex=-8, dwNewLong=0x30270) returned 0x30270 [0031.322] SendMessageW (hWnd=0x30270, Msg=0x80, wParam=0x1, lParam=0x50127) returned 0x0 [0031.322] CallWindowProcW (lpPrevWndFunc=0x7716b0ac, hWnd=0x30270, Msg=0x80, wParam=0x1, lParam=0x50127) returned 0x0 [0031.332] CallWindowProcW (lpPrevWndFunc=0x7716b0ac, hWnd=0x30270, Msg=0xd, wParam=0x104, lParam=0x1b1048b0) returned 0x0 [0031.333] CallWindowProcW (lpPrevWndFunc=0x7716b0ac, hWnd=0x30270, Msg=0xd, wParam=0x104, lParam=0x1b1048b0) returned 0x0 [0031.333] GetWindowLongPtrW (hWnd=0x30276, nIndex=-16) returned 0x16cf0000 [0031.333] GetWindowTextLengthW (hWnd=0x30276) returned 5 [0031.333] CallWindowProcW (lpPrevWndFunc=0x7716b0ac, hWnd=0x30276, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x5 [0031.333] GetSystemMetrics (nIndex=42) returned 0 [0031.333] CoTaskMemAlloc (cb=0x10) returned 0x2990d0 [0031.333] GetWindowTextW (in: hWnd=0x30276, lpString=0x2990d0, nMaxCount=6 | out: lpString="Form1") returned 5 [0031.333] CallWindowProcW (lpPrevWndFunc=0x7716b0ac, hWnd=0x30276, Msg=0xd, wParam=0x6, lParam=0x2990d0) returned 0x5 [0031.333] CoTaskMemFree (pv=0x2990d0) [0031.333] GetWindowTextLengthW (hWnd=0x30276) returned 5 [0031.333] CallWindowProcW (lpPrevWndFunc=0x7716b0ac, hWnd=0x30276, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x5 [0031.333] GetSystemMetrics (nIndex=42) returned 0 [0031.333] CoTaskMemAlloc (cb=0x10) returned 0x2990d0 [0031.334] GetWindowTextW (in: hWnd=0x30276, lpString=0x2990d0, nMaxCount=6 | out: lpString="Form1") returned 5 [0031.334] CallWindowProcW (lpPrevWndFunc=0x7716b0ac, hWnd=0x30276, Msg=0xd, wParam=0x6, lParam=0x2990d0) returned 0x5 [0031.334] CoTaskMemFree (pv=0x2990d0) [0031.334] GetWindowLongPtrW (hWnd=0x30276, nIndex=-16) returned 0x16cf0000 [0031.334] GetWindowLongPtrW (hWnd=0x30276, nIndex=-20) returned 0x90100 [0031.334] SetWindowLongPtrW (hWnd=0x30276, nIndex=-16, dwNewLong=0x12cf0000) returned 0x16cf0000 [0031.334] CallWindowProcW (lpPrevWndFunc=0x7716b0ac, hWnd=0x30276, Msg=0x7c, wParam=0xfffffffffffffff0, lParam=0x12d6a0) returned 0x0 [0031.334] CallWindowProcW (lpPrevWndFunc=0x7716b0ac, hWnd=0x30276, Msg=0x7d, wParam=0xfffffffffffffff0, lParam=0x12d6a0) returned 0x0 [0031.334] SetWindowLongPtrW (hWnd=0x30276, nIndex=-20, dwNewLong=0x90000) returned 0x90100 [0031.334] CallWindowProcW (lpPrevWndFunc=0x7716b0ac, hWnd=0x30276, Msg=0x7c, wParam=0xffffffffffffffec, lParam=0x12d6a0) returned 0x0 [0031.334] CallWindowProcW (lpPrevWndFunc=0x7716b0ac, hWnd=0x30276, Msg=0x7d, wParam=0xffffffffffffffec, lParam=0x12d6a0) returned 0x0 [0031.335] SetWindowPos (hWnd=0x30276, hWndInsertAfter=0x0, X=0, Y=0, cx=0, cy=0, uFlags=0x37) returned 1 [0031.335] CallWindowProcW (lpPrevWndFunc=0x7716b0ac, hWnd=0x30276, Msg=0x46, wParam=0x0, lParam=0x12d740) returned 0x0 [0031.335] CallWindowProcW (lpPrevWndFunc=0x7716b0ac, hWnd=0x30276, Msg=0x83, wParam=0x1, lParam=0x12d710) returned 0x0 [0031.337] CallWindowProcW (lpPrevWndFunc=0x7716b0ac, hWnd=0x30276, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0031.338] GetWindowPlacement (in: hWnd=0x30276, lpwndpl=0x12d1c0 | out: lpwndpl=0x12d1c0) returned 1 [0031.338] GetClientRect (in: hWnd=0x30276, lpRect=0x12d070 | out: lpRect=0x12d070) returned 1 [0031.339] GetWindowTextLengthW (hWnd=0x30276) returned 5 [0031.339] CallWindowProcW (lpPrevWndFunc=0x7716b0ac, hWnd=0x30276, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x5 [0031.339] GetSystemMetrics (nIndex=42) returned 0 [0031.339] CoTaskMemAlloc (cb=0x10) returned 0x2990d0 [0031.339] GetWindowTextW (in: hWnd=0x30276, lpString=0x2990d0, nMaxCount=6 | out: lpString="Form1") returned 5 [0031.339] CallWindowProcW (lpPrevWndFunc=0x7716b0ac, hWnd=0x30276, Msg=0xd, wParam=0x6, lParam=0x2990d0) returned 0x5 [0031.339] CoTaskMemFree (pv=0x2990d0) [0031.339] GetClientRect (in: hWnd=0x30276, lpRect=0x12ce10 | out: lpRect=0x12ce10) returned 1 [0031.339] SelectPalette (hdc=0x180106e2, hPal=0x330801be, bForceBkgd=1) returned 0x188000b [0031.339] GdipCreateFromHDC (hdc=0x180106e2, graphics=0x12c9e0) returned 0x0 [0031.339] GdipSetPageUnit (graphics=0x1b1cd3c0, unit=0x2) returned 0x0 [0031.339] GdipCreateMatrix (matrix=0x12c8d0) returned 0x0 [0031.340] GdipGetWorldTransform (graphics=0x1b1cd3c0, matrix=0x1b3541a0) returned 0x0 [0031.340] GdipIsMatrixIdentity (matrix=0x1b3541a0, result=0x12c930) returned 0x0 [0031.340] FindAtomW (lpString="GDI+Atom_808_1") returned 0xc000 [0031.340] GdipDeleteMatrix (matrix=0x1b3541a0) returned 0x0 [0031.340] GdipCreateRegion (region=0x12c8d0) returned 0x0 [0031.340] GdipGetClip (graphics=0x1b1cd3c0, region=0x1b35e7b0) returned 0x0 [0031.340] GdipIsInfiniteRegion (region=0x1b35e7b0, graphics=0x1b1cd3c0, result=0x12c900) returned 0x0 [0031.340] FindAtomW (lpString="GDI+Atom_808_1") returned 0xc000 [0031.340] GdipDeleteRegion (region=0x1b35e7b0) returned 0x0 [0031.340] GdipSaveGraphics (graphics=0x1b1cd3c0, state=0x12c9d0) returned 0x0 [0031.340] GdipCreateRegion (region=0x12c8a0) returned 0x0 [0031.340] GdipGetClip (graphics=0x1b1cd3c0, region=0x1b35e7b0) returned 0x0 [0031.340] GdipCreateMatrix (matrix=0x12c8a0) returned 0x0 [0031.340] GdipGetWorldTransform (graphics=0x1b1cd3c0, matrix=0x1b1cd790) returned 0x0 [0031.340] GdipIsMatrixIdentity (matrix=0x1b1cd790, result=0x12c900) returned 0x0 [0031.340] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1af0e920 [0031.340] GdipGetMatrixElements (matrix=0x1b1cd790, matrixOut=0x1af0e920) returned 0x0 [0031.340] LocalFree (hMem=0x1af0e920) returned 0x0 [0031.341] FindAtomW (lpString="GDI+Atom_808_1") returned 0xc000 [0031.341] GdipDeleteMatrix (matrix=0x1b1cd790) returned 0x0 [0031.341] GdipIsInfiniteRegion (region=0x1b35e7b0, graphics=0x1b1cd3c0, result=0x12c950) returned 0x0 [0031.341] FindAtomW (lpString="GDI+Atom_808_1") returned 0xc000 [0031.341] GdipDeleteRegion (region=0x1b35e7b0) returned 0x0 [0031.341] GdipGetDC (graphics=0x1b1cd3c0, hdc=0x12c980) returned 0x0 [0031.341] GetCurrentObject (hdc=0x180106e2, type=0x1) returned 0x1b00017 [0031.341] GetCurrentObject (hdc=0x180106e2, type=0x2) returned 0x1900010 [0031.341] GetCurrentObject (hdc=0x180106e2, type=0x7) returned 0x2405079e [0031.341] GetCurrentObject (hdc=0x180106e2, type=0x6) returned 0x18a002e [0031.341] SaveDC (hdc=0x180106e2) returned 1 [0031.341] OffsetViewportOrgEx (in: hdc=0x180106e2, x=0, y=0, lppt=0x2684bb8 | out: lppt=0x2684bb8) returned 1 [0031.341] GetNearestColor (hdc=0x180106e2, color=0xf0f0f0) returned 0xf0f0f0 [0031.342] CreateSolidBrush (color=0xf0f0f0) returned 0x18100a23 [0031.342] FillRect (hDC=0x180106e2, lprc=0x12c950, hbr=0x18100a23) returned 1 [0031.342] DeleteObject (ho=0x18100a23) returned 1 [0031.342] RestoreDC (hdc=0x180106e2, nSavedDC=-1) returned 1 [0031.342] FindAtomW (lpString="GDI+Atom_808_1") returned 0xc000 [0031.342] GdipReleaseDC (graphics=0x1b1cd3c0, hdc=0x180106e2) returned 0x0 [0031.342] FindAtomW (lpString="GDI+Atom_808_1") returned 0xc000 [0031.342] GdipDeleteGraphics (graphics=0x1b1cd3c0) returned 0x0 [0031.342] SelectPalette (hdc=0x180106e2, hPal=0x188000b, bForceBkgd=0) returned 0x330801be [0031.342] GetWindowPlacement (in: hWnd=0x30276, lpwndpl=0x12d1a0 | out: lpwndpl=0x12d1a0) returned 1 [0031.342] CallWindowProcW (lpPrevWndFunc=0x7716b0ac, hWnd=0x30276, Msg=0x47, wParam=0x0, lParam=0x12d740) returned 0x0 [0031.342] GetClientRect (in: hWnd=0x30276, lpRect=0x12cf40 | out: lpRect=0x12cf40) returned 1 [0031.343] GetWindowRect (in: hWnd=0x30276, lpRect=0x12cf40 | out: lpRect=0x12cf40) returned 1 [0031.343] RedrawWindow (hWnd=0x30276, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1 [0031.343] GetSystemMenu (hWnd=0x30276, bRevert=0) returned 0xd0221 [0031.343] GetWindowPlacement (in: hWnd=0x30276, lpwndpl=0x12d660 | out: lpwndpl=0x12d660) returned 1 [0031.343] EnableMenuItem (hMenu=0xd0221, uIDEnableItem=0xf020, uEnable=0x0) returned 0 [0031.343] EnableMenuItem (hMenu=0xd0221, uIDEnableItem=0xf030, uEnable=0x0) returned 0 [0031.343] EnableMenuItem (hMenu=0xd0221, uIDEnableItem=0xf060, uEnable=0x0) returned 0 [0031.343] EnableMenuItem (hMenu=0xd0221, uIDEnableItem=0xf120, uEnable=0x1) returned 1 [0031.343] EnableMenuItem (hMenu=0xd0221, uIDEnableItem=0xf000, uEnable=0x0) returned 0 [0031.344] SetWindowLongPtrW (hWnd=0x50016, nIndex=-8, dwNewLong=0x30276) returned 0x60094 [0031.520] CoTaskMemAlloc (cb=0x204) returned 0x1af17270 [0031.520] GetComputerNameW (in: lpBuffer=0x1af17270, nSize=0x12dc58 | out: lpBuffer="XDUWTFONO", nSize=0x12dc58) returned 1 [0031.520] CoTaskMemFree (pv=0x1af17270) [0031.549] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x1ac [0031.552] CreateEventW (lpEventAttributes=0x0, bManualReset=1, bInitialState=0, lpName=0x0) returned 0x1b0 [0031.746] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ssvchost.config", nBufferLength=0x105, lpBuffer=0x12d300, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ssvchost.config", lpFilePart=0x0) returned 0x35 [0031.746] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ssvchost.config", nBufferLength=0x105, lpBuffer=0x12d200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ssvchost.config", lpFilePart=0x0) returned 0x35 [0031.755] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ssvchost.exe", nBufferLength=0x105, lpBuffer=0x12d1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ssvchost.exe", lpFilePart=0x0) returned 0x32 [0031.907] GetVersionExW (in: lpVersionInformation=0x12d230*(dwOSVersionInfoSize=0x114, dwMajorVersion=0x0, dwMinorVersion=0x0, dwBuildNumber=0x0, dwPlatformId=0x0, szCSDVersion="") | out: lpVersionInformation=0x12d230*(dwOSVersionInfoSize=0x114, dwMajorVersion=0x6, dwMinorVersion=0x1, dwBuildNumber=0x1db1, dwPlatformId=0x2, szCSDVersion="Service Pack 1")) returned 1 [0031.908] GetCurrentProcess () returned 0xffffffffffffffff [0031.909] OpenProcessToken (in: ProcessHandle=0xffffffffffffffff, DesiredAccess=0x2000000, TokenHandle=0x12d2c8 | out: TokenHandle=0x12d2c8*=0x1b4) returned 1 [0031.918] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\", nBufferLength=0x105, lpBuffer=0x12cf20, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\", lpFilePart=0x0) returned 0x30 [0031.950] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\Config\\machine.config" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\config\\machine.config"), fInfoLevelId=0x0, lpFileInformation=0x12d370 | out: lpFileInformation=0x12d370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdf9bf7e3, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xdf9bf7e3, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x76d072b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x622a)) returned 1 [0031.952] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\Config\\machine.config", nBufferLength=0x105, lpBuffer=0x12cec0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\Config\\machine.config", lpFilePart=0x0) returned 0x45 [0031.952] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\Config\\machine.config" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\config\\machine.config"), fInfoLevelId=0x0, lpFileInformation=0x12d320 | out: lpFileInformation=0x12d320*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdf9bf7e3, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xdf9bf7e3, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x76d072b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x622a)) returned 1 [0031.957] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\Config\\machine.config", nBufferLength=0x105, lpBuffer=0x12cd00, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\Config\\machine.config", lpFilePart=0x0) returned 0x45 [0031.958] SetErrorMode (uMode=0x1) returned 0x0 [0031.960] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\Config\\machine.config" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\config\\machine.config"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1c8 [0031.960] GetFileType (hFile=0x1c8) returned 0x1 [0031.961] SetErrorMode (uMode=0x0) returned 0x1 [0031.961] GetFileType (hFile=0x1c8) returned 0x1 [0031.978] GetFileSize (in: hFile=0x1c8, lpFileSizeHigh=0x12d318 | out: lpFileSizeHigh=0x12d318*=0x0) returned 0x622a [0031.981] ReadFile (in: hFile=0x1c8, lpBuffer=0x268ac48, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12d238, lpOverlapped=0x0 | out: lpBuffer=0x268ac48*, lpNumberOfBytesRead=0x12d238*=0x1000, lpOverlapped=0x0) returned 1 [0032.011] ReadFile (in: hFile=0x1c8, lpBuffer=0x268ac48, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12cd68, lpOverlapped=0x0 | out: lpBuffer=0x268ac48*, lpNumberOfBytesRead=0x12cd68*=0x1000, lpOverlapped=0x0) returned 1 [0032.012] ReadFile (in: hFile=0x1c8, lpBuffer=0x268ac48, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12cd68, lpOverlapped=0x0 | out: lpBuffer=0x268ac48*, lpNumberOfBytesRead=0x12cd68*=0x1000, lpOverlapped=0x0) returned 1 [0032.012] ReadFile (in: hFile=0x1c8, lpBuffer=0x268ac48, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12cd68, lpOverlapped=0x0 | out: lpBuffer=0x268ac48*, lpNumberOfBytesRead=0x12cd68*=0x1000, lpOverlapped=0x0) returned 1 [0032.012] ReadFile (in: hFile=0x1c8, lpBuffer=0x268ac48, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12cd68, lpOverlapped=0x0 | out: lpBuffer=0x268ac48*, lpNumberOfBytesRead=0x12cd68*=0x1000, lpOverlapped=0x0) returned 1 [0032.024] ReadFile (in: hFile=0x1c8, lpBuffer=0x268ac48, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12cea8, lpOverlapped=0x0 | out: lpBuffer=0x268ac48*, lpNumberOfBytesRead=0x12cea8*=0x1000, lpOverlapped=0x0) returned 1 [0032.024] ReadFile (in: hFile=0x1c8, lpBuffer=0x268ac48, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12cd28, lpOverlapped=0x0 | out: lpBuffer=0x268ac48*, lpNumberOfBytesRead=0x12cd28*=0x22a, lpOverlapped=0x0) returned 1 [0032.024] ReadFile (in: hFile=0x1c8, lpBuffer=0x268ac48, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12cdc8, lpOverlapped=0x0 | out: lpBuffer=0x268ac48*, lpNumberOfBytesRead=0x12cdc8*=0x0, lpOverlapped=0x0) returned 1 [0032.025] CloseHandle (hObject=0x1c8) returned 1 [0032.028] GetCurrentProcess () returned 0xffffffffffffffff [0032.028] OpenProcessToken (in: ProcessHandle=0xffffffffffffffff, DesiredAccess=0x2000000, TokenHandle=0x12d528 | out: TokenHandle=0x12d528*=0x1c8) returned 1 [0032.029] GetCurrentProcess () returned 0xffffffffffffffff [0032.029] OpenProcessToken (in: ProcessHandle=0xffffffffffffffff, DesiredAccess=0x2000000, TokenHandle=0x12d528 | out: TokenHandle=0x12d528*=0x1cc) returned 1 [0032.031] GetCurrentProcess () returned 0xffffffffffffffff [0032.031] OpenProcessToken (in: ProcessHandle=0xffffffffffffffff, DesiredAccess=0x2000000, TokenHandle=0x12d2c8 | out: TokenHandle=0x12d2c8*=0x1d0) returned 1 [0032.031] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ssvchost.config" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ssvchost.config"), fInfoLevelId=0x0, lpFileInformation=0x12d370 | out: lpFileInformation=0x12d370*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0032.033] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ssvchost.config", nBufferLength=0x105, lpBuffer=0x12cec0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ssvchost.config", lpFilePart=0x0) returned 0x35 [0032.033] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ssvchost.config" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ssvchost.config"), fInfoLevelId=0x0, lpFileInformation=0x12d320 | out: lpFileInformation=0x12d320*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0032.034] GetCurrentProcess () returned 0xffffffffffffffff [0032.034] OpenProcessToken (in: ProcessHandle=0xffffffffffffffff, DesiredAccess=0x2000000, TokenHandle=0x12d528 | out: TokenHandle=0x12d528*=0x1d4) returned 1 [0032.035] GetCurrentProcess () returned 0xffffffffffffffff [0032.035] OpenProcessToken (in: ProcessHandle=0xffffffffffffffff, DesiredAccess=0x2000000, TokenHandle=0x12d528 | out: TokenHandle=0x12d528*=0x1d8) returned 1 [0032.076] GetCurrentProcess () returned 0xffffffffffffffff [0032.076] OpenProcessToken (in: ProcessHandle=0xffffffffffffffff, DesiredAccess=0x2000000, TokenHandle=0x12d1a8 | out: TokenHandle=0x12d1a8*=0x1dc) returned 1 [0032.136] GetCurrentProcess () returned 0xffffffffffffffff [0032.136] OpenProcessToken (in: ProcessHandle=0xffffffffffffffff, DesiredAccess=0x2000000, TokenHandle=0x12d1a8 | out: TokenHandle=0x12d1a8*=0x1e0) returned 1 [0032.205] GetCurrentProcess () returned 0xffffffffffffffff [0032.205] OpenProcessToken (in: ProcessHandle=0xffffffffffffffff, DesiredAccess=0x2000000, TokenHandle=0x12d2d8 | out: TokenHandle=0x12d2d8*=0x1e4) returned 1 [0032.227] GetCurrentProcess () returned 0xffffffffffffffff [0032.227] OpenProcessToken (in: ProcessHandle=0xffffffffffffffff, DesiredAccess=0x2000000, TokenHandle=0x12d2d8 | out: TokenHandle=0x12d2d8*=0x1e8) returned 1 [0032.249] GetCurrentProcess () returned 0xffffffffffffffff [0032.249] OpenProcessToken (in: ProcessHandle=0xffffffffffffffff, DesiredAccess=0x2000000, TokenHandle=0x12d218 | out: TokenHandle=0x12d218*=0x1ec) returned 1 [0032.257] GetCurrentProcess () returned 0xffffffffffffffff [0032.257] OpenProcessToken (in: ProcessHandle=0xffffffffffffffff, DesiredAccess=0x2000000, TokenHandle=0x12d218 | out: TokenHandle=0x12d218*=0x1f0) returned 1 [0032.261] GetCurrentProcess () returned 0xffffffffffffffff [0032.261] OpenProcessToken (in: ProcessHandle=0xffffffffffffffff, DesiredAccess=0x2000000, TokenHandle=0x12d858 | out: TokenHandle=0x12d858*=0x1f4) returned 1 [0032.273] RegOpenKeyExW (in: hKey=0xffffffff80000002, lpSubKey="Software\\Microsoft\\Windows NT\\CurrentVersion", ulOptions=0x0, samDesired=0x20019, phkResult=0x12b918 | out: phkResult=0x12b918*=0x1f8) returned 0x0 [0032.274] RegQueryValueExW (in: hKey=0x1f8, lpValueName="InstallationType", lpReserved=0x0, lpType=0x12b89c, lpData=0x0, lpcbData=0x12b898*=0x0 | out: lpType=0x12b89c*=0x1, lpData=0x0, lpcbData=0x12b898*=0xe) returned 0x0 [0032.274] CoTaskMemAlloc (cb=0x12) returned 0x1af03a60 [0032.274] RegQueryValueExW (in: hKey=0x1f8, lpValueName="InstallationType", lpReserved=0x0, lpType=0x12b86c, lpData=0x1af03a60, lpcbData=0x12b868*=0xe | out: lpType=0x12b86c*=0x1, lpData="Client", lpcbData=0x12b868*=0xe) returned 0x0 [0032.275] CoTaskMemFree (pv=0x1af03a60) [0032.275] RegCloseKey (hKey=0x1f8) returned 0x0 [0032.882] CoTaskMemAlloc (cb=0xcd0) returned 0x2860a0 [0032.882] RasEnumConnectionsW (in: param_1=0x2860a0, param_2=0x12d8ac, param_3=0x12d8a8 | out: param_1=0x2860a0, param_2=0x12d8ac, param_3=0x12d8a8) returned 0x0 [0032.987] CoTaskMemFree (pv=0x2860a0) [0032.997] WSAStartup (in: wVersionRequired=0x202, lpWSAData=0x12d6b8 | out: lpWSAData=0x12d6b8) returned 0 [0033.009] WSASocketW (af=2, type=2, protocol=0, lpProtocolInfo=0x0, g=0x0, dwFlags=0x0) returned 0x274 [0033.228] setsockopt (s=0x274, level=65535, optname=128, optval="\x01", optlen=4) returned -1 [0033.228] closesocket (s=0x274) returned 0 [0033.228] WSASocketW (af=23, type=2, protocol=0, lpProtocolInfo=0x0, g=0x0, dwFlags=0x0) returned 0x274 [0033.233] setsockopt (s=0x274, level=65535, optname=128, optval="\x01", optlen=4) returned -1 [0033.233] closesocket (s=0x274) returned 0 [0033.239] GetCurrentProcess () returned 0xffffffffffffffff [0033.239] OpenProcessToken (in: ProcessHandle=0xffffffffffffffff, DesiredAccess=0x2000000, TokenHandle=0x12cf38 | out: TokenHandle=0x12cf38*=0x274) returned 1 [0033.251] GetCurrentProcess () returned 0xffffffffffffffff [0033.251] OpenProcessToken (in: ProcessHandle=0xffffffffffffffff, DesiredAccess=0x2000000, TokenHandle=0x12cf38 | out: TokenHandle=0x12cf38*=0x278) returned 1 [0033.385] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ssvchost.exe", nBufferLength=0x105, lpBuffer=0x12cef0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ssvchost.exe", lpFilePart=0x0) returned 0x32 [0033.391] GetCurrentProcessId () returned 0x328 [0033.416] CoTaskMemAlloc (cb=0x204) returned 0x285410 [0033.416] GetComputerNameW (in: lpBuffer=0x285410, nSize=0x26bbb18 | out: lpBuffer="XDUWTFONO", nSize=0x26bbb18) returned 1 [0033.416] CoTaskMemFree (pv=0x285410) [0033.418] RegOpenKeyExW (in: hKey=0xffffffff80000002, lpSubKey="SYSTEM\\CurrentControlSet\\Services\\.NET CLR Networking\\Performance", ulOptions=0x0, samDesired=0x20019, phkResult=0x12d418 | out: phkResult=0x12d418*=0x27c) returned 0x0 [0033.418] RegQueryValueExW (in: hKey=0x27c, lpValueName="Library", lpReserved=0x0, lpType=0x12d39c, lpData=0x0, lpcbData=0x12d398*=0x0 | out: lpType=0x12d39c*=0x1, lpData=0x0, lpcbData=0x12d398*=0x1c) returned 0x0 [0033.418] CoTaskMemAlloc (cb=0x20) returned 0x1af1a0a0 [0033.418] RegQueryValueExW (in: hKey=0x27c, lpValueName="Library", lpReserved=0x0, lpType=0x12d36c, lpData=0x1af1a0a0, lpcbData=0x12d368*=0x1c | out: lpType=0x12d36c*=0x1, lpData="netfxperf.dll", lpcbData=0x12d368*=0x1c) returned 0x0 [0033.418] CoTaskMemFree (pv=0x1af1a0a0) [0033.418] RegQueryValueExW (in: hKey=0x27c, lpValueName="IsMultiInstance", lpReserved=0x0, lpType=0x12d39c, lpData=0x0, lpcbData=0x12d398*=0x0 | out: lpType=0x12d39c*=0x4, lpData=0x0, lpcbData=0x12d398*=0x4) returned 0x0 [0033.419] RegQueryValueExW (in: hKey=0x27c, lpValueName="IsMultiInstance", lpReserved=0x0, lpType=0x12d3a0, lpData=0x12d39c, lpcbData=0x12d398*=0x4 | out: lpType=0x12d3a0*=0x4, lpData=0x12d39c*=0x1, lpcbData=0x12d398*=0x4) returned 0x0 [0033.419] RegQueryValueExW (in: hKey=0x27c, lpValueName="First Counter", lpReserved=0x0, lpType=0x12d39c, lpData=0x0, lpcbData=0x12d398*=0x0 | out: lpType=0x12d39c*=0x4, lpData=0x0, lpcbData=0x12d398*=0x4) returned 0x0 [0033.419] RegQueryValueExW (in: hKey=0x27c, lpValueName="First Counter", lpReserved=0x0, lpType=0x12d3a0, lpData=0x12d39c, lpcbData=0x12d398*=0x4 | out: lpType=0x12d3a0*=0x4, lpData=0x12d39c*=0x137a, lpcbData=0x12d398*=0x4) returned 0x0 [0033.419] RegCloseKey (hKey=0x27c) returned 0x0 [0033.423] RegOpenKeyExW (in: hKey=0xffffffff80000002, lpSubKey="SYSTEM\\CurrentControlSet\\Services\\.net clr networking\\Performance", ulOptions=0x0, samDesired=0x20019, phkResult=0x12d3d8 | out: phkResult=0x12d3d8*=0x27c) returned 0x0 [0033.423] RegQueryValueExW (in: hKey=0x27c, lpValueName="CategoryOptions", lpReserved=0x0, lpType=0x12d35c, lpData=0x0, lpcbData=0x12d358*=0x0 | out: lpType=0x12d35c*=0x4, lpData=0x0, lpcbData=0x12d358*=0x4) returned 0x0 [0033.423] RegQueryValueExW (in: hKey=0x27c, lpValueName="CategoryOptions", lpReserved=0x0, lpType=0x12d360, lpData=0x12d35c, lpcbData=0x12d358*=0x4 | out: lpType=0x12d360*=0x4, lpData=0x12d35c*=0x3, lpcbData=0x12d358*=0x4) returned 0x0 [0033.423] RegQueryValueExW (in: hKey=0x27c, lpValueName="FileMappingSize", lpReserved=0x0, lpType=0x12d35c, lpData=0x0, lpcbData=0x12d358*=0x0 | out: lpType=0x12d35c*=0x4, lpData=0x0, lpcbData=0x12d358*=0x4) returned 0x0 [0033.423] RegQueryValueExW (in: hKey=0x27c, lpValueName="FileMappingSize", lpReserved=0x0, lpType=0x12d360, lpData=0x12d35c, lpcbData=0x12d358*=0x4 | out: lpType=0x12d360*=0x4, lpData=0x12d35c*=0x20000, lpcbData=0x12d358*=0x4) returned 0x0 [0033.423] RegQueryValueExW (in: hKey=0x27c, lpValueName="Counter Names", lpReserved=0x0, lpType=0x12d35c, lpData=0x0, lpcbData=0x12d358*=0x0 | out: lpType=0x12d35c*=0x3, lpData=0x0, lpcbData=0x12d358*=0xaa) returned 0x0 [0033.423] RegQueryValueExW (in: hKey=0x27c, lpValueName="Counter Names", lpReserved=0x0, lpType=0x12d35c, lpData=0x26bee00, lpcbData=0x12d358*=0xaa | out: lpType=0x12d35c*=0x3, lpData=0x26bee00*, lpcbData=0x12d358*=0xaa) returned 0x0 [0033.428] ConvertStringSecurityDescriptorToSecurityDescriptorW () returned 0x1 [0033.433] CreateFileMappingW (hFile=0xffffffffffffffff, lpFileMappingAttributes=0x12d310, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x20000, lpName="Global\\netfxcustomperfcounters.1.0.net clr networking") returned 0x284 [0033.435] MapViewOfFile (hFileMappingObject=0x284, dwDesiredAccess=0x2, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0xaa0000 [0033.436] VirtualQuery (in: lpAddress=0xaa0000, lpBuffer=0x12d308, dwLength=0x30 | out: lpBuffer=0x12d308*(BaseAddress=0xaa0000, AllocationBase=0xaa0000, AllocationProtect=0x4, __alignment1=0xfffff880, RegionSize=0x20000, State=0x1000, Protect=0x4, Type=0x40000, __alignment2=0x0)) returned 0x30 [0033.436] LocalFree (hMem=0x281c10) returned 0x0 [0033.436] RegCloseKey (hKey=0x27c) returned 0x0 [0033.441] GetVersionExW (in: lpVersionInformation=0x12c2e0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0x0, dwMinorVersion=0x0, dwBuildNumber=0x0, dwPlatformId=0x0, szCSDVersion="") | out: lpVersionInformation=0x12c2e0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0x6, dwMinorVersion=0x1, dwBuildNumber=0x1db1, dwPlatformId=0x2, szCSDVersion="Service Pack 1")) returned 1 [0033.442] GetVersionExW (in: lpVersionInformation=0x12c2b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0x0, dwMinorVersion=0x0, dwBuildNumber=0x0, dwPlatformId=0x0, szCSDVersion="") | out: lpVersionInformation=0x12c2b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0x6, dwMinorVersion=0x1, dwBuildNumber=0x1db1, dwPlatformId=0x2, szCSDVersion="Service Pack 1")) returned 1 [0033.444] CreateWellKnownSid (in: WellKnownSidType=0x11, DomainSid=0x0, pSid=0x26bfb28, cbSid=0x12d2f0 | out: pSid=0x26bfb28*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=0xb), cbSid=0x12d2f0) returned 1 [0033.449] CreateMutexW (lpMutexAttributes=0x26bfd50, bInitialOwner=0, lpName="Global\\.net clr networking") returned 0x27c [0033.452] WaitForSingleObject (hHandle=0x27c, dwMilliseconds=0x1f4) returned 0x0 [0033.452] CreateWellKnownSid (in: WellKnownSidType=0x11, DomainSid=0x0, pSid=0x26c0068, cbSid=0x12d250 | out: pSid=0x26c0068*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=0xb), cbSid=0x12d250) returned 1 [0033.452] CreateMutexW (lpMutexAttributes=0x26c0220, bInitialOwner=0, lpName="Global\\.net clr networking") returned 0x0 [0033.453] OpenMutexW (dwDesiredAccess=0x100001, bInheritHandle=0, lpName="Global\\.net clr networking") returned 0x288 [0033.453] WaitForSingleObject (hHandle=0x288, dwMilliseconds=0x1f4) returned 0x0 [0033.454] ReleaseMutex (hMutex=0x288) returned 1 [0033.454] CloseHandle (hObject=0x288) returned 1 [0033.455] GetCurrentProcessId () returned 0x328 [0033.459] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x328) returned 0x288 [0033.460] GetProcessTimes (in: hProcess=0x288, lpCreationTime=0x12d260, lpExitTime=0x12d258, lpKernelTime=0x12d250, lpUserTime=0x12d248 | out: lpCreationTime=0x12d260, lpExitTime=0x12d258, lpKernelTime=0x12d250, lpUserTime=0x12d248) returned 1 [0033.460] CloseHandle (hObject=0x288) returned 1 [0033.461] ReleaseMutex (hMutex=0x27c) returned 1 [0033.461] CloseHandle (hObject=0x27c) returned 1 [0033.462] CreateWellKnownSid (in: WellKnownSidType=0x11, DomainSid=0x0, pSid=0x26c1098, cbSid=0x12d2f0 | out: pSid=0x26c1098*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=0xb), cbSid=0x12d2f0) returned 1 [0033.462] CreateMutexW (lpMutexAttributes=0x26c1250, bInitialOwner=0, lpName="Global\\.net clr networking") returned 0x27c [0033.463] WaitForSingleObject (hHandle=0x27c, dwMilliseconds=0x1f4) returned 0x0 [0033.467] ReleaseMutex (hMutex=0x27c) returned 1 [0033.467] CloseHandle (hObject=0x27c) returned 1 [0033.468] CreateWellKnownSid (in: WellKnownSidType=0x11, DomainSid=0x0, pSid=0x26c2110, cbSid=0x12d2f0 | out: pSid=0x26c2110*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=0xb), cbSid=0x12d2f0) returned 1 [0033.468] CreateMutexW (lpMutexAttributes=0x26c22c8, bInitialOwner=0, lpName="Global\\.net clr networking") returned 0x27c [0033.468] WaitForSingleObject (hHandle=0x27c, dwMilliseconds=0x1f4) returned 0x0 [0033.469] ReleaseMutex (hMutex=0x27c) returned 1 [0033.469] CloseHandle (hObject=0x27c) returned 1 [0033.469] CreateWellKnownSid (in: WellKnownSidType=0x11, DomainSid=0x0, pSid=0x26c2f40, cbSid=0x12d2f0 | out: pSid=0x26c2f40*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=0xb), cbSid=0x12d2f0) returned 1 [0033.469] CreateMutexW (lpMutexAttributes=0x26c30f8, bInitialOwner=0, lpName="Global\\.net clr networking") returned 0x27c [0033.469] WaitForSingleObject (hHandle=0x27c, dwMilliseconds=0x1f4) returned 0x0 [0033.470] ReleaseMutex (hMutex=0x27c) returned 1 [0033.470] CloseHandle (hObject=0x27c) returned 1 [0033.470] CreateWellKnownSid (in: WellKnownSidType=0x11, DomainSid=0x0, pSid=0x26c3d68, cbSid=0x12d2f0 | out: pSid=0x26c3d68*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=0xb), cbSid=0x12d2f0) returned 1 [0033.470] CreateMutexW (lpMutexAttributes=0x26c3f20, bInitialOwner=0, lpName="Global\\.net clr networking") returned 0x27c [0033.471] WaitForSingleObject (hHandle=0x27c, dwMilliseconds=0x1f4) returned 0x0 [0033.471] ReleaseMutex (hMutex=0x27c) returned 1 [0033.471] CloseHandle (hObject=0x27c) returned 1 [0033.474] CreateWellKnownSid (in: WellKnownSidType=0x11, DomainSid=0x0, pSid=0x26c4b98, cbSid=0x12d2a0 | out: pSid=0x26c4b98*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=0xb), cbSid=0x12d2a0) returned 1 [0033.474] CreateMutexW (lpMutexAttributes=0x26c4d50, bInitialOwner=0, lpName="Global\\.net clr networking") returned 0x27c [0033.474] WaitForSingleObject (hHandle=0x27c, dwMilliseconds=0x1f4) returned 0x0 [0033.475] ReleaseMutex (hMutex=0x27c) returned 1 [0033.475] CloseHandle (hObject=0x27c) returned 1 [0033.475] CreateWellKnownSid (in: WellKnownSidType=0x11, DomainSid=0x0, pSid=0x26c59e0, cbSid=0x12d2a0 | out: pSid=0x26c59e0*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=0xb), cbSid=0x12d2a0) returned 1 [0033.475] CreateMutexW (lpMutexAttributes=0x26c5b98, bInitialOwner=0, lpName="Global\\.net clr networking") returned 0x27c [0033.475] WaitForSingleObject (hHandle=0x27c, dwMilliseconds=0x1f4) returned 0x0 [0033.476] ReleaseMutex (hMutex=0x27c) returned 1 [0033.476] CloseHandle (hObject=0x27c) returned 1 [0033.476] CreateWellKnownSid (in: WellKnownSidType=0x11, DomainSid=0x0, pSid=0x26c67f8, cbSid=0x12d2a0 | out: pSid=0x26c67f8*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=0xb), cbSid=0x12d2a0) returned 1 [0033.476] CreateMutexW (lpMutexAttributes=0x26c69b0, bInitialOwner=0, lpName="Global\\.net clr networking") returned 0x27c [0033.476] WaitForSingleObject (hHandle=0x27c, dwMilliseconds=0x1f4) returned 0x0 [0033.479] ReleaseMutex (hMutex=0x27c) returned 1 [0033.479] CloseHandle (hObject=0x27c) returned 1 [0033.479] CreateWellKnownSid (in: WellKnownSidType=0x11, DomainSid=0x0, pSid=0x26c7620, cbSid=0x12d2a0 | out: pSid=0x26c7620*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=0xb), cbSid=0x12d2a0) returned 1 [0033.479] CreateMutexW (lpMutexAttributes=0x26c77d8, bInitialOwner=0, lpName="Global\\.net clr networking") returned 0x27c [0033.479] WaitForSingleObject (hHandle=0x27c, dwMilliseconds=0x1f4) returned 0x0 [0033.480] ReleaseMutex (hMutex=0x27c) returned 1 [0033.480] CloseHandle (hObject=0x27c) returned 1 [0033.481] CreateWellKnownSid (in: WellKnownSidType=0x11, DomainSid=0x0, pSid=0x26c8440, cbSid=0x12d2a0 | out: pSid=0x26c8440*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=0xb), cbSid=0x12d2a0) returned 1 [0033.481] CreateMutexW (lpMutexAttributes=0x26c85f8, bInitialOwner=0, lpName="Global\\.net clr networking") returned 0x27c [0033.481] WaitForSingleObject (hHandle=0x27c, dwMilliseconds=0x1f4) returned 0x0 [0033.481] ReleaseMutex (hMutex=0x27c) returned 1 [0033.482] CloseHandle (hObject=0x27c) returned 1 [0033.486] WSASocketW (af=2, type=2, protocol=0, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0x27c [0033.487] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x288 [0033.488] ioctlsocket (in: s=0x27c, cmd=-2147195266, argp=0x12d8d8 | out: argp=0x12d8d8) returned 0 [0033.488] WSASocketW (af=23, type=2, protocol=0, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0x28c [0033.488] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x290 [0033.489] ioctlsocket (in: s=0x28c, cmd=-2147195266, argp=0x12d8d8 | out: argp=0x12d8d8) returned 0 [0033.489] WSAIoctl (in: s=0x27c, dwIoControlCode=0x28000017, lpvInBuffer=0x0, cbInBuffer=0x0, lpvOutBuffer=0x0, cbOutBuffer=0x0, lpcbBytesReturned=0x12d850, lpOverlapped=0x0, lpCompletionRoutine=0x0 | out: lpvOutBuffer=0x0, lpcbBytesReturned=0x12d850, lpOverlapped=0x0) returned -1 [0033.491] CoTaskMemAlloc (cb=0x204) returned 0x28aed0 [0033.491] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x2733, dwLanguageId=0x0, lpBuffer=0x28aed0, nSize=0x101, Arguments=0x0 | out: lpBuffer="A non-blocking socket operation could not be completed immediately.\r\n") returned 0x45 [0033.493] CoTaskMemFree (pv=0x28aed0) [0033.494] WSAEventSelect (s=0x27c, hEventObject=0x288, lNetworkEvents=512) returned 0 [0033.495] WSAIoctl (in: s=0x28c, dwIoControlCode=0x28000017, lpvInBuffer=0x0, cbInBuffer=0x0, lpvOutBuffer=0x0, cbOutBuffer=0x0, lpcbBytesReturned=0x12d850, lpOverlapped=0x0, lpCompletionRoutine=0x0 | out: lpvOutBuffer=0x0, lpcbBytesReturned=0x12d850, lpOverlapped=0x0) returned -1 [0033.495] CoTaskMemAlloc (cb=0x204) returned 0x28aed0 [0033.495] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x2733, dwLanguageId=0x0, lpBuffer=0x28aed0, nSize=0x101, Arguments=0x0 | out: lpBuffer="A non-blocking socket operation could not be completed immediately.\r\n") returned 0x45 [0033.495] CoTaskMemFree (pv=0x28aed0) [0033.495] WSAEventSelect (s=0x28c, hEventObject=0x290, lNetworkEvents=512) returned 0 [0033.495] CreateEventW (lpEventAttributes=0x0, bManualReset=1, bInitialState=0, lpName=0x0) returned 0x298 [0033.496] RasConnectionNotificationW (param_1=0xffffffffffffffff, param_2=0x298, param_3=0x3) returned 0x0 [0033.502] RegOpenCurrentUser (in: samDesired=0x20019, phkResult=0x12d990 | out: phkResult=0x12d990*=0x2b0) returned 0x0 [0033.504] RegOpenKeyExW (in: hKey=0x2b0, lpSubKey="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\Connections", ulOptions=0x0, samDesired=0x20019, phkResult=0x12d878 | out: phkResult=0x12d878*=0x2b4) returned 0x0 [0033.504] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x2b8 [0033.505] RegNotifyChangeKeyValue (hKey=0x2b4, bWatchSubtree=1, dwNotifyFilter=0x4, hEvent=0x2b8, fAsynchronous=1) returned 0x0 [0033.506] RegOpenKeyExW (in: hKey=0xffffffff80000002, lpSubKey="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\Connections", ulOptions=0x0, samDesired=0x20019, phkResult=0x12d8a0 | out: phkResult=0x12d8a0*=0x2bc) returned 0x0 [0033.506] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x2c0 [0033.506] RegNotifyChangeKeyValue (hKey=0x2bc, bWatchSubtree=1, dwNotifyFilter=0x4, hEvent=0x2c0, fAsynchronous=1) returned 0x0 [0033.506] RegOpenKeyExW (in: hKey=0xffffffff80000002, lpSubKey="SOFTWARE\\Policies\\Microsoft\\Windows\\CurrentVersion\\Internet Settings", ulOptions=0x0, samDesired=0x20019, phkResult=0x12d8a0 | out: phkResult=0x12d8a0*=0x2c4) returned 0x0 [0033.506] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x2c8 [0033.506] RegNotifyChangeKeyValue (hKey=0x2c4, bWatchSubtree=1, dwNotifyFilter=0x4, hEvent=0x2c8, fAsynchronous=1) returned 0x0 [0033.507] GetCurrentProcess () returned 0xffffffffffffffff [0033.507] OpenProcessToken (in: ProcessHandle=0xffffffffffffffff, DesiredAccess=0x2000000, TokenHandle=0x12d808 | out: TokenHandle=0x12d808*=0x2cc) returned 1 [0033.514] GetCurrentProcess () returned 0xffffffffffffffff [0033.514] OpenProcessToken (in: ProcessHandle=0xffffffffffffffff, DesiredAccess=0x2000000, TokenHandle=0x12cfd8 | out: TokenHandle=0x12cfd8*=0x2d0) returned 1 [0033.518] GetCurrentProcess () returned 0xffffffffffffffff [0033.518] OpenProcessToken (in: ProcessHandle=0xffffffffffffffff, DesiredAccess=0x2000000, TokenHandle=0x12cfd8 | out: TokenHandle=0x12cfd8*=0x2d4) returned 1 [0033.794] WinHttpGetIEProxyConfigForCurrentUser (in: pProxyConfig=0x12d8d8 | out: pProxyConfig=0x12d8d8) returned 1 [0034.533] SetEvent (hEvent=0x1ac) returned 1 [0034.562] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0x0, cHandles=0x1, pHandles=0x12d708*=0x298, lpdwindex=0x12d420 | out: lpdwindex=0x12d420) returned 0x80010115 [0034.791] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0x0, cHandles=0x1, pHandles=0x12d6e8*=0x288, lpdwindex=0x12d400 | out: lpdwindex=0x12d400) returned 0x80010115 [0034.791] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0x0, cHandles=0x1, pHandles=0x12d6e8*=0x290, lpdwindex=0x12d400 | out: lpdwindex=0x12d400) returned 0x80010115 [0034.791] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0x0, cHandles=0x1, pHandles=0x12d798*=0x2b8, lpdwindex=0x12d4b0 | out: lpdwindex=0x12d4b0) returned 0x80010115 [0034.792] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0x0, cHandles=0x1, pHandles=0x12d798*=0x2c0, lpdwindex=0x12d4b0 | out: lpdwindex=0x12d4b0) returned 0x80010115 [0034.792] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0x0, cHandles=0x1, pHandles=0x12d798*=0x2c8, lpdwindex=0x12d4b0 | out: lpdwindex=0x12d4b0) returned 0x80010115 [0034.798] WinHttpDetectAutoProxyConfigUrl (in: dwAutoDetectFlags=0x1, ppwstrAutoConfigUrl=0x12d840 | out: ppwstrAutoConfigUrl=0x12d840*=0x0) returned 0 [0036.665] WinHttpDetectAutoProxyConfigUrl (in: dwAutoDetectFlags=0x2, ppwstrAutoConfigUrl=0x12d840 | out: ppwstrAutoConfigUrl=0x12d840*=0x0) returned 0 [0039.487] GetCurrentProcess () returned 0xffffffffffffffff [0039.487] OpenProcessToken (in: ProcessHandle=0xffffffffffffffff, DesiredAccess=0x2000000, TokenHandle=0x12d0d8 | out: TokenHandle=0x12d0d8*=0x36c) returned 1 [0039.491] GetCurrentProcess () returned 0xffffffffffffffff [0039.491] OpenProcessToken (in: ProcessHandle=0xffffffffffffffff, DesiredAccess=0x2000000, TokenHandle=0x12d0d8 | out: TokenHandle=0x12d0d8*=0x344) returned 1 [0039.495] SetEvent (hEvent=0x1ac) returned 1 [0039.518] CoTaskMemAlloc (cb=0xf) returned 0x1af4c1f0 [0039.518] inet_addr (cp="176.119.28.97") returned 0x611c77b0 [0039.518] CoTaskMemFree (pv=0x1af4c1f0) [0039.519] WSASocketW (af=2, type=2, protocol=0, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0x374 [0039.520] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x378 [0039.520] ioctlsocket (in: s=0x374, cmd=-2147195266, argp=0x12d908 | out: argp=0x12d908) returned 0 [0039.520] WSASocketW (af=23, type=2, protocol=0, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0x37c [0039.520] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x380 [0039.520] ioctlsocket (in: s=0x37c, cmd=-2147195266, argp=0x12d908 | out: argp=0x12d908) returned 0 [0039.520] WSAIoctl (in: s=0x374, dwIoControlCode=0x28000017, lpvInBuffer=0x0, cbInBuffer=0x0, lpvOutBuffer=0x0, cbOutBuffer=0x0, lpcbBytesReturned=0x12d880, lpOverlapped=0x0, lpCompletionRoutine=0x0 | out: lpvOutBuffer=0x0, lpcbBytesReturned=0x12d880, lpOverlapped=0x0) returned -1 [0039.520] CoTaskMemAlloc (cb=0x204) returned 0x1af3d120 [0039.520] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x2733, dwLanguageId=0x0, lpBuffer=0x1af3d120, nSize=0x101, Arguments=0x0 | out: lpBuffer="A non-blocking socket operation could not be completed immediately.\r\n") returned 0x45 [0039.520] CoTaskMemFree (pv=0x1af3d120) [0039.520] WSAEventSelect (s=0x374, hEventObject=0x378, lNetworkEvents=512) returned 0 [0039.520] WSAIoctl (in: s=0x37c, dwIoControlCode=0x28000017, lpvInBuffer=0x0, cbInBuffer=0x0, lpvOutBuffer=0x0, cbOutBuffer=0x0, lpcbBytesReturned=0x12d880, lpOverlapped=0x0, lpCompletionRoutine=0x0 | out: lpvOutBuffer=0x0, lpcbBytesReturned=0x12d880, lpOverlapped=0x0) returned -1 [0039.521] CoTaskMemAlloc (cb=0x204) returned 0x1af3d120 [0039.521] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x2733, dwLanguageId=0x0, lpBuffer=0x1af3d120, nSize=0x101, Arguments=0x0 | out: lpBuffer="A non-blocking socket operation could not be completed immediately.\r\n") returned 0x45 [0039.521] CoTaskMemFree (pv=0x1af3d120) [0039.521] WSAEventSelect (s=0x37c, hEventObject=0x380, lNetworkEvents=512) returned 0 [0039.535] GetAdaptersAddresses (in: Family=0x0, Flags=0x2e, Reserved=0x0, AdapterAddresses=0x0, SizePointer=0x12d3d8*=0x0 | out: AdapterAddresses=0x0, SizePointer=0x12d3d8*=0xbf0) returned 0x6f [0039.543] LocalAlloc (uFlags=0x0, uBytes=0xbf0) returned 0x1af48610 [0039.543] GetAdaptersAddresses (in: Family=0x0, Flags=0x2e, Reserved=0x0, AdapterAddresses=0x1af48610, SizePointer=0x12d3d8*=0xbf0 | out: AdapterAddresses=0x1af48610*(Alignment=0x11000001c0, Length=0x1c0, IfIndex=0x11, Next=0x1af48940, AdapterName="{ECF237EA-3AD2-4D35-B4FE-425EFF427D86}", FirstUnicastAddress=0x1af48890, FirstAnycastAddress=0x0, FirstMulticastAddress=0x0, FirstDnsServerAddress=0x0, DnsSuffix="", Description="Intel(R) PRO/1000 MT Network Connection #2", FriendlyName="Local Area Connection 2", PhysicalAddress=([0]=0x30, [1]=0xc8, [2]=0x2a, [3]=0xd4, [4]=0xda, [5]=0x63, [6]=0x0, [7]=0x0), PhysicalAddressLength=0x6, Flags=0x3e5, DdnsEnabled=0x3e5, RegisterAdapterSuffix=0x3e5, Dhcpv4Enabled=0x3e5, ReceiveOnly=0x3e5, NoMulticast=0x3e5, Ipv6OtherStatefulConfig=0x3e5, NetbiosOverTcpipEnabled=0x3e5, Ipv4Enabled=0x3e5, Ipv6Enabled=0x3e5, Ipv6ManagedAddressConfigurationSupported=0x3e5, Mtu=0x5dc, IfType=0x6, OperStatus=0x1, Ipv6IfIndex=0x11, ZoneIndices=([0]=0x11, [1]=0x11, [2]=0x11, [3]=0x11, [4]=0x1, [5]=0x1, [6]=0x1, [7]=0x1, [8]=0x1, [9]=0x1, [10]=0x1, [11]=0x1, [12]=0x1, [13]=0x1, [14]=0x0, [15]=0x1), FirstPrefix=0x0, TransmitLinkSpeed=0x3b9aca00, ReceiveLinkSpeed=0x3b9aca00, FirstWinsServerAddress=0x0, FirstGatewayAddress=0x0, Ipv4Metric=0xa, Ipv6Metric=0xa, Luid=0x6000007000000, Dhcpv4Server.lpSockaddr=0x1af487d0*(sa_family=2, sin_port=0x0, sin_addr="192.168.0.1"), Dhcpv4Server.iSockaddrLength=16, CompartmentId=0x1, NetworkGuid=0x11de7039846ee341, ConnectionType=0x1, TunnelType=0x0, Dhcpv6Server.lpSockaddr=0x0, Dhcpv6Server.iSockaddrLength=0, Dhcpv6ClientDuid=([0]=0x0, [1]=0x1, [2]=0x0, [3]=0x1, [4]=0x20, [5]=0xc7, [6]=0x5c, [7]=0xa7, [8]=0xc4, [9]=0x3d, [10]=0xc7, [11]=0x58, [12]=0x4a, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0, [80]=0x0, [81]=0x0, [82]=0x0, [83]=0x0, [84]=0x0, [85]=0x0, [86]=0x0, [87]=0x0, [88]=0x0, [89]=0x0, [90]=0x0, [91]=0x0, [92]=0x0, [93]=0x0, [94]=0x0, [95]=0x0, [96]=0x0, [97]=0x0, [98]=0x0, [99]=0x0, [100]=0x0, [101]=0x0, [102]=0x0, [103]=0x0, [104]=0x0, [105]=0x0, [106]=0x0, [107]=0x0, [108]=0x0, [109]=0x0, [110]=0x0, [111]=0x0, [112]=0x0, [113]=0x0, [114]=0x0, [115]=0x0, [116]=0x0, [117]=0x0, [118]=0x0, [119]=0x0, [120]=0x0, [121]=0x0, [122]=0x0, [123]=0x0, [124]=0x0, [125]=0x0, [126]=0x0, [127]=0x0, [128]=0x0, [129]=0x0), Dhcpv6ClientDuidLength=0xe, Dhcpv6Iaid=0x11c43dc7, FirstDnsSuffix=0x0), SizePointer=0x12d3d8*=0xbf0) returned 0x0 [0039.554] LocalFree (hMem=0x1af48610) returned 0x0 [0039.585] WSASocketW (af=2, type=1, protocol=6, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0x384 [0039.586] WSASocketW (af=23, type=1, protocol=6, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0x388 [0039.588] CoTaskMemAlloc (cb=0xf) returned 0x1af4c1f0 [0039.588] inet_addr (cp="176.119.28.97") returned 0x611c77b0 [0039.588] CoTaskMemFree (pv=0x1af4c1f0) [0039.588] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0x0, cHandles=0x1, pHandles=0x12d428*=0x378, lpdwindex=0x12d140 | out: lpdwindex=0x12d140) returned 0x80010115 [0039.589] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0x0, cHandles=0x1, pHandles=0x12d428*=0x380, lpdwindex=0x12d140 | out: lpdwindex=0x12d140) returned 0x80010115 [0039.591] WSAConnect (in: s=0x384, name=0x26d4400*(sa_family=2, sin_port=0x50, sin_addr="176.119.28.97"), namelen=16, lpCallerData=0x0, lpCalleeData=0x0, lpSQOS=0x0, lpGQOS=0x0 | out: lpCalleeData=0x0) returned -1 [0040.764] CoTaskMemAlloc (cb=0x204) returned 0x1af3d120 [0040.764] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x274d, dwLanguageId=0x0, lpBuffer=0x1af3d120, nSize=0x101, Arguments=0x0 | out: lpBuffer="No connection could be made because the target machine actively refused it.\r\n") returned 0x4d [0040.764] CoTaskMemFree (pv=0x1af3d120) [0040.940] setsockopt (s=0x384, level=65535, optname=128, optval="\x01", optlen=4) returned 0 [0040.940] closesocket (s=0x384) returned 0 [0040.940] setsockopt (s=0x388, level=65535, optname=128, optval="\x01", optlen=4) returned 0 [0040.940] closesocket (s=0x388) returned 0 [0041.415] CoCreateGuid (in: pguid=0x12da40 | out: pguid=0x12da40*(Data1=0x542a3a8f, Data2=0x9217, Data3=0x4dc1, Data4=([0]=0xa8, [1]=0x34, [2]=0x18, [3]=0x54, [4]=0x15, [5]=0xbb, [6]=0x50, [7]=0x15))) returned 0x0 [0041.416] GetVersionExW (in: lpVersionInformation=0x12d920*(dwOSVersionInfoSize=0x114, dwMajorVersion=0x0, dwMinorVersion=0x0, dwBuildNumber=0x0, dwPlatformId=0x0, szCSDVersion="") | out: lpVersionInformation=0x12d920*(dwOSVersionInfoSize=0x114, dwMajorVersion=0x6, dwMinorVersion=0x1, dwBuildNumber=0x1db1, dwPlatformId=0x2, szCSDVersion="Service Pack 1")) returned 1 [0042.194] LocalAlloc (uFlags=0x0, uBytes=0x1a) returned 0x1af4b4b0 [0042.195] RtlMoveMemory (in: Destination=0x1af4b4b0, Source=0x2700918, Length=0x1a | out: Destination=0x1af4b4b0) [0042.195] LocalAlloc (uFlags=0x0, uBytes=0x36) returned 0x1af326b0 [0042.195] RtlMoveMemory (in: Destination=0x1af326b0, Source=0x27008c8, Length=0x36 | out: Destination=0x1af326b0) [0042.209] ShellExecuteExW (in: pExecInfo=0x2700c78*(cbSize=0x70, fMask=0x540, hwnd=0x0, lpVerb=0x0, lpFile="vssadmin.exe", lpParameters="delete shadows /all /quiet", lpDirectory=0x0, nShow=0, hInstApp=0x0, lpIDList=0x0, lpClass=0x0, hkeyClass=0x0, dwHotKey=0x0, hIcon=0x0, hMonitor=0x0, hProcess=0x0) | out: pExecInfo=0x2700c78*(cbSize=0x70, fMask=0x540, hwnd=0x0, lpVerb=0x0, lpFile="vssadmin.exe", lpParameters="delete shadows /all /quiet", lpDirectory=0x0, nShow=0, hInstApp=0x2a, lpIDList=0x0, lpClass=0x0, hkeyClass=0x0, dwHotKey=0x0, hIcon=0x0, hMonitor=0x0, hProcess=0x4a0)) returned 1 [0050.077] LocalFree (hMem=0x1af4b4b0) returned 0x0 [0050.077] LocalFree (hMem=0x1af326b0) returned 0x0 [0050.282] GetLogicalDrives () returned 0x4 [0051.183] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x105, lpBuffer=0x12d570, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0051.185] SetErrorMode (uMode=0x1) returned 0x0 [0051.188] FindFirstFileW (in: lpFileName="C:\\*", lpFindFileData=0x12d710 | out: lpFindFileData=0x12d710*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xd29f5adc, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2dfdd420, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2dfdd420, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="$Recycle.Bin", cAlternateFileName="")) returned 0x1af3b6b0 [0051.189] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d720 | out: lpFindFileData=0x12d720*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac30ebc0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac30ebc0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Boot", cAlternateFileName="")) returned 1 [0051.189] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d720 | out: lpFindFileData=0x12d720*(dwFileAttributes=0x27, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x84a3bb2c, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x5db2a, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr", cAlternateFileName="")) returned 1 [0051.190] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d720 | out: lpFindFileData=0x12d720*(dwFileAttributes=0x27, ftCreationTime.dwLowDateTime=0xac54a060, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac54a060, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac54a060, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="BOOTSECT.BAK", cAlternateFileName="")) returned 1 [0051.190] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d720 | out: lpFindFileData=0x12d720*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xcd4f5c20, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xc182c7c0, ftLastAccessTime.dwHighDateTime=0x1d3373b, ftLastWriteTime.dwLowDateTime=0xc182c7c0, ftLastWriteTime.dwHighDateTime=0x1d3373b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Config.Msi", cAlternateFileName="")) returned 1 [0051.190] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d720 | out: lpFindFileData=0x12d720*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x307290f2, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x307290f2, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x307290f2, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Documents and Settings", cAlternateFileName="DOCUME~1")) returned 1 [0051.190] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d720 | out: lpFindFileData=0x12d720*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x56257dc0, ftCreationTime.dwHighDateTime=0x1d2de2a, ftLastAccessTime.dwLowDateTime=0x56257dc0, ftLastAccessTime.dwHighDateTime=0x1d2de2a, ftLastWriteTime.dwLowDateTime=0x4e9ad440, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x5ff9d000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="hiberfil.sys", cAlternateFileName="")) returned 1 [0051.190] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d720 | out: lpFindFileData=0x12d720*(dwFileAttributes=0x2013, ftCreationTime.dwLowDateTime=0xe7b42810, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xe7b42810, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe7b42810, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="MSOCache", cAlternateFileName="")) returned 1 [0051.190] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d720 | out: lpFindFileData=0x12d720*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x563d4b80, ftCreationTime.dwHighDateTime=0x1d2de2a, ftLastAccessTime.dwLowDateTime=0x563d4b80, ftLastAccessTime.dwHighDateTime=0x1d2de2a, ftLastWriteTime.dwLowDateTime=0x4ecf3280, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x7ff7c000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="pagefile.sys", cAlternateFileName="")) returned 1 [0051.190] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d720 | out: lpFindFileData=0x12d720*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd72e458, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd72e458, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd72e458, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="PerfLogs", cAlternateFileName="")) returned 1 [0051.190] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d720 | out: lpFindFileData=0x12d720*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfd72e458, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xa4566e30, ftLastAccessTime.dwHighDateTime=0x1d5c60a, ftLastWriteTime.dwLowDateTime=0xa4566e30, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Program Files", cAlternateFileName="PROGRA~1")) returned 1 [0051.190] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d720 | out: lpFindFileData=0x12d720*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfd8ab1dc, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x10f11a30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x10f11a30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Program Files (x86)", cAlternateFileName="PROGRA~2")) returned 1 [0051.191] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d720 | out: lpFindFileData=0x12d720*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0xfd943744, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x803771e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x803771e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ProgramData", cAlternateFileName="PROGRA~3")) returned 1 [0051.191] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d720 | out: lpFindFileData=0x12d720*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x27c09980, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x27cc8060, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x27cc8060, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Recovery", cAlternateFileName="")) returned 1 [0051.191] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d720 | out: lpFindFileData=0x12d720*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0x56231c60, ftCreationTime.dwHighDateTime=0x1d2de2a, ftLastAccessTime.dwLowDateTime=0xa1602bc0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa1602bc0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="System Volume Information", cAlternateFileName="SYSTEM~1")) returned 1 [0051.191] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d720 | out: lpFindFileData=0x12d720*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x28c670c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x28c670c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Users", cAlternateFileName="")) returned 1 [0051.191] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d720 | out: lpFindFileData=0x12d720*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2fb4a840, ftLastAccessTime.dwHighDateTime=0x1d4d57d, ftLastWriteTime.dwLowDateTime=0x2fb4a840, ftLastWriteTime.dwHighDateTime=0x1d4d57d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 1 [0051.191] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d720 | out: lpFindFileData=0x12d720*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2fb4a840, ftLastAccessTime.dwHighDateTime=0x1d4d57d, ftLastWriteTime.dwLowDateTime=0x2fb4a840, ftLastWriteTime.dwHighDateTime=0x1d4d57d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0 [0051.191] FindClose (in: hFindFile=0x1af3b6b0 | out: hFindFile=0x1af3b6b0) returned 1 [0051.192] SetErrorMode (uMode=0x0) returned 0x1 [0051.223] GetFullPathNameW (in: lpFileName="C:\\BOOTSECT.BAK", nBufferLength=0x105, lpBuffer=0x12d780, lpFilePart=0x0 | out: lpBuffer="C:\\BOOTSECT.BAK", lpFilePart=0x0) returned 0xf [0051.226] GetFullPathNameW (in: lpFileName="C:\\BOOTSECT.BAK", nBufferLength=0x105, lpBuffer=0x12d770, lpFilePart=0x0 | out: lpBuffer="C:\\BOOTSECT.BAK", lpFilePart=0x0) returned 0xf [0051.229] SetErrorMode (uMode=0x1) returned 0x0 [0051.229] GetFileAttributesExW (in: lpFileName="C:\\BOOTSECT.BAK" (normalized: "c:\\bootsect.bak"), fInfoLevelId=0x0, lpFileInformation=0x12d9f0 | out: lpFileInformation=0x12d9f0*(dwFileAttributes=0x27, ftCreationTime.dwLowDateTime=0xac54a060, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac54a060, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac54a060, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0051.318] SetErrorMode (uMode=0x0) returned 0x1 [0051.494] GetFullPathNameW (in: lpFileName="C:\\BOOTSECT.BAK", nBufferLength=0x105, lpBuffer=0x12d440, lpFilePart=0x0 | out: lpBuffer="C:\\BOOTSECT.BAK", lpFilePart=0x0) returned 0xf [0051.494] SetErrorMode (uMode=0x1) returned 0x0 [0051.494] CreateFileW (lpFileName="C:\\BOOTSECT.BAK" (normalized: "c:\\bootsect.bak"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x454 [0051.495] GetFileType (hFile=0x454) returned 0x1 [0051.495] SetErrorMode (uMode=0x0) returned 0x1 [0051.495] GetFileType (hFile=0x454) returned 0x1 [0051.495] GetFileSize (in: hFile=0x454, lpFileSizeHigh=0x12daa8 | out: lpFileSizeHigh=0x12daa8*=0x0) returned 0x2000 [0051.495] ReadFile (in: hFile=0x454, lpBuffer=0x2704fc8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x12d988, lpOverlapped=0x0 | out: lpBuffer=0x2704fc8*, lpNumberOfBytesRead=0x12d988*=0x2000, lpOverlapped=0x0) returned 1 [0051.499] CloseHandle (hObject=0x454) returned 1 [0051.510] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\config\\machine.config", nBufferLength=0x105, lpBuffer=0x12d370, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\config\\machine.config", lpFilePart=0x0) returned 0x45 [0051.511] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\config\\machine.config", nBufferLength=0x105, lpBuffer=0x12d460, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\config\\machine.config", lpFilePart=0x0) returned 0x45 [0051.511] SetErrorMode (uMode=0x1) returned 0x0 [0051.511] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\config\\machine.config" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\config\\machine.config"), fInfoLevelId=0x0, lpFileInformation=0x12d670 | out: lpFileInformation=0x12d670*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdf9bf7e3, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xdf9bf7e3, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x76d072b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x622a)) returned 1 [0051.511] SetErrorMode (uMode=0x0) returned 0x1 [0051.512] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\config\\machine.config", nBufferLength=0x105, lpBuffer=0x12d410, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\config\\machine.config", lpFilePart=0x0) returned 0x45 [0051.512] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\config\\machine.config", nBufferLength=0x105, lpBuffer=0x12d2e0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\config\\machine.config", lpFilePart=0x0) returned 0x45 [0051.921] BCryptGetFipsAlgorithmMode (in: pfEnabled=0x12d000 | out: pfEnabled=0x12d000) returned 0x0 [0052.691] GetFullPathNameW (in: lpFileName="C:\\BOOTSECT.BAK", nBufferLength=0x105, lpBuffer=0x12d450, lpFilePart=0x0 | out: lpBuffer="C:\\BOOTSECT.BAK", lpFilePart=0x0) returned 0xf [0052.692] SetErrorMode (uMode=0x1) returned 0x0 [0052.692] CreateFileW (lpFileName="C:\\BOOTSECT.BAK" (normalized: "c:\\bootsect.bak"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0053.059] SetErrorMode (uMode=0x0) returned 0x1 [0053.532] GetFullPathNameW (in: lpFileName="C:\\Decrypt Instructions.txt", nBufferLength=0x105, lpBuffer=0x12d420, lpFilePart=0x0 | out: lpBuffer="C:\\Decrypt Instructions.txt", lpFilePart=0x0) returned 0x1b [0053.532] SetErrorMode (uMode=0x1) returned 0x0 [0053.532] CreateFileW (lpFileName="C:\\Decrypt Instructions.txt" (normalized: "c:\\decrypt instructions.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x464 [0053.541] GetFileType (hFile=0x464) returned 0x1 [0053.541] SetErrorMode (uMode=0x0) returned 0x1 [0053.541] GetFileType (hFile=0x464) returned 0x1 [0053.545] WriteFile (in: hFile=0x464, lpBuffer=0x2835b78*, nNumberOfBytesToWrite=0x773, lpNumberOfBytesWritten=0x12d988, lpOverlapped=0x0 | out: lpBuffer=0x2835b78*, lpNumberOfBytesWritten=0x12d988*=0x773, lpOverlapped=0x0) returned 1 [0053.547] CloseHandle (hObject=0x464) returned 1 [0053.549] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x105, lpBuffer=0x12d610, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0053.550] SetErrorMode (uMode=0x1) returned 0x0 [0053.550] FindFirstFileW (in: lpFileName="C:\\*", lpFindFileData=0x12d7b0 | out: lpFindFileData=0x12d7b0*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xd29f5adc, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2dfdd420, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2dfdd420, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="$Recycle.Bin", cAlternateFileName="")) returned 0x1af3b6b0 [0053.550] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d7c0 | out: lpFindFileData=0x12d7c0*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac30ebc0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac30ebc0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Boot", cAlternateFileName="")) returned 1 [0053.550] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d7c0 | out: lpFindFileData=0x12d7c0*(dwFileAttributes=0x27, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x84a3bb2c, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x5db2a, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr", cAlternateFileName="")) returned 1 [0053.550] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d7c0 | out: lpFindFileData=0x12d7c0*(dwFileAttributes=0x27, ftCreationTime.dwLowDateTime=0xac54a060, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac54a060, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac54a060, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="BOOTSECT.BAK", cAlternateFileName="")) returned 1 [0053.550] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d7c0 | out: lpFindFileData=0x12d7c0*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xcd4f5c20, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xc182c7c0, ftLastAccessTime.dwHighDateTime=0x1d3373b, ftLastWriteTime.dwLowDateTime=0xc182c7c0, ftLastWriteTime.dwHighDateTime=0x1d3373b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Config.Msi", cAlternateFileName="")) returned 1 [0053.550] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d7c0 | out: lpFindFileData=0x12d7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3ffd52d0, ftCreationTime.dwHighDateTime=0x1d5e786, ftLastAccessTime.dwLowDateTime=0x3ffd52d0, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x3ffd52d0, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x773, dwReserved0=0x0, dwReserved1=0x0, cFileName="Decrypt Instructions.txt", cAlternateFileName="DECRYP~1.TXT")) returned 1 [0053.551] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d7c0 | out: lpFindFileData=0x12d7c0*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x307290f2, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x307290f2, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x307290f2, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Documents and Settings", cAlternateFileName="DOCUME~1")) returned 1 [0053.551] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d7c0 | out: lpFindFileData=0x12d7c0*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x56257dc0, ftCreationTime.dwHighDateTime=0x1d2de2a, ftLastAccessTime.dwLowDateTime=0x56257dc0, ftLastAccessTime.dwHighDateTime=0x1d2de2a, ftLastWriteTime.dwLowDateTime=0x4e9ad440, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x5ff9d000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="hiberfil.sys", cAlternateFileName="")) returned 1 [0053.551] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d7c0 | out: lpFindFileData=0x12d7c0*(dwFileAttributes=0x2013, ftCreationTime.dwLowDateTime=0xe7b42810, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xe7b42810, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe7b42810, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="MSOCache", cAlternateFileName="")) returned 1 [0053.551] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d7c0 | out: lpFindFileData=0x12d7c0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x563d4b80, ftCreationTime.dwHighDateTime=0x1d2de2a, ftLastAccessTime.dwLowDateTime=0x563d4b80, ftLastAccessTime.dwHighDateTime=0x1d2de2a, ftLastWriteTime.dwLowDateTime=0x4ecf3280, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x7ff7c000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="pagefile.sys", cAlternateFileName="")) returned 1 [0053.551] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d7c0 | out: lpFindFileData=0x12d7c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd72e458, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd72e458, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd72e458, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="PerfLogs", cAlternateFileName="")) returned 1 [0053.551] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d7c0 | out: lpFindFileData=0x12d7c0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfd72e458, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xa4566e30, ftLastAccessTime.dwHighDateTime=0x1d5c60a, ftLastWriteTime.dwLowDateTime=0xa4566e30, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Program Files", cAlternateFileName="PROGRA~1")) returned 1 [0053.551] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d7c0 | out: lpFindFileData=0x12d7c0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfd8ab1dc, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x10f11a30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x10f11a30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Program Files (x86)", cAlternateFileName="PROGRA~2")) returned 1 [0053.551] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d7c0 | out: lpFindFileData=0x12d7c0*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0xfd943744, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x803771e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x803771e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ProgramData", cAlternateFileName="PROGRA~3")) returned 1 [0053.551] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d7c0 | out: lpFindFileData=0x12d7c0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x27c09980, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x27cc8060, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x27cc8060, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Recovery", cAlternateFileName="")) returned 1 [0053.551] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d7c0 | out: lpFindFileData=0x12d7c0*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0x56231c60, ftCreationTime.dwHighDateTime=0x1d2de2a, ftLastAccessTime.dwLowDateTime=0xa1602bc0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa1602bc0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="System Volume Information", cAlternateFileName="SYSTEM~1")) returned 1 [0053.551] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d7c0 | out: lpFindFileData=0x12d7c0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x28c670c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x28c670c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Users", cAlternateFileName="")) returned 1 [0053.551] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d7c0 | out: lpFindFileData=0x12d7c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2fb4a840, ftLastAccessTime.dwHighDateTime=0x1d4d57d, ftLastWriteTime.dwLowDateTime=0x2fb4a840, ftLastWriteTime.dwHighDateTime=0x1d4d57d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 1 [0053.551] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d7c0 | out: lpFindFileData=0x12d7c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2fb4a840, ftLastAccessTime.dwHighDateTime=0x1d4d57d, ftLastWriteTime.dwLowDateTime=0x2fb4a840, ftLastWriteTime.dwHighDateTime=0x1d4d57d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0 [0053.552] FindClose (in: hFindFile=0x1af3b6b0 | out: hFindFile=0x1af3b6b0) returned 1 [0053.552] SetErrorMode (uMode=0x0) returned 0x1 [0053.552] GetFullPathNameW (in: lpFileName="C:\\$Recycle.Bin", nBufferLength=0x105, lpBuffer=0x12d510, lpFilePart=0x0 | out: lpBuffer="C:\\$Recycle.Bin", lpFilePart=0x0) returned 0xf [0053.553] SetErrorMode (uMode=0x1) returned 0x0 [0053.553] FindFirstFileW (in: lpFileName="C:\\$Recycle.Bin\\*", lpFindFileData=0x12d6b0 | out: lpFindFileData=0x12d6b0*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xd29f5adc, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2dfdd420, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2dfdd420, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1af3b6b0 [0053.553] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d6c0 | out: lpFindFileData=0x12d6c0*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xd29f5adc, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2dfdd420, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2dfdd420, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0053.553] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d6c0 | out: lpFindFileData=0x12d6c0*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0x2dfdd420, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xb63e4b00, ftLastAccessTime.dwHighDateTime=0x1d337f4, ftLastWriteTime.dwLowDateTime=0xb63e4b00, ftLastWriteTime.dwHighDateTime=0x1d337f4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="S-1-5-21-3388679973-3930757225-3770151564-1000", cAlternateFileName="S-1-5-~1")) returned 1 [0053.553] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d6c0 | out: lpFindFileData=0x12d6c0*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0x2dfdd420, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xb63e4b00, ftLastAccessTime.dwHighDateTime=0x1d337f4, ftLastWriteTime.dwLowDateTime=0xb63e4b00, ftLastWriteTime.dwHighDateTime=0x1d337f4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="S-1-5-21-3388679973-3930757225-3770151564-1000", cAlternateFileName="S-1-5-~1")) returned 0 [0053.553] FindClose (in: hFindFile=0x1af3b6b0 | out: hFindFile=0x1af3b6b0) returned 1 [0053.554] SetErrorMode (uMode=0x0) returned 0x1 [0053.554] GetFullPathNameW (in: lpFileName="C:\\$Recycle.Bin\\Decrypt Instructions.txt", nBufferLength=0x105, lpBuffer=0x12d3c0, lpFilePart=0x0 | out: lpBuffer="C:\\$Recycle.Bin\\Decrypt Instructions.txt", lpFilePart=0x0) returned 0x28 [0053.554] SetErrorMode (uMode=0x1) returned 0x0 [0053.554] CreateFileW (lpFileName="C:\\$Recycle.Bin\\Decrypt Instructions.txt" (normalized: "c:\\$recycle.bin\\decrypt instructions.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x464 [0053.555] GetFileType (hFile=0x464) returned 0x1 [0053.555] SetErrorMode (uMode=0x0) returned 0x1 [0053.555] GetFileType (hFile=0x464) returned 0x1 [0053.555] WriteFile (in: hFile=0x464, lpBuffer=0x283c288*, nNumberOfBytesToWrite=0x773, lpNumberOfBytesWritten=0x12d928, lpOverlapped=0x0 | out: lpBuffer=0x283c288*, lpNumberOfBytesWritten=0x12d928*=0x773, lpOverlapped=0x0) returned 1 [0053.557] CloseHandle (hObject=0x464) returned 1 [0053.557] GetFullPathNameW (in: lpFileName="C:\\$Recycle.Bin", nBufferLength=0x105, lpBuffer=0x12d5b0, lpFilePart=0x0 | out: lpBuffer="C:\\$Recycle.Bin", lpFilePart=0x0) returned 0xf [0053.557] SetErrorMode (uMode=0x1) returned 0x0 [0053.557] FindFirstFileW (in: lpFileName="C:\\$Recycle.Bin\\*", lpFindFileData=0x12d750 | out: lpFindFileData=0x12d750*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xd29f5adc, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x3fffb430, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x3fffb430, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1af3b6b0 [0053.557] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d760 | out: lpFindFileData=0x12d760*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xd29f5adc, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x3fffb430, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x3fffb430, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0053.558] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d760 | out: lpFindFileData=0x12d760*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3fffb430, ftCreationTime.dwHighDateTime=0x1d5e786, ftLastAccessTime.dwLowDateTime=0x3fffb430, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x3fffb430, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x773, dwReserved0=0x0, dwReserved1=0x0, cFileName="Decrypt Instructions.txt", cAlternateFileName="DECRYP~1.TXT")) returned 1 [0053.558] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d760 | out: lpFindFileData=0x12d760*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0x2dfdd420, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xb63e4b00, ftLastAccessTime.dwHighDateTime=0x1d337f4, ftLastWriteTime.dwLowDateTime=0xb63e4b00, ftLastWriteTime.dwHighDateTime=0x1d337f4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="S-1-5-21-3388679973-3930757225-3770151564-1000", cAlternateFileName="S-1-5-~1")) returned 1 [0053.558] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d760 | out: lpFindFileData=0x12d760*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0x2dfdd420, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xb63e4b00, ftLastAccessTime.dwHighDateTime=0x1d337f4, ftLastWriteTime.dwLowDateTime=0xb63e4b00, ftLastWriteTime.dwHighDateTime=0x1d337f4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="S-1-5-21-3388679973-3930757225-3770151564-1000", cAlternateFileName="S-1-5-~1")) returned 0 [0053.558] FindClose (in: hFindFile=0x1af3b6b0 | out: hFindFile=0x1af3b6b0) returned 1 [0053.558] SetErrorMode (uMode=0x0) returned 0x1 [0053.558] GetFullPathNameW (in: lpFileName="C:\\$Recycle.Bin\\S-1-5-21-3388679973-3930757225-3770151564-1000", nBufferLength=0x105, lpBuffer=0x12d4b0, lpFilePart=0x0 | out: lpBuffer="C:\\$Recycle.Bin\\S-1-5-21-3388679973-3930757225-3770151564-1000", lpFilePart=0x0) returned 0x3e [0053.559] SetErrorMode (uMode=0x1) returned 0x0 [0053.559] FindFirstFileW (in: lpFileName="C:\\$Recycle.Bin\\S-1-5-21-3388679973-3930757225-3770151564-1000\\*", lpFindFileData=0x12d650 | out: lpFindFileData=0x12d650*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0x2dfdd420, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xb63e4b00, ftLastAccessTime.dwHighDateTime=0x1d337f4, ftLastWriteTime.dwLowDateTime=0xb63e4b00, ftLastWriteTime.dwHighDateTime=0x1d337f4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1af3b6b0 [0053.559] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0x2dfdd420, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xb63e4b00, ftLastAccessTime.dwHighDateTime=0x1d337f4, ftLastWriteTime.dwLowDateTime=0xb63e4b00, ftLastWriteTime.dwHighDateTime=0x1d337f4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0053.559] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x2dfdd420, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2dfdd420, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2dfdd420, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x81, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0053.559] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x2dfdd420, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2dfdd420, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2dfdd420, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x81, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 0 [0053.559] FindClose (in: hFindFile=0x1af3b6b0 | out: hFindFile=0x1af3b6b0) returned 1 [0053.559] SetErrorMode (uMode=0x0) returned 0x1 [0053.560] GetFullPathNameW (in: lpFileName="C:\\$Recycle.Bin\\S-1-5-21-3388679973-3930757225-3770151564-1000\\Decrypt Instructions.txt", nBufferLength=0x105, lpBuffer=0x12d360, lpFilePart=0x0 | out: lpBuffer="C:\\$Recycle.Bin\\S-1-5-21-3388679973-3930757225-3770151564-1000\\Decrypt Instructions.txt", lpFilePart=0x0) returned 0x57 [0053.560] SetErrorMode (uMode=0x1) returned 0x0 [0053.560] CreateFileW (lpFileName="C:\\$Recycle.Bin\\S-1-5-21-3388679973-3930757225-3770151564-1000\\Decrypt Instructions.txt" (normalized: "c:\\$recycle.bin\\s-1-5-21-3388679973-3930757225-3770151564-1000\\decrypt instructions.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x464 [0053.561] GetFileType (hFile=0x464) returned 0x1 [0053.561] SetErrorMode (uMode=0x0) returned 0x1 [0053.561] GetFileType (hFile=0x464) returned 0x1 [0053.562] WriteFile (in: hFile=0x464, lpBuffer=0x2842b30*, nNumberOfBytesToWrite=0x773, lpNumberOfBytesWritten=0x12d8c8, lpOverlapped=0x0 | out: lpBuffer=0x2842b30*, lpNumberOfBytesWritten=0x12d8c8*=0x773, lpOverlapped=0x0) returned 1 [0053.563] CloseHandle (hObject=0x464) returned 1 [0053.563] GetFullPathNameW (in: lpFileName="C:\\$Recycle.Bin\\S-1-5-21-3388679973-3930757225-3770151564-1000", nBufferLength=0x105, lpBuffer=0x12d550, lpFilePart=0x0 | out: lpBuffer="C:\\$Recycle.Bin\\S-1-5-21-3388679973-3930757225-3770151564-1000", lpFilePart=0x0) returned 0x3e [0053.563] SetErrorMode (uMode=0x1) returned 0x0 [0053.563] FindFirstFileW (in: lpFileName="C:\\$Recycle.Bin\\S-1-5-21-3388679973-3930757225-3770151564-1000\\*", lpFindFileData=0x12d6f0 | out: lpFindFileData=0x12d6f0*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0x2dfdd420, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x3fffb430, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x3fffb430, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1af3b6b0 [0053.563] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d700 | out: lpFindFileData=0x12d700*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0x2dfdd420, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x3fffb430, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x3fffb430, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0053.564] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d700 | out: lpFindFileData=0x12d700*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3fffb430, ftCreationTime.dwHighDateTime=0x1d5e786, ftLastAccessTime.dwLowDateTime=0x3fffb430, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x3fffb430, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x773, dwReserved0=0x0, dwReserved1=0x0, cFileName="Decrypt Instructions.txt", cAlternateFileName="DECRYP~1.TXT")) returned 1 [0053.564] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d700 | out: lpFindFileData=0x12d700*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x2dfdd420, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2dfdd420, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2dfdd420, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x81, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0053.564] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d700 | out: lpFindFileData=0x12d700*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x2dfdd420, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2dfdd420, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2dfdd420, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x81, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 0 [0053.564] FindClose (in: hFindFile=0x1af3b6b0 | out: hFindFile=0x1af3b6b0) returned 1 [0053.564] SetErrorMode (uMode=0x0) returned 0x1 [0053.564] GetFullPathNameW (in: lpFileName="C:\\Boot", nBufferLength=0x105, lpBuffer=0x12d510, lpFilePart=0x0 | out: lpBuffer="C:\\Boot", lpFilePart=0x0) returned 0x7 [0053.564] SetErrorMode (uMode=0x1) returned 0x0 [0053.564] FindFirstFileW (in: lpFileName="C:\\Boot\\*", lpFindFileData=0x12d6b0 | out: lpFindFileData=0x12d6b0*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac30ebc0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac30ebc0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1af3b6b0 [0053.564] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d6c0 | out: lpFindFileData=0x12d6c0*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac30ebc0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac30ebc0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0053.565] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d6c0 | out: lpFindFileData=0x12d6c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac2e8a60, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x2ebf9340, ftLastAccessTime.dwHighDateTime=0x1d4d597, ftLastWriteTime.dwLowDateTime=0x2ebf9340, ftLastWriteTime.dwHighDateTime=0x1d4d597, nFileSizeHigh=0x0, nFileSizeLow=0x6000, dwReserved0=0x0, dwReserved1=0x0, cFileName="BCD", cAlternateFileName="")) returned 1 [0053.565] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d6c0 | out: lpFindFileData=0x12d6c0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xac2e8a60, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac2e8a60, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x469b3b00, ftLastWriteTime.dwHighDateTime=0x1d4d596, nFileSizeHigh=0x0, nFileSizeLow=0x5400, dwReserved0=0x0, dwReserved1=0x0, cFileName="BCD.LOG", cAlternateFileName="")) returned 1 [0053.565] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d6c0 | out: lpFindFileData=0x12d6c0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xac30ebc0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac30ebc0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac30ebc0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BCD.LOG1", cAlternateFileName="BCD~1.LOG")) returned 1 [0053.565] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d6c0 | out: lpFindFileData=0x12d6c0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xac30ebc0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac30ebc0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac30ebc0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BCD.LOG2", cAlternateFileName="BCD~2.LOG")) returned 1 [0053.565] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d6c0 | out: lpFindFileData=0x12d6c0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0f9880, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x10000, dwReserved0=0x0, dwReserved1=0x0, cFileName="BOOTSTAT.DAT", cAlternateFileName="")) returned 1 [0053.567] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d6c0 | out: lpFindFileData=0x12d6c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac015040, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac015040, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="cs-CZ", cAlternateFileName="")) returned 1 [0053.567] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d6c0 | out: lpFindFileData=0x12d6c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="da-DK", cAlternateFileName="")) returned 1 [0053.567] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d6c0 | out: lpFindFileData=0x12d6c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="de-DE", cAlternateFileName="")) returned 1 [0053.567] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d6c0 | out: lpFindFileData=0x12d6c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="el-GR", cAlternateFileName="")) returned 1 [0053.567] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d6c0 | out: lpFindFileData=0x12d6c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0053.567] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d6c0 | out: lpFindFileData=0x12d6c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="es-ES", cAlternateFileName="")) returned 1 [0053.567] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d6c0 | out: lpFindFileData=0x12d6c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fi-FI", cAlternateFileName="")) returned 1 [0053.567] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d6c0 | out: lpFindFileData=0x12d6c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac276640, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac276640, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Fonts", cAlternateFileName="")) returned 1 [0053.567] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d6c0 | out: lpFindFileData=0x12d6c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr-FR", cAlternateFileName="")) returned 1 [0053.567] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d6c0 | out: lpFindFileData=0x12d6c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hu-HU", cAlternateFileName="")) returned 1 [0053.567] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d6c0 | out: lpFindFileData=0x12d6c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="it-IT", cAlternateFileName="")) returned 1 [0053.567] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d6c0 | out: lpFindFileData=0x12d6c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac087460, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac087460, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ja-JP", cAlternateFileName="")) returned 1 [0053.568] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d6c0 | out: lpFindFileData=0x12d6c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac087460, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac087460, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ko-KR", cAlternateFileName="")) returned 1 [0053.568] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d6c0 | out: lpFindFileData=0x12d6c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac087460, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x8bc7dbfe, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x76980, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe", cAlternateFileName="")) returned 1 [0053.568] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d6c0 | out: lpFindFileData=0x12d6c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nb-NO", cAlternateFileName="")) returned 1 [0053.568] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d6c0 | out: lpFindFileData=0x12d6c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nl-NL", cAlternateFileName="")) returned 1 [0053.568] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d6c0 | out: lpFindFileData=0x12d6c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pl-PL", cAlternateFileName="")) returned 1 [0053.568] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d6c0 | out: lpFindFileData=0x12d6c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt-BR", cAlternateFileName="")) returned 1 [0053.568] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d6c0 | out: lpFindFileData=0x12d6c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt-PT", cAlternateFileName="")) returned 1 [0053.568] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d6c0 | out: lpFindFileData=0x12d6c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ru-RU", cAlternateFileName="")) returned 1 [0053.568] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d6c0 | out: lpFindFileData=0x12d6c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sv-SE", cAlternateFileName="")) returned 1 [0053.568] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d6c0 | out: lpFindFileData=0x12d6c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="tr-TR", cAlternateFileName="")) returned 1 [0053.568] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d6c0 | out: lpFindFileData=0x12d6c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-CN", cAlternateFileName="")) returned 1 [0053.568] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d6c0 | out: lpFindFileData=0x12d6c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0f9880, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-HK", cAlternateFileName="")) returned 1 [0053.568] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d6c0 | out: lpFindFileData=0x12d6c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0f9880, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-TW", cAlternateFileName="")) returned 1 [0053.568] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d6c0 | out: lpFindFileData=0x12d6c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0f9880, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-TW", cAlternateFileName="")) returned 0 [0053.568] FindClose (in: hFindFile=0x1af3b6b0 | out: hFindFile=0x1af3b6b0) returned 1 [0053.569] SetErrorMode (uMode=0x0) returned 0x1 [0053.570] GetFullPathNameW (in: lpFileName="C:\\Boot\\Decrypt Instructions.txt", nBufferLength=0x105, lpBuffer=0x12d3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\Decrypt Instructions.txt", lpFilePart=0x0) returned 0x20 [0053.570] SetErrorMode (uMode=0x1) returned 0x0 [0053.570] CreateFileW (lpFileName="C:\\Boot\\Decrypt Instructions.txt" (normalized: "c:\\boot\\decrypt instructions.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x464 [0053.571] GetFileType (hFile=0x464) returned 0x1 [0053.571] SetErrorMode (uMode=0x0) returned 0x1 [0053.571] GetFileType (hFile=0x464) returned 0x1 [0053.571] WriteFile (in: hFile=0x464, lpBuffer=0x28495f0*, nNumberOfBytesToWrite=0x773, lpNumberOfBytesWritten=0x12d928, lpOverlapped=0x0 | out: lpBuffer=0x28495f0*, lpNumberOfBytesWritten=0x12d928*=0x773, lpOverlapped=0x0) returned 1 [0053.572] CloseHandle (hObject=0x464) returned 1 [0053.572] GetFullPathNameW (in: lpFileName="C:\\Boot", nBufferLength=0x105, lpBuffer=0x12d5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot", lpFilePart=0x0) returned 0x7 [0053.572] SetErrorMode (uMode=0x1) returned 0x0 [0053.573] FindFirstFileW (in: lpFileName="C:\\Boot\\*", lpFindFileData=0x12d750 | out: lpFindFileData=0x12d750*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x40021590, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x40021590, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1af3b6b0 [0053.573] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d760 | out: lpFindFileData=0x12d760*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x40021590, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x40021590, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0053.573] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d760 | out: lpFindFileData=0x12d760*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac2e8a60, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x2ebf9340, ftLastAccessTime.dwHighDateTime=0x1d4d597, ftLastWriteTime.dwLowDateTime=0x2ebf9340, ftLastWriteTime.dwHighDateTime=0x1d4d597, nFileSizeHigh=0x0, nFileSizeLow=0x6000, dwReserved0=0x0, dwReserved1=0x0, cFileName="BCD", cAlternateFileName="")) returned 1 [0053.573] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d760 | out: lpFindFileData=0x12d760*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xac2e8a60, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac2e8a60, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x469b3b00, ftLastWriteTime.dwHighDateTime=0x1d4d596, nFileSizeHigh=0x0, nFileSizeLow=0x5400, dwReserved0=0x0, dwReserved1=0x0, cFileName="BCD.LOG", cAlternateFileName="")) returned 1 [0053.573] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d760 | out: lpFindFileData=0x12d760*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xac30ebc0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac30ebc0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac30ebc0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BCD.LOG1", cAlternateFileName="BCD~1.LOG")) returned 1 [0053.573] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d760 | out: lpFindFileData=0x12d760*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xac30ebc0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac30ebc0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac30ebc0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BCD.LOG2", cAlternateFileName="BCD~2.LOG")) returned 1 [0053.573] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d760 | out: lpFindFileData=0x12d760*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0f9880, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x10000, dwReserved0=0x0, dwReserved1=0x0, cFileName="BOOTSTAT.DAT", cAlternateFileName="")) returned 1 [0053.573] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d760 | out: lpFindFileData=0x12d760*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac015040, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac015040, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="cs-CZ", cAlternateFileName="")) returned 1 [0053.573] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d760 | out: lpFindFileData=0x12d760*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="da-DK", cAlternateFileName="")) returned 1 [0053.573] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d760 | out: lpFindFileData=0x12d760*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="de-DE", cAlternateFileName="")) returned 1 [0053.573] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d760 | out: lpFindFileData=0x12d760*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x40021590, ftCreationTime.dwHighDateTime=0x1d5e786, ftLastAccessTime.dwLowDateTime=0x40021590, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x40021590, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x773, dwReserved0=0x0, dwReserved1=0x0, cFileName="Decrypt Instructions.txt", cAlternateFileName="DECRYP~1.TXT")) returned 1 [0053.573] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d760 | out: lpFindFileData=0x12d760*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="el-GR", cAlternateFileName="")) returned 1 [0053.573] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d760 | out: lpFindFileData=0x12d760*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0053.573] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d760 | out: lpFindFileData=0x12d760*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="es-ES", cAlternateFileName="")) returned 1 [0053.573] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d760 | out: lpFindFileData=0x12d760*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fi-FI", cAlternateFileName="")) returned 1 [0053.574] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d760 | out: lpFindFileData=0x12d760*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac276640, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac276640, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Fonts", cAlternateFileName="")) returned 1 [0053.574] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d760 | out: lpFindFileData=0x12d760*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr-FR", cAlternateFileName="")) returned 1 [0053.574] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d760 | out: lpFindFileData=0x12d760*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hu-HU", cAlternateFileName="")) returned 1 [0053.574] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d760 | out: lpFindFileData=0x12d760*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="it-IT", cAlternateFileName="")) returned 1 [0053.574] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d760 | out: lpFindFileData=0x12d760*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac087460, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac087460, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ja-JP", cAlternateFileName="")) returned 1 [0053.574] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d760 | out: lpFindFileData=0x12d760*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac087460, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac087460, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ko-KR", cAlternateFileName="")) returned 1 [0053.574] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d760 | out: lpFindFileData=0x12d760*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac087460, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x8bc7dbfe, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x76980, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe", cAlternateFileName="")) returned 1 [0053.574] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d760 | out: lpFindFileData=0x12d760*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nb-NO", cAlternateFileName="")) returned 1 [0053.574] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d760 | out: lpFindFileData=0x12d760*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nl-NL", cAlternateFileName="")) returned 1 [0053.574] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d760 | out: lpFindFileData=0x12d760*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pl-PL", cAlternateFileName="")) returned 1 [0053.574] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d760 | out: lpFindFileData=0x12d760*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt-BR", cAlternateFileName="")) returned 1 [0053.574] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d760 | out: lpFindFileData=0x12d760*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt-PT", cAlternateFileName="")) returned 1 [0053.574] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d760 | out: lpFindFileData=0x12d760*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ru-RU", cAlternateFileName="")) returned 1 [0053.574] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d760 | out: lpFindFileData=0x12d760*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sv-SE", cAlternateFileName="")) returned 1 [0053.574] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d760 | out: lpFindFileData=0x12d760*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="tr-TR", cAlternateFileName="")) returned 1 [0053.575] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d760 | out: lpFindFileData=0x12d760*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-CN", cAlternateFileName="")) returned 1 [0053.575] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d760 | out: lpFindFileData=0x12d760*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0f9880, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-HK", cAlternateFileName="")) returned 1 [0053.575] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d760 | out: lpFindFileData=0x12d760*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0f9880, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-TW", cAlternateFileName="")) returned 1 [0053.575] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d760 | out: lpFindFileData=0x12d760*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0f9880, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-TW", cAlternateFileName="")) returned 0 [0053.575] FindClose (in: hFindFile=0x1af3b6b0 | out: hFindFile=0x1af3b6b0) returned 1 [0053.575] SetErrorMode (uMode=0x0) returned 0x1 [0053.575] GetFullPathNameW (in: lpFileName="C:\\Boot\\cs-CZ", nBufferLength=0x105, lpBuffer=0x12d4b0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\cs-CZ", lpFilePart=0x0) returned 0xd [0053.575] SetErrorMode (uMode=0x1) returned 0x0 [0053.575] FindFirstFileW (in: lpFileName="C:\\Boot\\cs-CZ\\*", lpFindFileData=0x12d650 | out: lpFindFileData=0x12d650*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac015040, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac015040, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1af3b6b0 [0053.578] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac015040, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac015040, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0053.578] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac015040, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe88a2888, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15c50, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0053.578] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac015040, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe88a2888, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15c50, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0053.578] FindClose (in: hFindFile=0x1af3b6b0 | out: hFindFile=0x1af3b6b0) returned 1 [0053.578] SetErrorMode (uMode=0x0) returned 0x1 [0053.579] GetFullPathNameW (in: lpFileName="C:\\Boot\\cs-CZ\\Decrypt Instructions.txt", nBufferLength=0x105, lpBuffer=0x12d360, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\cs-CZ\\Decrypt Instructions.txt", lpFilePart=0x0) returned 0x26 [0053.579] SetErrorMode (uMode=0x1) returned 0x0 [0053.579] CreateFileW (lpFileName="C:\\Boot\\cs-CZ\\Decrypt Instructions.txt" (normalized: "c:\\boot\\cs-cz\\decrypt instructions.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x464 [0053.580] GetFileType (hFile=0x464) returned 0x1 [0053.580] SetErrorMode (uMode=0x0) returned 0x1 [0053.580] GetFileType (hFile=0x464) returned 0x1 [0053.580] WriteFile (in: hFile=0x464, lpBuffer=0x2850b58*, nNumberOfBytesToWrite=0x773, lpNumberOfBytesWritten=0x12d8c8, lpOverlapped=0x0 | out: lpBuffer=0x2850b58*, lpNumberOfBytesWritten=0x12d8c8*=0x773, lpOverlapped=0x0) returned 1 [0053.581] CloseHandle (hObject=0x464) returned 1 [0053.582] GetFullPathNameW (in: lpFileName="C:\\Boot\\cs-CZ", nBufferLength=0x105, lpBuffer=0x12d550, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\cs-CZ", lpFilePart=0x0) returned 0xd [0053.583] SetErrorMode (uMode=0x1) returned 0x0 [0053.583] FindFirstFileW (in: lpFileName="C:\\Boot\\cs-CZ\\*", lpFindFileData=0x12d6f0 | out: lpFindFileData=0x12d6f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x40021590, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x40021590, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1af3b6b0 [0053.583] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d700 | out: lpFindFileData=0x12d700*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x40021590, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x40021590, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0053.583] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d700 | out: lpFindFileData=0x12d700*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac015040, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe88a2888, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15c50, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0053.583] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d700 | out: lpFindFileData=0x12d700*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x40021590, ftCreationTime.dwHighDateTime=0x1d5e786, ftLastAccessTime.dwLowDateTime=0x40021590, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x400476f0, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x773, dwReserved0=0x0, dwReserved1=0x0, cFileName="Decrypt Instructions.txt", cAlternateFileName="DECRYP~1.TXT")) returned 1 [0053.583] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d700 | out: lpFindFileData=0x12d700*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x40021590, ftCreationTime.dwHighDateTime=0x1d5e786, ftLastAccessTime.dwLowDateTime=0x40021590, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x400476f0, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x773, dwReserved0=0x0, dwReserved1=0x0, cFileName="Decrypt Instructions.txt", cAlternateFileName="DECRYP~1.TXT")) returned 0 [0053.583] FindClose (in: hFindFile=0x1af3b6b0 | out: hFindFile=0x1af3b6b0) returned 1 [0053.583] SetErrorMode (uMode=0x0) returned 0x1 [0053.583] GetFullPathNameW (in: lpFileName="C:\\Boot\\da-DK", nBufferLength=0x105, lpBuffer=0x12d4b0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\da-DK", lpFilePart=0x0) returned 0xd [0053.584] SetErrorMode (uMode=0x1) returned 0x0 [0053.584] FindFirstFileW (in: lpFileName="C:\\Boot\\da-DK\\*", lpFindFileData=0x12d650 | out: lpFindFileData=0x12d650*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1af3b6b0 [0053.584] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0053.584] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe868d5aa, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15640, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0053.584] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe868d5aa, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15640, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0053.584] FindClose (in: hFindFile=0x1af3b6b0 | out: hFindFile=0x1af3b6b0) returned 1 [0053.584] SetErrorMode (uMode=0x0) returned 0x1 [0053.585] GetFullPathNameW (in: lpFileName="C:\\Boot\\da-DK\\Decrypt Instructions.txt", nBufferLength=0x105, lpBuffer=0x12d360, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\da-DK\\Decrypt Instructions.txt", lpFilePart=0x0) returned 0x26 [0053.585] SetErrorMode (uMode=0x1) returned 0x0 [0053.585] CreateFileW (lpFileName="C:\\Boot\\da-DK\\Decrypt Instructions.txt" (normalized: "c:\\boot\\da-dk\\decrypt instructions.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x464 [0053.586] GetFileType (hFile=0x464) returned 0x1 [0053.586] SetErrorMode (uMode=0x0) returned 0x1 [0053.586] GetFileType (hFile=0x464) returned 0x1 [0053.586] WriteFile (in: hFile=0x464, lpBuffer=0x2856c98*, nNumberOfBytesToWrite=0x773, lpNumberOfBytesWritten=0x12d8c8, lpOverlapped=0x0 | out: lpBuffer=0x2856c98*, lpNumberOfBytesWritten=0x12d8c8*=0x773, lpOverlapped=0x0) returned 1 [0053.587] CloseHandle (hObject=0x464) returned 1 [0053.588] GetFullPathNameW (in: lpFileName="C:\\Boot\\da-DK", nBufferLength=0x105, lpBuffer=0x12d550, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\da-DK", lpFilePart=0x0) returned 0xd [0053.588] SetErrorMode (uMode=0x1) returned 0x0 [0053.588] FindFirstFileW (in: lpFileName="C:\\Boot\\da-DK\\*", lpFindFileData=0x12d6f0 | out: lpFindFileData=0x12d6f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x400476f0, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x400476f0, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1af3b6b0 [0053.588] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d700 | out: lpFindFileData=0x12d700*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x400476f0, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x400476f0, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0053.588] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d700 | out: lpFindFileData=0x12d700*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe868d5aa, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15640, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0053.588] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d700 | out: lpFindFileData=0x12d700*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x400476f0, ftCreationTime.dwHighDateTime=0x1d5e786, ftLastAccessTime.dwLowDateTime=0x400476f0, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x400476f0, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x773, dwReserved0=0x0, dwReserved1=0x0, cFileName="Decrypt Instructions.txt", cAlternateFileName="DECRYP~1.TXT")) returned 1 [0053.588] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d700 | out: lpFindFileData=0x12d700*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x400476f0, ftCreationTime.dwHighDateTime=0x1d5e786, ftLastAccessTime.dwLowDateTime=0x400476f0, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x400476f0, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x773, dwReserved0=0x0, dwReserved1=0x0, cFileName="Decrypt Instructions.txt", cAlternateFileName="DECRYP~1.TXT")) returned 0 [0053.589] FindClose (in: hFindFile=0x1af3b6b0 | out: hFindFile=0x1af3b6b0) returned 1 [0053.589] SetErrorMode (uMode=0x0) returned 0x1 [0053.589] GetFullPathNameW (in: lpFileName="C:\\Boot\\de-DE", nBufferLength=0x105, lpBuffer=0x12d4b0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\de-DE", lpFilePart=0x0) returned 0xd [0053.589] SetErrorMode (uMode=0x1) returned 0x0 [0053.589] FindFirstFileW (in: lpFileName="C:\\Boot\\de-DE\\*", lpFindFileData=0x12d650 | out: lpFindFileData=0x12d650*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1af3b6b0 [0053.594] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0053.594] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8132526, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16640, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0053.594] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8132526, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16640, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0053.594] FindClose (in: hFindFile=0x1af3b6b0 | out: hFindFile=0x1af3b6b0) returned 1 [0053.594] SetErrorMode (uMode=0x0) returned 0x1 [0053.595] GetFullPathNameW (in: lpFileName="C:\\Boot\\de-DE\\Decrypt Instructions.txt", nBufferLength=0x105, lpBuffer=0x12d360, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\de-DE\\Decrypt Instructions.txt", lpFilePart=0x0) returned 0x26 [0053.595] SetErrorMode (uMode=0x1) returned 0x0 [0053.595] CreateFileW (lpFileName="C:\\Boot\\de-DE\\Decrypt Instructions.txt" (normalized: "c:\\boot\\de-de\\decrypt instructions.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x464 [0053.596] GetFileType (hFile=0x464) returned 0x1 [0053.596] SetErrorMode (uMode=0x0) returned 0x1 [0053.596] GetFileType (hFile=0x464) returned 0x1 [0053.596] WriteFile (in: hFile=0x464, lpBuffer=0x285cdd8*, nNumberOfBytesToWrite=0x773, lpNumberOfBytesWritten=0x12d8c8, lpOverlapped=0x0 | out: lpBuffer=0x285cdd8*, lpNumberOfBytesWritten=0x12d8c8*=0x773, lpOverlapped=0x0) returned 1 [0053.598] CloseHandle (hObject=0x464) returned 1 [0053.598] GetFullPathNameW (in: lpFileName="C:\\Boot\\de-DE", nBufferLength=0x105, lpBuffer=0x12d550, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\de-DE", lpFilePart=0x0) returned 0xd [0053.598] SetErrorMode (uMode=0x1) returned 0x0 [0053.598] FindFirstFileW (in: lpFileName="C:\\Boot\\de-DE\\*", lpFindFileData=0x12d6f0 | out: lpFindFileData=0x12d6f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x400476f0, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x400476f0, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1af3b6b0 [0053.598] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d700 | out: lpFindFileData=0x12d700*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x400476f0, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x400476f0, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0053.599] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d700 | out: lpFindFileData=0x12d700*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8132526, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16640, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0053.599] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d700 | out: lpFindFileData=0x12d700*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x400476f0, ftCreationTime.dwHighDateTime=0x1d5e786, ftLastAccessTime.dwLowDateTime=0x400476f0, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x4006d850, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x773, dwReserved0=0x0, dwReserved1=0x0, cFileName="Decrypt Instructions.txt", cAlternateFileName="DECRYP~1.TXT")) returned 1 [0053.599] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d700 | out: lpFindFileData=0x12d700*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x400476f0, ftCreationTime.dwHighDateTime=0x1d5e786, ftLastAccessTime.dwLowDateTime=0x400476f0, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x4006d850, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x773, dwReserved0=0x0, dwReserved1=0x0, cFileName="Decrypt Instructions.txt", cAlternateFileName="DECRYP~1.TXT")) returned 0 [0053.599] FindClose (in: hFindFile=0x1af3b6b0 | out: hFindFile=0x1af3b6b0) returned 1 [0053.599] SetErrorMode (uMode=0x0) returned 0x1 [0053.599] GetFullPathNameW (in: lpFileName="C:\\Boot\\el-GR", nBufferLength=0x105, lpBuffer=0x12d4b0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\el-GR", lpFilePart=0x0) returned 0xd [0053.599] SetErrorMode (uMode=0x1) returned 0x0 [0053.599] FindFirstFileW (in: lpFileName="C:\\Boot\\el-GR\\*", lpFindFileData=0x12d650 | out: lpFindFileData=0x12d650*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1af3b6b0 [0053.600] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0053.600] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xea239054, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x17250, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0053.600] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xea239054, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x17250, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0053.600] FindClose (in: hFindFile=0x1af3b6b0 | out: hFindFile=0x1af3b6b0) returned 1 [0053.600] SetErrorMode (uMode=0x0) returned 0x1 [0053.600] GetFullPathNameW (in: lpFileName="C:\\Boot\\el-GR\\Decrypt Instructions.txt", nBufferLength=0x105, lpBuffer=0x12d360, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\el-GR\\Decrypt Instructions.txt", lpFilePart=0x0) returned 0x26 [0053.601] SetErrorMode (uMode=0x1) returned 0x0 [0053.601] CreateFileW (lpFileName="C:\\Boot\\el-GR\\Decrypt Instructions.txt" (normalized: "c:\\boot\\el-gr\\decrypt instructions.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x464 [0053.601] GetFileType (hFile=0x464) returned 0x1 [0053.601] SetErrorMode (uMode=0x0) returned 0x1 [0053.601] GetFileType (hFile=0x464) returned 0x1 [0053.602] WriteFile (in: hFile=0x464, lpBuffer=0x2862f18*, nNumberOfBytesToWrite=0x773, lpNumberOfBytesWritten=0x12d8c8, lpOverlapped=0x0 | out: lpBuffer=0x2862f18*, lpNumberOfBytesWritten=0x12d8c8*=0x773, lpOverlapped=0x0) returned 1 [0053.603] CloseHandle (hObject=0x464) returned 1 [0053.603] GetFullPathNameW (in: lpFileName="C:\\Boot\\el-GR", nBufferLength=0x105, lpBuffer=0x12d550, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\el-GR", lpFilePart=0x0) returned 0xd [0053.603] SetErrorMode (uMode=0x1) returned 0x0 [0053.603] FindFirstFileW (in: lpFileName="C:\\Boot\\el-GR\\*", lpFindFileData=0x12d6f0 | out: lpFindFileData=0x12d6f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x4006d850, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x4006d850, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1af3b6b0 [0053.604] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d700 | out: lpFindFileData=0x12d700*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x4006d850, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x4006d850, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0053.604] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d700 | out: lpFindFileData=0x12d700*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xea239054, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x17250, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0053.604] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d700 | out: lpFindFileData=0x12d700*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4006d850, ftCreationTime.dwHighDateTime=0x1d5e786, ftLastAccessTime.dwLowDateTime=0x4006d850, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x4006d850, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x773, dwReserved0=0x0, dwReserved1=0x0, cFileName="Decrypt Instructions.txt", cAlternateFileName="DECRYP~1.TXT")) returned 1 [0053.604] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d700 | out: lpFindFileData=0x12d700*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4006d850, ftCreationTime.dwHighDateTime=0x1d5e786, ftLastAccessTime.dwLowDateTime=0x4006d850, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x4006d850, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x773, dwReserved0=0x0, dwReserved1=0x0, cFileName="Decrypt Instructions.txt", cAlternateFileName="DECRYP~1.TXT")) returned 0 [0053.604] FindClose (in: hFindFile=0x1af3b6b0 | out: hFindFile=0x1af3b6b0) returned 1 [0053.604] SetErrorMode (uMode=0x0) returned 0x1 [0053.604] GetFullPathNameW (in: lpFileName="C:\\Boot\\en-US", nBufferLength=0x105, lpBuffer=0x12d4b0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\en-US", lpFilePart=0x0) returned 0xd [0053.604] SetErrorMode (uMode=0x1) returned 0x0 [0053.604] FindFirstFileW (in: lpFileName="C:\\Boot\\en-US\\*", lpFindFileData=0x12d650 | out: lpFindFileData=0x12d650*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1af3b6b0 [0053.623] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0053.624] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8216d3c, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x14c40, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0053.624] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xc3080a8, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xaa50, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0053.624] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xc3080a8, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xaa50, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0 [0053.624] FindClose (in: hFindFile=0x1af3b6b0 | out: hFindFile=0x1af3b6b0) returned 1 [0053.624] SetErrorMode (uMode=0x0) returned 0x1 [0053.625] GetFullPathNameW (in: lpFileName="C:\\Boot\\en-US\\Decrypt Instructions.txt", nBufferLength=0x105, lpBuffer=0x12d360, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\en-US\\Decrypt Instructions.txt", lpFilePart=0x0) returned 0x26 [0053.625] SetErrorMode (uMode=0x1) returned 0x0 [0053.625] CreateFileW (lpFileName="C:\\Boot\\en-US\\Decrypt Instructions.txt" (normalized: "c:\\boot\\en-us\\decrypt instructions.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x464 [0053.632] GetFileType (hFile=0x464) returned 0x1 [0053.632] SetErrorMode (uMode=0x0) returned 0x1 [0053.632] GetFileType (hFile=0x464) returned 0x1 [0054.465] WriteFile (in: hFile=0x464, lpBuffer=0x28691b0*, nNumberOfBytesToWrite=0x773, lpNumberOfBytesWritten=0x12d8c8, lpOverlapped=0x0 | out: lpBuffer=0x28691b0*, lpNumberOfBytesWritten=0x12d8c8*=0x773, lpOverlapped=0x0) returned 1 [0054.466] CloseHandle (hObject=0x464) returned 1 [0054.466] GetFullPathNameW (in: lpFileName="C:\\Boot\\en-US", nBufferLength=0x105, lpBuffer=0x12d550, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\en-US", lpFilePart=0x0) returned 0xd [0054.466] SetErrorMode (uMode=0x1) returned 0x0 [0054.466] FindFirstFileW (in: lpFileName="C:\\Boot\\en-US\\*", lpFindFileData=0x12d6f0 | out: lpFindFileData=0x12d6f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x400b9b10, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x400b9b10, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1af3b6b0 [0054.466] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d700 | out: lpFindFileData=0x12d700*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x400b9b10, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x400b9b10, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0054.466] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d700 | out: lpFindFileData=0x12d700*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8216d3c, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x14c40, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0054.467] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d700 | out: lpFindFileData=0x12d700*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x400939b0, ftCreationTime.dwHighDateTime=0x1d5e786, ftLastAccessTime.dwLowDateTime=0x400939b0, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x4089c3f0, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x773, dwReserved0=0x0, dwReserved1=0x0, cFileName="Decrypt Instructions.txt", cAlternateFileName="DECRYP~1.TXT")) returned 1 [0054.467] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d700 | out: lpFindFileData=0x12d700*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xc3080a8, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xaa50, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0054.467] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d700 | out: lpFindFileData=0x12d700*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xc3080a8, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xaa50, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0 [0054.467] FindClose (in: hFindFile=0x1af3b6b0 | out: hFindFile=0x1af3b6b0) returned 1 [0054.467] SetErrorMode (uMode=0x0) returned 0x1 [0054.467] GetFullPathNameW (in: lpFileName="C:\\Boot\\es-ES", nBufferLength=0x105, lpBuffer=0x12d4b0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\es-ES", lpFilePart=0x0) returned 0xd [0054.467] SetErrorMode (uMode=0x1) returned 0x0 [0054.467] FindFirstFileW (in: lpFileName="C:\\Boot\\es-ES\\*", lpFindFileData=0x12d650 | out: lpFindFileData=0x12d650*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1af3b6b0 [0054.550] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0054.550] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe84ea6d7, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16050, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0054.550] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe84ea6d7, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16050, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0054.550] FindClose (in: hFindFile=0x1af3b6b0 | out: hFindFile=0x1af3b6b0) returned 1 [0054.550] SetErrorMode (uMode=0x0) returned 0x1 [0054.551] GetFullPathNameW (in: lpFileName="C:\\Boot\\es-ES\\Decrypt Instructions.txt", nBufferLength=0x105, lpBuffer=0x12d360, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\es-ES\\Decrypt Instructions.txt", lpFilePart=0x0) returned 0x26 [0054.551] SetErrorMode (uMode=0x1) returned 0x0 [0054.551] CreateFileW (lpFileName="C:\\Boot\\es-ES\\Decrypt Instructions.txt" (normalized: "c:\\boot\\es-es\\decrypt instructions.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x464 [0054.551] GetFileType (hFile=0x464) returned 0x1 [0054.551] SetErrorMode (uMode=0x0) returned 0x1 [0054.551] GetFileType (hFile=0x464) returned 0x1 [0054.552] WriteFile (in: hFile=0x464, lpBuffer=0x286f348*, nNumberOfBytesToWrite=0x773, lpNumberOfBytesWritten=0x12d8c8, lpOverlapped=0x0 | out: lpBuffer=0x286f348*, lpNumberOfBytesWritten=0x12d8c8*=0x773, lpOverlapped=0x0) returned 1 [0054.553] CloseHandle (hObject=0x464) returned 1 [0054.553] GetFullPathNameW (in: lpFileName="C:\\Boot\\es-ES", nBufferLength=0x105, lpBuffer=0x12d550, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\es-ES", lpFilePart=0x0) returned 0xd [0054.553] SetErrorMode (uMode=0x1) returned 0x0 [0054.553] FindFirstFileW (in: lpFileName="C:\\Boot\\es-ES\\*", lpFindFileData=0x12d6f0 | out: lpFindFileData=0x12d6f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x40980c30, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x40980c30, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1af3b6b0 [0054.553] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d700 | out: lpFindFileData=0x12d700*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x40980c30, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x40980c30, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0054.553] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d700 | out: lpFindFileData=0x12d700*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe84ea6d7, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16050, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0054.554] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d700 | out: lpFindFileData=0x12d700*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x40980c30, ftCreationTime.dwHighDateTime=0x1d5e786, ftLastAccessTime.dwLowDateTime=0x40980c30, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x40980c30, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x773, dwReserved0=0x0, dwReserved1=0x0, cFileName="Decrypt Instructions.txt", cAlternateFileName="DECRYP~1.TXT")) returned 1 [0054.554] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d700 | out: lpFindFileData=0x12d700*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x40980c30, ftCreationTime.dwHighDateTime=0x1d5e786, ftLastAccessTime.dwLowDateTime=0x40980c30, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x40980c30, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x773, dwReserved0=0x0, dwReserved1=0x0, cFileName="Decrypt Instructions.txt", cAlternateFileName="DECRYP~1.TXT")) returned 0 [0054.554] FindClose (in: hFindFile=0x1af3b6b0 | out: hFindFile=0x1af3b6b0) returned 1 [0054.554] SetErrorMode (uMode=0x0) returned 0x1 [0054.554] GetFullPathNameW (in: lpFileName="C:\\Boot\\fi-FI", nBufferLength=0x105, lpBuffer=0x12d4b0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\fi-FI", lpFilePart=0x0) returned 0xd [0055.393] SetErrorMode (uMode=0x1) returned 0x0 [0055.393] FindFirstFileW (in: lpFileName="C:\\Boot\\fi-FI\\*", lpFindFileData=0x12d650 | out: lpFindFileData=0x12d650*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1af3b6b0 [0055.394] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0055.394] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe836d95d, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15c40, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0055.394] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe836d95d, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15c40, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0055.394] FindClose (in: hFindFile=0x1af3b6b0 | out: hFindFile=0x1af3b6b0) returned 1 [0055.394] SetErrorMode (uMode=0x0) returned 0x1 [0055.395] GetFullPathNameW (in: lpFileName="C:\\Boot\\fi-FI\\Decrypt Instructions.txt", nBufferLength=0x105, lpBuffer=0x12d360, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\fi-FI\\Decrypt Instructions.txt", lpFilePart=0x0) returned 0x26 [0055.395] SetErrorMode (uMode=0x1) returned 0x0 [0055.395] CreateFileW (lpFileName="C:\\Boot\\fi-FI\\Decrypt Instructions.txt" (normalized: "c:\\boot\\fi-fi\\decrypt instructions.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x464 [0055.396] GetFileType (hFile=0x464) returned 0x1 [0055.396] SetErrorMode (uMode=0x0) returned 0x1 [0055.396] GetFileType (hFile=0x464) returned 0x1 [0055.396] WriteFile (in: hFile=0x464, lpBuffer=0x26c5680*, nNumberOfBytesToWrite=0x773, lpNumberOfBytesWritten=0x12d8c8, lpOverlapped=0x0 | out: lpBuffer=0x26c5680*, lpNumberOfBytesWritten=0x12d8c8*=0x773, lpOverlapped=0x0) returned 1 [0055.397] CloseHandle (hObject=0x464) returned 1 [0055.397] GetFullPathNameW (in: lpFileName="C:\\Boot\\fi-FI", nBufferLength=0x105, lpBuffer=0x12d550, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\fi-FI", lpFilePart=0x0) returned 0xd [0055.398] SetErrorMode (uMode=0x1) returned 0x0 [0055.398] FindFirstFileW (in: lpFileName="C:\\Boot\\fi-FI\\*", lpFindFileData=0x12d6f0 | out: lpFindFileData=0x12d6f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x41189670, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x41189670, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1af3b6b0 [0055.398] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d700 | out: lpFindFileData=0x12d700*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x41189670, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x41189670, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0055.398] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d700 | out: lpFindFileData=0x12d700*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe836d95d, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15c40, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0055.398] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d700 | out: lpFindFileData=0x12d700*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41189670, ftCreationTime.dwHighDateTime=0x1d5e786, ftLastAccessTime.dwLowDateTime=0x41189670, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x41189670, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x773, dwReserved0=0x0, dwReserved1=0x0, cFileName="Decrypt Instructions.txt", cAlternateFileName="DECRYP~1.TXT")) returned 1 [0055.398] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d700 | out: lpFindFileData=0x12d700*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41189670, ftCreationTime.dwHighDateTime=0x1d5e786, ftLastAccessTime.dwLowDateTime=0x41189670, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x41189670, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x773, dwReserved0=0x0, dwReserved1=0x0, cFileName="Decrypt Instructions.txt", cAlternateFileName="DECRYP~1.TXT")) returned 0 [0055.399] FindClose (in: hFindFile=0x1af3b6b0 | out: hFindFile=0x1af3b6b0) returned 1 [0055.399] SetErrorMode (uMode=0x0) returned 0x1 [0055.399] GetFullPathNameW (in: lpFileName="C:\\Boot\\Fonts", nBufferLength=0x105, lpBuffer=0x12d4b0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\Fonts", lpFilePart=0x0) returned 0xd [0055.399] SetErrorMode (uMode=0x1) returned 0x0 [0055.399] FindFirstFileW (in: lpFileName="C:\\Boot\\Fonts\\*", lpFindFileData=0x12d650 | out: lpFindFileData=0x12d650*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac276640, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac276640, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1af3b6b0 [0055.419] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac276640, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac276640, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0055.419] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x64c5ad69, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0x385e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="chs_boot.ttf", cAlternateFileName="")) returned 1 [0055.420] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac191e00, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac191e00, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x6505f253, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0x3b27a4, dwReserved0=0x0, dwReserved1=0x0, cFileName="cht_boot.ttf", cAlternateFileName="")) returned 1 [0055.420] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac204220, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac204220, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x65274577, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0x1e46e4, dwReserved0=0x0, dwReserved1=0x0, cFileName="jpn_boot.ttf", cAlternateFileName="")) returned 1 [0055.420] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac22a380, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac22a380, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x6530caef, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0x242f20, dwReserved0=0x0, dwReserved1=0x0, cFileName="kor_boot.ttf", cAlternateFileName="")) returned 1 [0055.420] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac276640, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac276640, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x65332c4d, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xb95c, dwReserved0=0x0, dwReserved1=0x0, cFileName="wgl4_boot.ttf", cAlternateFileName="WGL4_B~1.TTF")) returned 1 [0055.420] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac276640, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac276640, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x65332c4d, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xb95c, dwReserved0=0x0, dwReserved1=0x0, cFileName="wgl4_boot.ttf", cAlternateFileName="WGL4_B~1.TTF")) returned 0 [0055.420] FindClose (in: hFindFile=0x1af3b6b0 | out: hFindFile=0x1af3b6b0) returned 1 [0055.421] SetErrorMode (uMode=0x0) returned 0x1 [0055.422] GetFullPathNameW (in: lpFileName="C:\\Boot\\Fonts\\Decrypt Instructions.txt", nBufferLength=0x105, lpBuffer=0x12d360, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\Fonts\\Decrypt Instructions.txt", lpFilePart=0x0) returned 0x26 [0055.423] SetErrorMode (uMode=0x1) returned 0x0 [0055.423] CreateFileW (lpFileName="C:\\Boot\\Fonts\\Decrypt Instructions.txt" (normalized: "c:\\boot\\fonts\\decrypt instructions.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1e8 [0055.425] GetFileType (hFile=0x1e8) returned 0x1 [0055.425] SetErrorMode (uMode=0x0) returned 0x1 [0055.425] GetFileType (hFile=0x1e8) returned 0x1 [0055.425] WriteFile (in: hFile=0x1e8, lpBuffer=0x26cbc18*, nNumberOfBytesToWrite=0x773, lpNumberOfBytesWritten=0x12d8c8, lpOverlapped=0x0 | out: lpBuffer=0x26cbc18*, lpNumberOfBytesWritten=0x12d8c8*=0x773, lpOverlapped=0x0) returned 1 [0055.426] CloseHandle (hObject=0x1e8) returned 1 [0055.427] GetFullPathNameW (in: lpFileName="C:\\Boot\\Fonts", nBufferLength=0x105, lpBuffer=0x12d550, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\Fonts", lpFilePart=0x0) returned 0xd [0055.427] SetErrorMode (uMode=0x1) returned 0x0 [0055.427] FindFirstFileW (in: lpFileName="C:\\Boot\\Fonts\\*", lpFindFileData=0x12d6f0 | out: lpFindFileData=0x12d6f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x411d5930, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x411d5930, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1af3b6b0 [0055.427] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d700 | out: lpFindFileData=0x12d700*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x411d5930, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x411d5930, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0055.427] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d700 | out: lpFindFileData=0x12d700*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x64c5ad69, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0x385e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="chs_boot.ttf", cAlternateFileName="")) returned 1 [0055.428] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d700 | out: lpFindFileData=0x12d700*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac191e00, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac191e00, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x6505f253, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0x3b27a4, dwReserved0=0x0, dwReserved1=0x0, cFileName="cht_boot.ttf", cAlternateFileName="")) returned 1 [0055.428] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d700 | out: lpFindFileData=0x12d700*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x411d5930, ftCreationTime.dwHighDateTime=0x1d5e786, ftLastAccessTime.dwLowDateTime=0x411d5930, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x411d5930, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x773, dwReserved0=0x0, dwReserved1=0x0, cFileName="Decrypt Instructions.txt", cAlternateFileName="DECRYP~1.TXT")) returned 1 [0055.428] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d700 | out: lpFindFileData=0x12d700*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac204220, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac204220, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x65274577, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0x1e46e4, dwReserved0=0x0, dwReserved1=0x0, cFileName="jpn_boot.ttf", cAlternateFileName="")) returned 1 [0055.428] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d700 | out: lpFindFileData=0x12d700*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac22a380, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac22a380, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x6530caef, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0x242f20, dwReserved0=0x0, dwReserved1=0x0, cFileName="kor_boot.ttf", cAlternateFileName="")) returned 1 [0055.428] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d700 | out: lpFindFileData=0x12d700*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac276640, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac276640, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x65332c4d, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xb95c, dwReserved0=0x0, dwReserved1=0x0, cFileName="wgl4_boot.ttf", cAlternateFileName="WGL4_B~1.TTF")) returned 1 [0055.428] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d700 | out: lpFindFileData=0x12d700*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac276640, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac276640, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x65332c4d, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xb95c, dwReserved0=0x0, dwReserved1=0x0, cFileName="wgl4_boot.ttf", cAlternateFileName="WGL4_B~1.TTF")) returned 0 [0055.429] FindClose (in: hFindFile=0x1af3b6b0 | out: hFindFile=0x1af3b6b0) returned 1 [0055.429] SetErrorMode (uMode=0x0) returned 0x1 [0055.429] GetFullPathNameW (in: lpFileName="C:\\Boot\\fr-FR", nBufferLength=0x105, lpBuffer=0x12d4b0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\fr-FR", lpFilePart=0x0) returned 0xd [0055.429] SetErrorMode (uMode=0x1) returned 0x0 [0055.429] FindFirstFileW (in: lpFileName="C:\\Boot\\fr-FR\\*", lpFindFileData=0x12d650 | out: lpFindFileData=0x12d650*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1af3b6b0 [0055.430] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0055.430] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe86b3703, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16c40, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0055.430] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe86b3703, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16c40, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0055.430] FindClose (in: hFindFile=0x1af3b6b0 | out: hFindFile=0x1af3b6b0) returned 1 [0055.431] SetErrorMode (uMode=0x0) returned 0x1 [0055.431] GetFullPathNameW (in: lpFileName="C:\\Boot\\fr-FR\\Decrypt Instructions.txt", nBufferLength=0x105, lpBuffer=0x12d360, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\fr-FR\\Decrypt Instructions.txt", lpFilePart=0x0) returned 0x26 [0055.431] SetErrorMode (uMode=0x1) returned 0x0 [0055.431] CreateFileW (lpFileName="C:\\Boot\\fr-FR\\Decrypt Instructions.txt" (normalized: "c:\\boot\\fr-fr\\decrypt instructions.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1e8 [0055.431] GetFileType (hFile=0x1e8) returned 0x1 [0055.431] SetErrorMode (uMode=0x0) returned 0x1 [0055.432] GetFileType (hFile=0x1e8) returned 0x1 [0055.432] WriteFile (in: hFile=0x1e8, lpBuffer=0x26d1e20*, nNumberOfBytesToWrite=0x773, lpNumberOfBytesWritten=0x12d8c8, lpOverlapped=0x0 | out: lpBuffer=0x26d1e20*, lpNumberOfBytesWritten=0x12d8c8*=0x773, lpOverlapped=0x0) returned 1 [0055.433] CloseHandle (hObject=0x1e8) returned 1 [0055.433] GetFullPathNameW (in: lpFileName="C:\\Boot\\fr-FR", nBufferLength=0x105, lpBuffer=0x12d550, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\fr-FR", lpFilePart=0x0) returned 0xd [0055.433] SetErrorMode (uMode=0x1) returned 0x0 [0055.433] FindFirstFileW (in: lpFileName="C:\\Boot\\fr-FR\\*", lpFindFileData=0x12d6f0 | out: lpFindFileData=0x12d6f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x411d5930, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x411d5930, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1af3b6b0 [0055.433] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d700 | out: lpFindFileData=0x12d700*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x411d5930, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x411d5930, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0055.433] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d700 | out: lpFindFileData=0x12d700*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe86b3703, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16c40, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0055.434] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d700 | out: lpFindFileData=0x12d700*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x411d5930, ftCreationTime.dwHighDateTime=0x1d5e786, ftLastAccessTime.dwLowDateTime=0x411d5930, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x411d5930, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x773, dwReserved0=0x0, dwReserved1=0x0, cFileName="Decrypt Instructions.txt", cAlternateFileName="DECRYP~1.TXT")) returned 1 [0055.434] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d700 | out: lpFindFileData=0x12d700*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x411d5930, ftCreationTime.dwHighDateTime=0x1d5e786, ftLastAccessTime.dwLowDateTime=0x411d5930, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x411d5930, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x773, dwReserved0=0x0, dwReserved1=0x0, cFileName="Decrypt Instructions.txt", cAlternateFileName="DECRYP~1.TXT")) returned 0 [0055.434] FindClose (in: hFindFile=0x1af3b6b0 | out: hFindFile=0x1af3b6b0) returned 1 [0055.434] SetErrorMode (uMode=0x0) returned 0x1 [0055.434] GetFullPathNameW (in: lpFileName="C:\\Boot\\hu-HU", nBufferLength=0x105, lpBuffer=0x12d4b0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\hu-HU", lpFilePart=0x0) returned 0xd [0055.434] SetErrorMode (uMode=0x1) returned 0x0 [0055.434] FindFirstFileW (in: lpFileName="C:\\Boot\\hu-HU\\*", lpFindFileData=0x12d650 | out: lpFindFileData=0x12d650*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1af3b6b0 [0055.435] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0055.435] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe817e7d8, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16240, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0055.435] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe817e7d8, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16240, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0055.435] FindClose (in: hFindFile=0x1af3b6b0 | out: hFindFile=0x1af3b6b0) returned 1 [0055.435] SetErrorMode (uMode=0x0) returned 0x1 [0055.435] GetFullPathNameW (in: lpFileName="C:\\Boot\\hu-HU\\Decrypt Instructions.txt", nBufferLength=0x105, lpBuffer=0x12d360, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\hu-HU\\Decrypt Instructions.txt", lpFilePart=0x0) returned 0x26 [0055.435] SetErrorMode (uMode=0x1) returned 0x0 [0055.435] CreateFileW (lpFileName="C:\\Boot\\hu-HU\\Decrypt Instructions.txt" (normalized: "c:\\boot\\hu-hu\\decrypt instructions.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1e8 [0055.436] GetFileType (hFile=0x1e8) returned 0x1 [0055.436] SetErrorMode (uMode=0x0) returned 0x1 [0055.436] GetFileType (hFile=0x1e8) returned 0x1 [0055.436] WriteFile (in: hFile=0x1e8, lpBuffer=0x26d7f60*, nNumberOfBytesToWrite=0x773, lpNumberOfBytesWritten=0x12d8c8, lpOverlapped=0x0 | out: lpBuffer=0x26d7f60*, lpNumberOfBytesWritten=0x12d8c8*=0x773, lpOverlapped=0x0) returned 1 [0055.437] CloseHandle (hObject=0x1e8) returned 1 [0055.437] GetFullPathNameW (in: lpFileName="C:\\Boot\\hu-HU", nBufferLength=0x105, lpBuffer=0x12d550, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\hu-HU", lpFilePart=0x0) returned 0xd [0055.437] SetErrorMode (uMode=0x1) returned 0x0 [0055.438] FindFirstFileW (in: lpFileName="C:\\Boot\\hu-HU\\*", lpFindFileData=0x12d6f0 | out: lpFindFileData=0x12d6f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x411d5930, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x411d5930, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1af3b6b0 [0055.438] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d700 | out: lpFindFileData=0x12d700*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x411d5930, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x411d5930, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0055.438] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d700 | out: lpFindFileData=0x12d700*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe817e7d8, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16240, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0055.438] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d700 | out: lpFindFileData=0x12d700*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x411d5930, ftCreationTime.dwHighDateTime=0x1d5e786, ftLastAccessTime.dwLowDateTime=0x411d5930, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x411fba90, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x773, dwReserved0=0x0, dwReserved1=0x0, cFileName="Decrypt Instructions.txt", cAlternateFileName="DECRYP~1.TXT")) returned 1 [0055.438] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d700 | out: lpFindFileData=0x12d700*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x411d5930, ftCreationTime.dwHighDateTime=0x1d5e786, ftLastAccessTime.dwLowDateTime=0x411d5930, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x411fba90, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x773, dwReserved0=0x0, dwReserved1=0x0, cFileName="Decrypt Instructions.txt", cAlternateFileName="DECRYP~1.TXT")) returned 0 [0055.438] FindClose (in: hFindFile=0x1af3b6b0 | out: hFindFile=0x1af3b6b0) returned 1 [0055.438] SetErrorMode (uMode=0x0) returned 0x1 [0055.438] GetFullPathNameW (in: lpFileName="C:\\Boot\\it-IT", nBufferLength=0x105, lpBuffer=0x12d4b0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\it-IT", lpFilePart=0x0) returned 0xd [0055.438] SetErrorMode (uMode=0x1) returned 0x0 [0055.438] FindFirstFileW (in: lpFileName="C:\\Boot\\it-IT\\*", lpFindFileData=0x12d650 | out: lpFindFileData=0x12d650*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1af3b6b0 [0055.439] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0055.439] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe9e80ea3, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16250, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0055.439] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe9e80ea3, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16250, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0055.439] FindClose (in: hFindFile=0x1af3b6b0 | out: hFindFile=0x1af3b6b0) returned 1 [0055.441] SetErrorMode (uMode=0x0) returned 0x1 [0055.441] GetFullPathNameW (in: lpFileName="C:\\Boot\\it-IT\\Decrypt Instructions.txt", nBufferLength=0x105, lpBuffer=0x12d360, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\it-IT\\Decrypt Instructions.txt", lpFilePart=0x0) returned 0x26 [0055.441] SetErrorMode (uMode=0x1) returned 0x0 [0055.441] CreateFileW (lpFileName="C:\\Boot\\it-IT\\Decrypt Instructions.txt" (normalized: "c:\\boot\\it-it\\decrypt instructions.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1e8 [0055.442] GetFileType (hFile=0x1e8) returned 0x1 [0055.442] SetErrorMode (uMode=0x0) returned 0x1 [0055.442] GetFileType (hFile=0x1e8) returned 0x1 [0055.442] WriteFile (in: hFile=0x1e8, lpBuffer=0x26de0a0*, nNumberOfBytesToWrite=0x773, lpNumberOfBytesWritten=0x12d8c8, lpOverlapped=0x0 | out: lpBuffer=0x26de0a0*, lpNumberOfBytesWritten=0x12d8c8*=0x773, lpOverlapped=0x0) returned 1 [0055.443] CloseHandle (hObject=0x1e8) returned 1 [0055.443] GetFullPathNameW (in: lpFileName="C:\\Boot\\it-IT", nBufferLength=0x105, lpBuffer=0x12d550, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\it-IT", lpFilePart=0x0) returned 0xd [0055.443] SetErrorMode (uMode=0x1) returned 0x0 [0055.444] FindFirstFileW (in: lpFileName="C:\\Boot\\it-IT\\*", lpFindFileData=0x12d6f0 | out: lpFindFileData=0x12d6f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x411fba90, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x411fba90, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1af3b6b0 [0055.444] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d700 | out: lpFindFileData=0x12d700*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x411fba90, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x411fba90, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0055.444] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d700 | out: lpFindFileData=0x12d700*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe9e80ea3, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16250, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0055.444] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d700 | out: lpFindFileData=0x12d700*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x411fba90, ftCreationTime.dwHighDateTime=0x1d5e786, ftLastAccessTime.dwLowDateTime=0x411fba90, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x411fba90, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x773, dwReserved0=0x0, dwReserved1=0x0, cFileName="Decrypt Instructions.txt", cAlternateFileName="DECRYP~1.TXT")) returned 1 [0055.444] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d700 | out: lpFindFileData=0x12d700*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x411fba90, ftCreationTime.dwHighDateTime=0x1d5e786, ftLastAccessTime.dwLowDateTime=0x411fba90, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x411fba90, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x773, dwReserved0=0x0, dwReserved1=0x0, cFileName="Decrypt Instructions.txt", cAlternateFileName="DECRYP~1.TXT")) returned 0 [0055.444] FindClose (in: hFindFile=0x1af3b6b0 | out: hFindFile=0x1af3b6b0) returned 1 [0055.444] SetErrorMode (uMode=0x0) returned 0x1 [0055.444] GetFullPathNameW (in: lpFileName="C:\\Boot\\ja-JP", nBufferLength=0x105, lpBuffer=0x12d4b0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\ja-JP", lpFilePart=0x0) returned 0xd [0055.444] SetErrorMode (uMode=0x1) returned 0x0 [0055.444] FindFirstFileW (in: lpFileName="C:\\Boot\\ja-JP\\*", lpFindFileData=0x12d650 | out: lpFindFileData=0x12d650*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac087460, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac087460, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1af3b6b0 [0055.445] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac087460, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac087460, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0055.445] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac087460, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8216d3c, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x12a40, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0055.445] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac087460, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8216d3c, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x12a40, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0055.445] FindClose (in: hFindFile=0x1af3b6b0 | out: hFindFile=0x1af3b6b0) returned 1 [0055.445] SetErrorMode (uMode=0x0) returned 0x1 [0055.445] GetFullPathNameW (in: lpFileName="C:\\Boot\\ja-JP\\Decrypt Instructions.txt", nBufferLength=0x105, lpBuffer=0x12d360, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\ja-JP\\Decrypt Instructions.txt", lpFilePart=0x0) returned 0x26 [0055.446] SetErrorMode (uMode=0x1) returned 0x0 [0055.446] CreateFileW (lpFileName="C:\\Boot\\ja-JP\\Decrypt Instructions.txt" (normalized: "c:\\boot\\ja-jp\\decrypt instructions.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1e8 [0055.446] GetFileType (hFile=0x1e8) returned 0x1 [0055.446] SetErrorMode (uMode=0x0) returned 0x1 [0055.446] GetFileType (hFile=0x1e8) returned 0x1 [0055.446] WriteFile (in: hFile=0x1e8, lpBuffer=0x26e41e0*, nNumberOfBytesToWrite=0x773, lpNumberOfBytesWritten=0x12d8c8, lpOverlapped=0x0 | out: lpBuffer=0x26e41e0*, lpNumberOfBytesWritten=0x12d8c8*=0x773, lpOverlapped=0x0) returned 1 [0055.447] CloseHandle (hObject=0x1e8) returned 1 [0055.447] GetFullPathNameW (in: lpFileName="C:\\Boot\\ja-JP", nBufferLength=0x105, lpBuffer=0x12d550, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\ja-JP", lpFilePart=0x0) returned 0xd [0055.447] SetErrorMode (uMode=0x1) returned 0x0 [0055.447] FindFirstFileW (in: lpFileName="C:\\Boot\\ja-JP\\*", lpFindFileData=0x12d6f0 | out: lpFindFileData=0x12d6f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x411fba90, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x411fba90, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1af3b6b0 [0055.448] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d700 | out: lpFindFileData=0x12d700*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x411fba90, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x411fba90, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0055.448] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d700 | out: lpFindFileData=0x12d700*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac087460, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8216d3c, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x12a40, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0055.448] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d700 | out: lpFindFileData=0x12d700*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x411fba90, ftCreationTime.dwHighDateTime=0x1d5e786, ftLastAccessTime.dwLowDateTime=0x411fba90, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x411fba90, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x773, dwReserved0=0x0, dwReserved1=0x0, cFileName="Decrypt Instructions.txt", cAlternateFileName="DECRYP~1.TXT")) returned 1 [0055.448] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d700 | out: lpFindFileData=0x12d700*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x411fba90, ftCreationTime.dwHighDateTime=0x1d5e786, ftLastAccessTime.dwLowDateTime=0x411fba90, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x411fba90, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x773, dwReserved0=0x0, dwReserved1=0x0, cFileName="Decrypt Instructions.txt", cAlternateFileName="DECRYP~1.TXT")) returned 0 [0055.448] FindClose (in: hFindFile=0x1af3b6b0 | out: hFindFile=0x1af3b6b0) returned 1 [0055.448] SetErrorMode (uMode=0x0) returned 0x1 [0055.448] GetFullPathNameW (in: lpFileName="C:\\Boot\\ko-KR", nBufferLength=0x105, lpBuffer=0x12d4b0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\ko-KR", lpFilePart=0x0) returned 0xd [0055.448] SetErrorMode (uMode=0x1) returned 0x0 [0055.448] FindFirstFileW (in: lpFileName="C:\\Boot\\ko-KR\\*", lpFindFileData=0x12d650 | out: lpFindFileData=0x12d650*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac087460, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac087460, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1af3b6b0 [0055.449] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac087460, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac087460, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0055.449] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac087460, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8510830, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x12650, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0055.449] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac087460, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8510830, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x12650, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0055.449] FindClose (in: hFindFile=0x1af3b6b0 | out: hFindFile=0x1af3b6b0) returned 1 [0055.449] SetErrorMode (uMode=0x0) returned 0x1 [0055.450] GetFullPathNameW (in: lpFileName="C:\\Boot\\ko-KR\\Decrypt Instructions.txt", nBufferLength=0x105, lpBuffer=0x12d360, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\ko-KR\\Decrypt Instructions.txt", lpFilePart=0x0) returned 0x26 [0055.450] SetErrorMode (uMode=0x1) returned 0x0 [0055.450] CreateFileW (lpFileName="C:\\Boot\\ko-KR\\Decrypt Instructions.txt" (normalized: "c:\\boot\\ko-kr\\decrypt instructions.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1e8 [0055.450] GetFileType (hFile=0x1e8) returned 0x1 [0055.450] SetErrorMode (uMode=0x0) returned 0x1 [0055.450] GetFileType (hFile=0x1e8) returned 0x1 [0055.451] WriteFile (in: hFile=0x1e8, lpBuffer=0x26ea320*, nNumberOfBytesToWrite=0x773, lpNumberOfBytesWritten=0x12d8c8, lpOverlapped=0x0 | out: lpBuffer=0x26ea320*, lpNumberOfBytesWritten=0x12d8c8*=0x773, lpOverlapped=0x0) returned 1 [0055.452] CloseHandle (hObject=0x1e8) returned 1 [0055.452] GetFullPathNameW (in: lpFileName="C:\\Boot\\ko-KR", nBufferLength=0x105, lpBuffer=0x12d550, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\ko-KR", lpFilePart=0x0) returned 0xd [0055.452] SetErrorMode (uMode=0x1) returned 0x0 [0055.452] FindFirstFileW (in: lpFileName="C:\\Boot\\ko-KR\\*", lpFindFileData=0x12d6f0 | out: lpFindFileData=0x12d6f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x411fba90, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x411fba90, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1af3b6b0 [0055.452] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d700 | out: lpFindFileData=0x12d700*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x411fba90, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x411fba90, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0055.452] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d700 | out: lpFindFileData=0x12d700*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac087460, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8510830, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x12650, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0055.452] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d700 | out: lpFindFileData=0x12d700*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x411fba90, ftCreationTime.dwHighDateTime=0x1d5e786, ftLastAccessTime.dwLowDateTime=0x411fba90, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x411fba90, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x773, dwReserved0=0x0, dwReserved1=0x0, cFileName="Decrypt Instructions.txt", cAlternateFileName="DECRYP~1.TXT")) returned 1 [0055.452] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d700 | out: lpFindFileData=0x12d700*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x411fba90, ftCreationTime.dwHighDateTime=0x1d5e786, ftLastAccessTime.dwLowDateTime=0x411fba90, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x411fba90, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x773, dwReserved0=0x0, dwReserved1=0x0, cFileName="Decrypt Instructions.txt", cAlternateFileName="DECRYP~1.TXT")) returned 0 [0055.452] FindClose (in: hFindFile=0x1af3b6b0 | out: hFindFile=0x1af3b6b0) returned 1 [0055.452] SetErrorMode (uMode=0x0) returned 0x1 [0055.453] GetFullPathNameW (in: lpFileName="C:\\Boot\\nb-NO", nBufferLength=0x105, lpBuffer=0x12d4b0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\nb-NO", lpFilePart=0x0) returned 0xd [0055.453] SetErrorMode (uMode=0x1) returned 0x0 [0055.453] FindFirstFileW (in: lpFileName="C:\\Boot\\nb-NO\\*", lpFindFileData=0x12d650 | out: lpFindFileData=0x12d650*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1af3b6b0 [0055.453] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0055.453] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xea212efb, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15850, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0055.453] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xea212efb, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15850, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0055.453] FindClose (in: hFindFile=0x1af3b6b0 | out: hFindFile=0x1af3b6b0) returned 1 [0055.454] SetErrorMode (uMode=0x0) returned 0x1 [0055.454] GetFullPathNameW (in: lpFileName="C:\\Boot\\nb-NO\\Decrypt Instructions.txt", nBufferLength=0x105, lpBuffer=0x12d360, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\nb-NO\\Decrypt Instructions.txt", lpFilePart=0x0) returned 0x26 [0055.454] SetErrorMode (uMode=0x1) returned 0x0 [0055.454] CreateFileW (lpFileName="C:\\Boot\\nb-NO\\Decrypt Instructions.txt" (normalized: "c:\\boot\\nb-no\\decrypt instructions.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1e8 [0055.454] GetFileType (hFile=0x1e8) returned 0x1 [0055.454] SetErrorMode (uMode=0x0) returned 0x1 [0055.454] GetFileType (hFile=0x1e8) returned 0x1 [0055.455] WriteFile (in: hFile=0x1e8, lpBuffer=0x26f0460*, nNumberOfBytesToWrite=0x773, lpNumberOfBytesWritten=0x12d8c8, lpOverlapped=0x0 | out: lpBuffer=0x26f0460*, lpNumberOfBytesWritten=0x12d8c8*=0x773, lpOverlapped=0x0) returned 1 [0055.455] CloseHandle (hObject=0x1e8) returned 1 [0055.456] GetFullPathNameW (in: lpFileName="C:\\Boot\\nb-NO", nBufferLength=0x105, lpBuffer=0x12d550, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\nb-NO", lpFilePart=0x0) returned 0xd [0055.456] SetErrorMode (uMode=0x1) returned 0x0 [0055.456] FindFirstFileW (in: lpFileName="C:\\Boot\\nb-NO\\*", lpFindFileData=0x12d6f0 | out: lpFindFileData=0x12d6f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x41221bf0, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x41221bf0, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1af3b6b0 [0055.456] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d700 | out: lpFindFileData=0x12d700*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x41221bf0, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x41221bf0, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0055.456] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d700 | out: lpFindFileData=0x12d700*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xea212efb, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15850, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0055.456] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d700 | out: lpFindFileData=0x12d700*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41221bf0, ftCreationTime.dwHighDateTime=0x1d5e786, ftLastAccessTime.dwLowDateTime=0x41221bf0, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x41221bf0, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x773, dwReserved0=0x0, dwReserved1=0x0, cFileName="Decrypt Instructions.txt", cAlternateFileName="DECRYP~1.TXT")) returned 1 [0055.456] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d700 | out: lpFindFileData=0x12d700*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41221bf0, ftCreationTime.dwHighDateTime=0x1d5e786, ftLastAccessTime.dwLowDateTime=0x41221bf0, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x41221bf0, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x773, dwReserved0=0x0, dwReserved1=0x0, cFileName="Decrypt Instructions.txt", cAlternateFileName="DECRYP~1.TXT")) returned 0 [0055.456] FindClose (in: hFindFile=0x1af3b6b0 | out: hFindFile=0x1af3b6b0) returned 1 [0055.456] SetErrorMode (uMode=0x0) returned 0x1 [0055.456] GetFullPathNameW (in: lpFileName="C:\\Boot\\nl-NL", nBufferLength=0x105, lpBuffer=0x12d4b0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\nl-NL", lpFilePart=0x0) returned 0xd [0055.457] SetErrorMode (uMode=0x1) returned 0x0 [0055.457] FindFirstFileW (in: lpFileName="C:\\Boot\\nl-NL\\*", lpFindFileData=0x12d650 | out: lpFindFileData=0x12d650*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1af3b6b0 [0055.458] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0055.458] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe84c457e, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16250, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0055.458] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe84c457e, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16250, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0055.458] FindClose (in: hFindFile=0x1af3b6b0 | out: hFindFile=0x1af3b6b0) returned 1 [0055.458] SetErrorMode (uMode=0x0) returned 0x1 [0055.458] GetFullPathNameW (in: lpFileName="C:\\Boot\\nl-NL\\Decrypt Instructions.txt", nBufferLength=0x105, lpBuffer=0x12d360, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\nl-NL\\Decrypt Instructions.txt", lpFilePart=0x0) returned 0x26 [0055.459] SetErrorMode (uMode=0x1) returned 0x0 [0055.459] CreateFileW (lpFileName="C:\\Boot\\nl-NL\\Decrypt Instructions.txt" (normalized: "c:\\boot\\nl-nl\\decrypt instructions.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1e8 [0055.459] GetFileType (hFile=0x1e8) returned 0x1 [0055.459] SetErrorMode (uMode=0x0) returned 0x1 [0055.459] GetFileType (hFile=0x1e8) returned 0x1 [0055.459] WriteFile (in: hFile=0x1e8, lpBuffer=0x26f65a0*, nNumberOfBytesToWrite=0x773, lpNumberOfBytesWritten=0x12d8c8, lpOverlapped=0x0 | out: lpBuffer=0x26f65a0*, lpNumberOfBytesWritten=0x12d8c8*=0x773, lpOverlapped=0x0) returned 1 [0055.460] CloseHandle (hObject=0x1e8) returned 1 [0055.460] GetFullPathNameW (in: lpFileName="C:\\Boot\\nl-NL", nBufferLength=0x105, lpBuffer=0x12d550, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\nl-NL", lpFilePart=0x0) returned 0xd [0055.460] SetErrorMode (uMode=0x1) returned 0x0 [0055.460] FindFirstFileW (in: lpFileName="C:\\Boot\\nl-NL\\*", lpFindFileData=0x12d6f0 | out: lpFindFileData=0x12d6f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x41221bf0, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x41221bf0, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1af3b6b0 [0055.461] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d700 | out: lpFindFileData=0x12d700*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x41221bf0, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x41221bf0, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0055.461] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d700 | out: lpFindFileData=0x12d700*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe84c457e, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16250, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0055.461] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d700 | out: lpFindFileData=0x12d700*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41221bf0, ftCreationTime.dwHighDateTime=0x1d5e786, ftLastAccessTime.dwLowDateTime=0x41221bf0, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x41221bf0, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x773, dwReserved0=0x0, dwReserved1=0x0, cFileName="Decrypt Instructions.txt", cAlternateFileName="DECRYP~1.TXT")) returned 1 [0055.461] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d700 | out: lpFindFileData=0x12d700*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41221bf0, ftCreationTime.dwHighDateTime=0x1d5e786, ftLastAccessTime.dwLowDateTime=0x41221bf0, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x41221bf0, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x773, dwReserved0=0x0, dwReserved1=0x0, cFileName="Decrypt Instructions.txt", cAlternateFileName="DECRYP~1.TXT")) returned 0 [0055.461] FindClose (in: hFindFile=0x1af3b6b0 | out: hFindFile=0x1af3b6b0) returned 1 [0055.461] SetErrorMode (uMode=0x0) returned 0x1 [0055.461] GetFullPathNameW (in: lpFileName="C:\\Boot\\pl-PL", nBufferLength=0x105, lpBuffer=0x12d4b0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\pl-PL", lpFilePart=0x0) returned 0xd [0055.461] SetErrorMode (uMode=0x1) returned 0x0 [0055.461] FindFirstFileW (in: lpFileName="C:\\Boot\\pl-PL\\*", lpFindFileData=0x12d650 | out: lpFindFileData=0x12d650*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1af3b6b0 [0055.462] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0055.462] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe9e5ad4a, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16250, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0055.462] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe9e5ad4a, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16250, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0055.462] FindClose (in: hFindFile=0x1af3b6b0 | out: hFindFile=0x1af3b6b0) returned 1 [0055.462] SetErrorMode (uMode=0x0) returned 0x1 [0055.462] GetFullPathNameW (in: lpFileName="C:\\Boot\\pl-PL\\Decrypt Instructions.txt", nBufferLength=0x105, lpBuffer=0x12d360, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\pl-PL\\Decrypt Instructions.txt", lpFilePart=0x0) returned 0x26 [0055.463] SetErrorMode (uMode=0x1) returned 0x0 [0055.463] CreateFileW (lpFileName="C:\\Boot\\pl-PL\\Decrypt Instructions.txt" (normalized: "c:\\boot\\pl-pl\\decrypt instructions.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1e8 [0055.463] GetFileType (hFile=0x1e8) returned 0x1 [0055.463] SetErrorMode (uMode=0x0) returned 0x1 [0055.463] GetFileType (hFile=0x1e8) returned 0x1 [0055.463] WriteFile (in: hFile=0x1e8, lpBuffer=0x26fc6e0*, nNumberOfBytesToWrite=0x773, lpNumberOfBytesWritten=0x12d8c8, lpOverlapped=0x0 | out: lpBuffer=0x26fc6e0*, lpNumberOfBytesWritten=0x12d8c8*=0x773, lpOverlapped=0x0) returned 1 [0055.464] CloseHandle (hObject=0x1e8) returned 1 [0055.464] GetFullPathNameW (in: lpFileName="C:\\Boot\\pl-PL", nBufferLength=0x105, lpBuffer=0x12d550, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\pl-PL", lpFilePart=0x0) returned 0xd [0055.464] SetErrorMode (uMode=0x1) returned 0x0 [0055.465] FindFirstFileW (in: lpFileName="C:\\Boot\\pl-PL\\*", lpFindFileData=0x12d6f0 | out: lpFindFileData=0x12d6f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x41221bf0, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x41221bf0, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1af3b6b0 [0055.465] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d700 | out: lpFindFileData=0x12d700*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x41221bf0, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x41221bf0, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0055.465] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d700 | out: lpFindFileData=0x12d700*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe9e5ad4a, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16250, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0055.465] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d700 | out: lpFindFileData=0x12d700*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41221bf0, ftCreationTime.dwHighDateTime=0x1d5e786, ftLastAccessTime.dwLowDateTime=0x41221bf0, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x41221bf0, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x773, dwReserved0=0x0, dwReserved1=0x0, cFileName="Decrypt Instructions.txt", cAlternateFileName="DECRYP~1.TXT")) returned 1 [0055.465] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d700 | out: lpFindFileData=0x12d700*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41221bf0, ftCreationTime.dwHighDateTime=0x1d5e786, ftLastAccessTime.dwLowDateTime=0x41221bf0, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x41221bf0, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x773, dwReserved0=0x0, dwReserved1=0x0, cFileName="Decrypt Instructions.txt", cAlternateFileName="DECRYP~1.TXT")) returned 0 [0055.465] FindClose (in: hFindFile=0x1af3b6b0 | out: hFindFile=0x1af3b6b0) returned 1 [0055.465] SetErrorMode (uMode=0x0) returned 0x1 [0055.465] GetFullPathNameW (in: lpFileName="C:\\Boot\\pt-BR", nBufferLength=0x105, lpBuffer=0x12d4b0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\pt-BR", lpFilePart=0x0) returned 0xd [0055.465] SetErrorMode (uMode=0x1) returned 0x0 [0055.465] FindFirstFileW (in: lpFileName="C:\\Boot\\pt-BR\\*", lpFindFileData=0x12d650 | out: lpFindFileData=0x12d650*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1af3b6b0 [0055.466] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0055.466] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe83b9c0f, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16040, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0055.466] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe83b9c0f, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16040, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0055.467] FindClose (in: hFindFile=0x1af3b6b0 | out: hFindFile=0x1af3b6b0) returned 1 [0055.467] SetErrorMode (uMode=0x0) returned 0x1 [0055.467] GetFullPathNameW (in: lpFileName="C:\\Boot\\pt-BR\\Decrypt Instructions.txt", nBufferLength=0x105, lpBuffer=0x12d360, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\pt-BR\\Decrypt Instructions.txt", lpFilePart=0x0) returned 0x26 [0055.467] SetErrorMode (uMode=0x1) returned 0x0 [0055.467] CreateFileW (lpFileName="C:\\Boot\\pt-BR\\Decrypt Instructions.txt" (normalized: "c:\\boot\\pt-br\\decrypt instructions.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1e8 [0055.468] GetFileType (hFile=0x1e8) returned 0x1 [0055.468] SetErrorMode (uMode=0x0) returned 0x1 [0055.468] GetFileType (hFile=0x1e8) returned 0x1 [0055.468] WriteFile (in: hFile=0x1e8, lpBuffer=0x2702820*, nNumberOfBytesToWrite=0x773, lpNumberOfBytesWritten=0x12d8c8, lpOverlapped=0x0 | out: lpBuffer=0x2702820*, lpNumberOfBytesWritten=0x12d8c8*=0x773, lpOverlapped=0x0) returned 1 [0055.469] CloseHandle (hObject=0x1e8) returned 1 [0055.469] GetFullPathNameW (in: lpFileName="C:\\Boot\\pt-BR", nBufferLength=0x105, lpBuffer=0x12d550, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\pt-BR", lpFilePart=0x0) returned 0xd [0055.469] SetErrorMode (uMode=0x1) returned 0x0 [0055.469] FindFirstFileW (in: lpFileName="C:\\Boot\\pt-BR\\*", lpFindFileData=0x12d6f0 | out: lpFindFileData=0x12d6f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x41221bf0, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x41221bf0, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1af3b6b0 [0055.469] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d700 | out: lpFindFileData=0x12d700*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x41221bf0, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x41221bf0, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0055.469] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d700 | out: lpFindFileData=0x12d700*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe83b9c0f, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16040, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0055.470] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d700 | out: lpFindFileData=0x12d700*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41221bf0, ftCreationTime.dwHighDateTime=0x1d5e786, ftLastAccessTime.dwLowDateTime=0x41221bf0, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x41247d50, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x773, dwReserved0=0x0, dwReserved1=0x0, cFileName="Decrypt Instructions.txt", cAlternateFileName="DECRYP~1.TXT")) returned 1 [0055.470] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d700 | out: lpFindFileData=0x12d700*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41221bf0, ftCreationTime.dwHighDateTime=0x1d5e786, ftLastAccessTime.dwLowDateTime=0x41221bf0, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x41247d50, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x773, dwReserved0=0x0, dwReserved1=0x0, cFileName="Decrypt Instructions.txt", cAlternateFileName="DECRYP~1.TXT")) returned 0 [0055.470] FindClose (in: hFindFile=0x1af3b6b0 | out: hFindFile=0x1af3b6b0) returned 1 [0055.470] SetErrorMode (uMode=0x0) returned 0x1 [0055.470] GetFullPathNameW (in: lpFileName="C:\\Boot\\pt-PT", nBufferLength=0x105, lpBuffer=0x12d4b0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\pt-PT", lpFilePart=0x0) returned 0xd [0055.470] SetErrorMode (uMode=0x1) returned 0x0 [0055.470] FindFirstFileW (in: lpFileName="C:\\Boot\\pt-PT\\*", lpFindFileData=0x12d650 | out: lpFindFileData=0x12d650*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1af3b6b0 [0055.471] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0055.471] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe823ce95, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15e40, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0055.471] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe823ce95, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15e40, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0055.471] FindClose (in: hFindFile=0x1af3b6b0 | out: hFindFile=0x1af3b6b0) returned 1 [0055.471] SetErrorMode (uMode=0x0) returned 0x1 [0055.471] GetFullPathNameW (in: lpFileName="C:\\Boot\\pt-PT\\Decrypt Instructions.txt", nBufferLength=0x105, lpBuffer=0x12d360, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\pt-PT\\Decrypt Instructions.txt", lpFilePart=0x0) returned 0x26 [0055.472] SetErrorMode (uMode=0x1) returned 0x0 [0055.472] CreateFileW (lpFileName="C:\\Boot\\pt-PT\\Decrypt Instructions.txt" (normalized: "c:\\boot\\pt-pt\\decrypt instructions.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1e8 [0055.472] GetFileType (hFile=0x1e8) returned 0x1 [0055.472] SetErrorMode (uMode=0x0) returned 0x1 [0055.472] GetFileType (hFile=0x1e8) returned 0x1 [0055.472] WriteFile (in: hFile=0x1e8, lpBuffer=0x2708960*, nNumberOfBytesToWrite=0x773, lpNumberOfBytesWritten=0x12d8c8, lpOverlapped=0x0 | out: lpBuffer=0x2708960*, lpNumberOfBytesWritten=0x12d8c8*=0x773, lpOverlapped=0x0) returned 1 [0055.473] CloseHandle (hObject=0x1e8) returned 1 [0055.474] GetFullPathNameW (in: lpFileName="C:\\Boot\\pt-PT", nBufferLength=0x105, lpBuffer=0x12d550, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\pt-PT", lpFilePart=0x0) returned 0xd [0055.474] SetErrorMode (uMode=0x1) returned 0x0 [0055.474] FindFirstFileW (in: lpFileName="C:\\Boot\\pt-PT\\*", lpFindFileData=0x12d6f0 | out: lpFindFileData=0x12d6f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x41247d50, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x41247d50, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1af3b6b0 [0055.474] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d700 | out: lpFindFileData=0x12d700*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x41247d50, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x41247d50, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0055.474] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d700 | out: lpFindFileData=0x12d700*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe823ce95, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15e40, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0055.474] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d700 | out: lpFindFileData=0x12d700*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41247d50, ftCreationTime.dwHighDateTime=0x1d5e786, ftLastAccessTime.dwLowDateTime=0x41247d50, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x41247d50, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x773, dwReserved0=0x0, dwReserved1=0x0, cFileName="Decrypt Instructions.txt", cAlternateFileName="DECRYP~1.TXT")) returned 1 [0055.474] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d700 | out: lpFindFileData=0x12d700*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41247d50, ftCreationTime.dwHighDateTime=0x1d5e786, ftLastAccessTime.dwLowDateTime=0x41247d50, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x41247d50, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x773, dwReserved0=0x0, dwReserved1=0x0, cFileName="Decrypt Instructions.txt", cAlternateFileName="DECRYP~1.TXT")) returned 0 [0055.474] FindClose (in: hFindFile=0x1af3b6b0 | out: hFindFile=0x1af3b6b0) returned 1 [0055.475] SetErrorMode (uMode=0x0) returned 0x1 [0055.475] GetFullPathNameW (in: lpFileName="C:\\Boot\\ru-RU", nBufferLength=0x105, lpBuffer=0x12d4b0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\ru-RU", lpFilePart=0x0) returned 0xd [0055.475] SetErrorMode (uMode=0x1) returned 0x0 [0055.475] FindFirstFileW (in: lpFileName="C:\\Boot\\ru-RU\\*", lpFindFileData=0x12d650 | out: lpFindFileData=0x12d650*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1af3b6b0 [0055.476] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0055.476] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe88a2888, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16050, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0055.476] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe88a2888, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16050, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0055.476] FindClose (in: hFindFile=0x1af3b6b0 | out: hFindFile=0x1af3b6b0) returned 1 [0055.476] SetErrorMode (uMode=0x0) returned 0x1 [0055.476] GetFullPathNameW (in: lpFileName="C:\\Boot\\ru-RU\\Decrypt Instructions.txt", nBufferLength=0x105, lpBuffer=0x12d360, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\ru-RU\\Decrypt Instructions.txt", lpFilePart=0x0) returned 0x26 [0055.477] SetErrorMode (uMode=0x1) returned 0x0 [0055.477] CreateFileW (lpFileName="C:\\Boot\\ru-RU\\Decrypt Instructions.txt" (normalized: "c:\\boot\\ru-ru\\decrypt instructions.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1e8 [0055.477] GetFileType (hFile=0x1e8) returned 0x1 [0055.477] SetErrorMode (uMode=0x0) returned 0x1 [0055.477] GetFileType (hFile=0x1e8) returned 0x1 [0055.477] WriteFile (in: hFile=0x1e8, lpBuffer=0x270eaa0*, nNumberOfBytesToWrite=0x773, lpNumberOfBytesWritten=0x12d8c8, lpOverlapped=0x0 | out: lpBuffer=0x270eaa0*, lpNumberOfBytesWritten=0x12d8c8*=0x773, lpOverlapped=0x0) returned 1 [0055.478] CloseHandle (hObject=0x1e8) returned 1 [0055.478] GetFullPathNameW (in: lpFileName="C:\\Boot\\ru-RU", nBufferLength=0x105, lpBuffer=0x12d550, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\ru-RU", lpFilePart=0x0) returned 0xd [0055.479] SetErrorMode (uMode=0x1) returned 0x0 [0055.479] FindFirstFileW (in: lpFileName="C:\\Boot\\ru-RU\\*", lpFindFileData=0x12d6f0 | out: lpFindFileData=0x12d6f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x41247d50, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x41247d50, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1af3b6b0 [0055.479] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d700 | out: lpFindFileData=0x12d700*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x41247d50, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x41247d50, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0055.479] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d700 | out: lpFindFileData=0x12d700*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe88a2888, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16050, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0055.479] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d700 | out: lpFindFileData=0x12d700*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41247d50, ftCreationTime.dwHighDateTime=0x1d5e786, ftLastAccessTime.dwLowDateTime=0x41247d50, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x41247d50, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x773, dwReserved0=0x0, dwReserved1=0x0, cFileName="Decrypt Instructions.txt", cAlternateFileName="DECRYP~1.TXT")) returned 1 [0055.479] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d700 | out: lpFindFileData=0x12d700*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41247d50, ftCreationTime.dwHighDateTime=0x1d5e786, ftLastAccessTime.dwLowDateTime=0x41247d50, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x41247d50, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x773, dwReserved0=0x0, dwReserved1=0x0, cFileName="Decrypt Instructions.txt", cAlternateFileName="DECRYP~1.TXT")) returned 0 [0055.479] FindClose (in: hFindFile=0x1af3b6b0 | out: hFindFile=0x1af3b6b0) returned 1 [0055.479] SetErrorMode (uMode=0x0) returned 0x1 [0055.479] GetFullPathNameW (in: lpFileName="C:\\Boot\\sv-SE", nBufferLength=0x105, lpBuffer=0x12d4b0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\sv-SE", lpFilePart=0x0) returned 0xd [0055.479] SetErrorMode (uMode=0x1) returned 0x0 [0055.480] FindFirstFileW (in: lpFileName="C:\\Boot\\sv-SE\\*", lpFindFileData=0x12d650 | out: lpFindFileData=0x12d650*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1af3b6b0 [0055.480] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0055.480] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe868d5aa, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15640, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0055.480] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe868d5aa, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15640, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0055.480] FindClose (in: hFindFile=0x1af3b6b0 | out: hFindFile=0x1af3b6b0) returned 1 [0055.480] SetErrorMode (uMode=0x0) returned 0x1 [0055.481] GetFullPathNameW (in: lpFileName="C:\\Boot\\sv-SE\\Decrypt Instructions.txt", nBufferLength=0x105, lpBuffer=0x12d360, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\sv-SE\\Decrypt Instructions.txt", lpFilePart=0x0) returned 0x26 [0055.481] SetErrorMode (uMode=0x1) returned 0x0 [0055.481] CreateFileW (lpFileName="C:\\Boot\\sv-SE\\Decrypt Instructions.txt" (normalized: "c:\\boot\\sv-se\\decrypt instructions.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1e8 [0055.481] GetFileType (hFile=0x1e8) returned 0x1 [0055.481] SetErrorMode (uMode=0x0) returned 0x1 [0055.481] GetFileType (hFile=0x1e8) returned 0x1 [0055.481] WriteFile (in: hFile=0x1e8, lpBuffer=0x2714be0*, nNumberOfBytesToWrite=0x773, lpNumberOfBytesWritten=0x12d8c8, lpOverlapped=0x0 | out: lpBuffer=0x2714be0*, lpNumberOfBytesWritten=0x12d8c8*=0x773, lpOverlapped=0x0) returned 1 [0055.482] CloseHandle (hObject=0x1e8) returned 1 [0055.482] GetFullPathNameW (in: lpFileName="C:\\Boot\\sv-SE", nBufferLength=0x105, lpBuffer=0x12d550, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\sv-SE", lpFilePart=0x0) returned 0xd [0055.483] SetErrorMode (uMode=0x1) returned 0x0 [0055.483] FindFirstFileW (in: lpFileName="C:\\Boot\\sv-SE\\*", lpFindFileData=0x12d6f0 | out: lpFindFileData=0x12d6f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x41247d50, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x41247d50, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1af3b6b0 [0055.483] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d700 | out: lpFindFileData=0x12d700*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x41247d50, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x41247d50, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0055.483] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d700 | out: lpFindFileData=0x12d700*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe868d5aa, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15640, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0055.483] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d700 | out: lpFindFileData=0x12d700*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41247d50, ftCreationTime.dwHighDateTime=0x1d5e786, ftLastAccessTime.dwLowDateTime=0x41247d50, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x41247d50, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x773, dwReserved0=0x0, dwReserved1=0x0, cFileName="Decrypt Instructions.txt", cAlternateFileName="DECRYP~1.TXT")) returned 1 [0055.483] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d700 | out: lpFindFileData=0x12d700*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41247d50, ftCreationTime.dwHighDateTime=0x1d5e786, ftLastAccessTime.dwLowDateTime=0x41247d50, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x41247d50, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x773, dwReserved0=0x0, dwReserved1=0x0, cFileName="Decrypt Instructions.txt", cAlternateFileName="DECRYP~1.TXT")) returned 0 [0055.483] FindClose (in: hFindFile=0x1af3b6b0 | out: hFindFile=0x1af3b6b0) returned 1 [0055.483] SetErrorMode (uMode=0x0) returned 0x1 [0055.483] GetFullPathNameW (in: lpFileName="C:\\Boot\\tr-TR", nBufferLength=0x105, lpBuffer=0x12d4b0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\tr-TR", lpFilePart=0x0) returned 0xd [0055.484] SetErrorMode (uMode=0x1) returned 0x0 [0055.484] FindFirstFileW (in: lpFileName="C:\\Boot\\tr-TR\\*", lpFindFileData=0x12d650 | out: lpFindFileData=0x12d650*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1af3b6b0 [0055.485] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0055.485] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8393ab6, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15440, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0055.485] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8393ab6, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15440, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0055.485] FindClose (in: hFindFile=0x1af3b6b0 | out: hFindFile=0x1af3b6b0) returned 1 [0055.485] SetErrorMode (uMode=0x0) returned 0x1 [0055.486] GetFullPathNameW (in: lpFileName="C:\\Boot\\tr-TR\\Decrypt Instructions.txt", nBufferLength=0x105, lpBuffer=0x12d360, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\tr-TR\\Decrypt Instructions.txt", lpFilePart=0x0) returned 0x26 [0055.486] SetErrorMode (uMode=0x1) returned 0x0 [0055.486] CreateFileW (lpFileName="C:\\Boot\\tr-TR\\Decrypt Instructions.txt" (normalized: "c:\\boot\\tr-tr\\decrypt instructions.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1e8 [0055.486] GetFileType (hFile=0x1e8) returned 0x1 [0055.486] SetErrorMode (uMode=0x0) returned 0x1 [0055.486] GetFileType (hFile=0x1e8) returned 0x1 [0055.496] WriteFile (in: hFile=0x1e8, lpBuffer=0x271ad20*, nNumberOfBytesToWrite=0x773, lpNumberOfBytesWritten=0x12d8c8, lpOverlapped=0x0 | out: lpBuffer=0x271ad20*, lpNumberOfBytesWritten=0x12d8c8*=0x773, lpOverlapped=0x0) returned 1 [0055.497] CloseHandle (hObject=0x1e8) returned 1 [0055.498] GetFullPathNameW (in: lpFileName="C:\\Boot\\tr-TR", nBufferLength=0x105, lpBuffer=0x12d550, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\tr-TR", lpFilePart=0x0) returned 0xd [0055.498] SetErrorMode (uMode=0x1) returned 0x0 [0055.498] FindFirstFileW (in: lpFileName="C:\\Boot\\tr-TR\\*", lpFindFileData=0x12d6f0 | out: lpFindFileData=0x12d6f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x4126deb0, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x4126deb0, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1af3b6b0 [0055.498] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d700 | out: lpFindFileData=0x12d700*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x4126deb0, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x4126deb0, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0055.498] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d700 | out: lpFindFileData=0x12d700*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8393ab6, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15440, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0055.498] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d700 | out: lpFindFileData=0x12d700*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4126deb0, ftCreationTime.dwHighDateTime=0x1d5e786, ftLastAccessTime.dwLowDateTime=0x4126deb0, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x4126deb0, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x773, dwReserved0=0x0, dwReserved1=0x0, cFileName="Decrypt Instructions.txt", cAlternateFileName="DECRYP~1.TXT")) returned 1 [0055.498] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d700 | out: lpFindFileData=0x12d700*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4126deb0, ftCreationTime.dwHighDateTime=0x1d5e786, ftLastAccessTime.dwLowDateTime=0x4126deb0, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x4126deb0, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x773, dwReserved0=0x0, dwReserved1=0x0, cFileName="Decrypt Instructions.txt", cAlternateFileName="DECRYP~1.TXT")) returned 0 [0055.498] FindClose (in: hFindFile=0x1af3b6b0 | out: hFindFile=0x1af3b6b0) returned 1 [0055.498] SetErrorMode (uMode=0x0) returned 0x1 [0055.499] GetFullPathNameW (in: lpFileName="C:\\Boot\\zh-CN", nBufferLength=0x105, lpBuffer=0x12d4b0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\zh-CN", lpFilePart=0x0) returned 0xd [0055.499] SetErrorMode (uMode=0x1) returned 0x0 [0055.499] FindFirstFileW (in: lpFileName="C:\\Boot\\zh-CN\\*", lpFindFileData=0x12d650 | out: lpFindFileData=0x12d650*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1af3b6b0 [0055.499] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0055.500] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8725b0e, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x11440, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0055.500] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8725b0e, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x11440, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0055.500] FindClose (in: hFindFile=0x1af3b6b0 | out: hFindFile=0x1af3b6b0) returned 1 [0055.500] SetErrorMode (uMode=0x0) returned 0x1 [0055.500] GetFullPathNameW (in: lpFileName="C:\\Boot\\zh-CN\\Decrypt Instructions.txt", nBufferLength=0x105, lpBuffer=0x12d360, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\zh-CN\\Decrypt Instructions.txt", lpFilePart=0x0) returned 0x26 [0055.500] SetErrorMode (uMode=0x1) returned 0x0 [0055.500] CreateFileW (lpFileName="C:\\Boot\\zh-CN\\Decrypt Instructions.txt" (normalized: "c:\\boot\\zh-cn\\decrypt instructions.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1e8 [0055.501] GetFileType (hFile=0x1e8) returned 0x1 [0055.501] SetErrorMode (uMode=0x0) returned 0x1 [0055.501] GetFileType (hFile=0x1e8) returned 0x1 [0055.501] WriteFile (in: hFile=0x1e8, lpBuffer=0x2720e60*, nNumberOfBytesToWrite=0x773, lpNumberOfBytesWritten=0x12d8c8, lpOverlapped=0x0 | out: lpBuffer=0x2720e60*, lpNumberOfBytesWritten=0x12d8c8*=0x773, lpOverlapped=0x0) returned 1 [0055.502] CloseHandle (hObject=0x1e8) returned 1 [0055.502] GetFullPathNameW (in: lpFileName="C:\\Boot\\zh-CN", nBufferLength=0x105, lpBuffer=0x12d550, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\zh-CN", lpFilePart=0x0) returned 0xd [0055.502] SetErrorMode (uMode=0x1) returned 0x0 [0055.502] FindFirstFileW (in: lpFileName="C:\\Boot\\zh-CN\\*", lpFindFileData=0x12d6f0 | out: lpFindFileData=0x12d6f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x41294010, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x41294010, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1af3b6b0 [0055.503] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d700 | out: lpFindFileData=0x12d700*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x41294010, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x41294010, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0055.503] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d700 | out: lpFindFileData=0x12d700*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8725b0e, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x11440, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0055.914] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d700 | out: lpFindFileData=0x12d700*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41294010, ftCreationTime.dwHighDateTime=0x1d5e786, ftLastAccessTime.dwLowDateTime=0x41294010, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x41294010, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x773, dwReserved0=0x0, dwReserved1=0x0, cFileName="Decrypt Instructions.txt", cAlternateFileName="DECRYP~1.TXT")) returned 1 [0055.914] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d700 | out: lpFindFileData=0x12d700*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41294010, ftCreationTime.dwHighDateTime=0x1d5e786, ftLastAccessTime.dwLowDateTime=0x41294010, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x41294010, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x773, dwReserved0=0x0, dwReserved1=0x0, cFileName="Decrypt Instructions.txt", cAlternateFileName="DECRYP~1.TXT")) returned 0 [0055.915] FindClose (in: hFindFile=0x1af3b6b0 | out: hFindFile=0x1af3b6b0) returned 1 [0055.916] SetErrorMode (uMode=0x0) returned 0x1 [0055.916] GetFullPathNameW (in: lpFileName="C:\\Boot\\zh-HK", nBufferLength=0x105, lpBuffer=0x12d4b0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\zh-HK", lpFilePart=0x0) returned 0xd [0055.916] SetErrorMode (uMode=0x1) returned 0x0 [0055.916] FindFirstFileW (in: lpFileName="C:\\Boot\\zh-HK\\*", lpFindFileData=0x12d650 | out: lpFindFileData=0x12d650*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0f9880, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1af3b6b0 [0055.984] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0f9880, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0055.985] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe88a2888, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x11250, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0055.985] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe88a2888, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x11250, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0055.985] FindClose (in: hFindFile=0x1af3b6b0 | out: hFindFile=0x1af3b6b0) returned 1 [0055.985] SetErrorMode (uMode=0x0) returned 0x1 [0055.985] GetFullPathNameW (in: lpFileName="C:\\Boot\\zh-HK\\Decrypt Instructions.txt", nBufferLength=0x105, lpBuffer=0x12d360, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\zh-HK\\Decrypt Instructions.txt", lpFilePart=0x0) returned 0x26 [0055.986] SetErrorMode (uMode=0x1) returned 0x0 [0055.986] CreateFileW (lpFileName="C:\\Boot\\zh-HK\\Decrypt Instructions.txt" (normalized: "c:\\boot\\zh-hk\\decrypt instructions.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1e8 [0055.987] SetErrorMode (uMode=0x0) returned 0x1 [0055.987] GetFileType (hFile=0x1e8) returned 0x1 [0055.987] WriteFile (in: hFile=0x1e8, lpBuffer=0x2726fa0*, nNumberOfBytesToWrite=0x773, lpNumberOfBytesWritten=0x12d8c8, lpOverlapped=0x0 | out: lpBuffer=0x2726fa0*, lpNumberOfBytesWritten=0x12d8c8*=0x773, lpOverlapped=0x0) returned 1 [0055.990] GetFullPathNameW (in: lpFileName="C:\\Boot\\zh-HK", nBufferLength=0x105, lpBuffer=0x12d550, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\zh-HK", lpFilePart=0x0) returned 0xd [0055.990] SetErrorMode (uMode=0x1) returned 0x0 [0055.990] FindFirstFileW (in: lpFileName="C:\\Boot\\zh-HK\\*", lpFindFileData=0x12d6f0 | out: lpFindFileData=0x12d6f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x41730ab0, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x41730ab0, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1af3b6b0 [0055.991] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d700 | out: lpFindFileData=0x12d700*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x41730ab0, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x41730ab0, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0055.991] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d700 | out: lpFindFileData=0x12d700*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe88a2888, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x11250, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0055.991] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d700 | out: lpFindFileData=0x12d700*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41730ab0, ftCreationTime.dwHighDateTime=0x1d5e786, ftLastAccessTime.dwLowDateTime=0x41730ab0, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x41730ab0, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x773, dwReserved0=0x0, dwReserved1=0x0, cFileName="Decrypt Instructions.txt", cAlternateFileName="DECRYP~1.TXT")) returned 1 [0055.991] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d700 | out: lpFindFileData=0x12d700*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41730ab0, ftCreationTime.dwHighDateTime=0x1d5e786, ftLastAccessTime.dwLowDateTime=0x41730ab0, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x41730ab0, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x773, dwReserved0=0x0, dwReserved1=0x0, cFileName="Decrypt Instructions.txt", cAlternateFileName="DECRYP~1.TXT")) returned 0 [0055.991] FindClose (in: hFindFile=0x1af3b6b0 | out: hFindFile=0x1af3b6b0) returned 1 [0055.991] SetErrorMode (uMode=0x0) returned 0x1 [0055.991] GetFullPathNameW (in: lpFileName="C:\\Boot\\zh-TW", nBufferLength=0x105, lpBuffer=0x12d4b0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\zh-TW", lpFilePart=0x0) returned 0xd [0055.991] SetErrorMode (uMode=0x1) returned 0x0 [0055.991] FindFirstFileW (in: lpFileName="C:\\Boot\\zh-TW\\*", lpFindFileData=0x12d650 | out: lpFindFileData=0x12d650*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0f9880, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1af3b6b0 [0055.992] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0f9880, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0055.992] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe83216ab, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x11240, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0055.992] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe83216ab, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x11240, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0055.992] FindClose (in: hFindFile=0x1af3b6b0 | out: hFindFile=0x1af3b6b0) returned 1 [0055.992] SetErrorMode (uMode=0x0) returned 0x1 [0055.992] GetFullPathNameW (in: lpFileName="C:\\Boot\\zh-TW\\Decrypt Instructions.txt", nBufferLength=0x105, lpBuffer=0x12d360, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\zh-TW\\Decrypt Instructions.txt", lpFilePart=0x0) returned 0x26 [0055.992] SetErrorMode (uMode=0x1) returned 0x0 [0055.993] CreateFileW (lpFileName="C:\\Boot\\zh-TW\\Decrypt Instructions.txt" (normalized: "c:\\boot\\zh-tw\\decrypt instructions.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1e8 [0055.993] SetErrorMode (uMode=0x0) returned 0x1 [0055.993] GetFileType (hFile=0x1e8) returned 0x1 [0055.993] WriteFile (in: hFile=0x1e8, lpBuffer=0x272d0e0*, nNumberOfBytesToWrite=0x773, lpNumberOfBytesWritten=0x12d8c8, lpOverlapped=0x0 | out: lpBuffer=0x272d0e0*, lpNumberOfBytesWritten=0x12d8c8*=0x773, lpOverlapped=0x0) returned 1 [0055.994] GetFullPathNameW (in: lpFileName="C:\\Boot\\zh-TW", nBufferLength=0x105, lpBuffer=0x12d550, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\zh-TW", lpFilePart=0x0) returned 0xd [0055.995] SetErrorMode (uMode=0x1) returned 0x0 [0055.995] FindFirstFileW (in: lpFileName="C:\\Boot\\zh-TW\\*", lpFindFileData=0x12d6f0 | out: lpFindFileData=0x12d6f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x41730ab0, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x41730ab0, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1af3b6b0 [0055.995] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d700 | out: lpFindFileData=0x12d700*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x41730ab0, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x41730ab0, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0055.995] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d700 | out: lpFindFileData=0x12d700*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe83216ab, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x11240, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0055.995] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d700 | out: lpFindFileData=0x12d700*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41730ab0, ftCreationTime.dwHighDateTime=0x1d5e786, ftLastAccessTime.dwLowDateTime=0x41730ab0, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x41730ab0, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x773, dwReserved0=0x0, dwReserved1=0x0, cFileName="Decrypt Instructions.txt", cAlternateFileName="DECRYP~1.TXT")) returned 1 [0055.995] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d700 | out: lpFindFileData=0x12d700*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41730ab0, ftCreationTime.dwHighDateTime=0x1d5e786, ftLastAccessTime.dwLowDateTime=0x41730ab0, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x41730ab0, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x773, dwReserved0=0x0, dwReserved1=0x0, cFileName="Decrypt Instructions.txt", cAlternateFileName="DECRYP~1.TXT")) returned 0 [0055.995] FindClose (in: hFindFile=0x1af3b6b0 | out: hFindFile=0x1af3b6b0) returned 1 [0055.995] SetErrorMode (uMode=0x0) returned 0x1 [0055.995] GetFullPathNameW (in: lpFileName="C:\\Config.Msi", nBufferLength=0x105, lpBuffer=0x12d510, lpFilePart=0x0 | out: lpBuffer="C:\\Config.Msi", lpFilePart=0x0) returned 0xd [0055.995] SetErrorMode (uMode=0x1) returned 0x0 [0055.995] FindFirstFileW (in: lpFileName="C:\\Config.Msi\\*", lpFindFileData=0x12d6b0 | out: lpFindFileData=0x12d6b0*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xcd4f5c20, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xc182c7c0, ftLastAccessTime.dwHighDateTime=0x1d3373b, ftLastWriteTime.dwLowDateTime=0xc182c7c0, ftLastWriteTime.dwHighDateTime=0x1d3373b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1af3b6b0 [0055.996] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d6c0 | out: lpFindFileData=0x12d6c0*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xcd4f5c20, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xc182c7c0, ftLastAccessTime.dwHighDateTime=0x1d3373b, ftLastWriteTime.dwLowDateTime=0xc182c7c0, ftLastWriteTime.dwHighDateTime=0x1d3373b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0055.996] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d6c0 | out: lpFindFileData=0x12d6c0*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xcd4f5c20, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xc182c7c0, ftLastAccessTime.dwHighDateTime=0x1d3373b, ftLastWriteTime.dwLowDateTime=0xc182c7c0, ftLastWriteTime.dwHighDateTime=0x1d3373b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0055.996] FindClose (in: hFindFile=0x1af3b6b0 | out: hFindFile=0x1af3b6b0) returned 1 [0055.996] SetErrorMode (uMode=0x0) returned 0x1 [0055.996] GetFullPathNameW (in: lpFileName="C:\\Config.Msi\\Decrypt Instructions.txt", nBufferLength=0x105, lpBuffer=0x12d3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Config.Msi\\Decrypt Instructions.txt", lpFilePart=0x0) returned 0x26 [0055.997] SetErrorMode (uMode=0x1) returned 0x0 [0055.997] CreateFileW (lpFileName="C:\\Config.Msi\\Decrypt Instructions.txt" (normalized: "c:\\config.msi\\decrypt instructions.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1e8 [0055.997] SetErrorMode (uMode=0x0) returned 0x1 [0055.997] GetFileType (hFile=0x1e8) returned 0x1 [0055.997] WriteFile (in: hFile=0x1e8, lpBuffer=0x2732dc8*, nNumberOfBytesToWrite=0x773, lpNumberOfBytesWritten=0x12d928, lpOverlapped=0x0 | out: lpBuffer=0x2732dc8*, lpNumberOfBytesWritten=0x12d928*=0x773, lpOverlapped=0x0) returned 1 [0056.014] GetFullPathNameW (in: lpFileName="C:\\Config.Msi", nBufferLength=0x105, lpBuffer=0x12d5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Config.Msi", lpFilePart=0x0) returned 0xd [0056.014] SetErrorMode (uMode=0x1) returned 0x0 [0056.014] FindFirstFileW (in: lpFileName="C:\\Config.Msi\\*", lpFindFileData=0x12d750 | out: lpFindFileData=0x12d750*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xcd4f5c20, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x41730ab0, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x41730ab0, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1af3b6b0 [0056.015] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d760 | out: lpFindFileData=0x12d760*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xcd4f5c20, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x41730ab0, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x41730ab0, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0056.015] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d760 | out: lpFindFileData=0x12d760*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41730ab0, ftCreationTime.dwHighDateTime=0x1d5e786, ftLastAccessTime.dwLowDateTime=0x41730ab0, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x41756c10, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x773, dwReserved0=0x0, dwReserved1=0x0, cFileName="Decrypt Instructions.txt", cAlternateFileName="DECRYP~1.TXT")) returned 1 [0056.015] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d760 | out: lpFindFileData=0x12d760*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41730ab0, ftCreationTime.dwHighDateTime=0x1d5e786, ftLastAccessTime.dwLowDateTime=0x41730ab0, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x41756c10, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x773, dwReserved0=0x0, dwReserved1=0x0, cFileName="Decrypt Instructions.txt", cAlternateFileName="DECRYP~1.TXT")) returned 0 [0056.015] FindClose (in: hFindFile=0x1af3b6b0 | out: hFindFile=0x1af3b6b0) returned 1 [0056.015] SetErrorMode (uMode=0x0) returned 0x1 [0056.015] GetFullPathNameW (in: lpFileName="C:\\Documents and Settings", nBufferLength=0x105, lpBuffer=0x12d510, lpFilePart=0x0 | out: lpBuffer="C:\\Documents and Settings", lpFilePart=0x0) returned 0x19 [0056.015] SetErrorMode (uMode=0x1) returned 0x0 [0056.015] FindFirstFileW (in: lpFileName="C:\\Documents and Settings\\*", lpFindFileData=0x12d6b0 | out: lpFindFileData=0x12d6b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff [0056.024] SetErrorMode (uMode=0x0) returned 0x1 [0056.027] GetFullPathNameW (in: lpFileName="C:\\Documents and Settings", nBufferLength=0x105, lpBuffer=0x12d5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Documents and Settings", lpFilePart=0x0) returned 0x19 [0056.028] SetErrorMode (uMode=0x1) returned 0x0 [0056.028] FindFirstFileW (in: lpFileName="C:\\Documents and Settings\\*", lpFindFileData=0x12d750 | out: lpFindFileData=0x12d750*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff [0056.041] SetErrorMode (uMode=0x0) returned 0x1 [0056.043] GetFullPathNameW (in: lpFileName="C:\\MSOCache", nBufferLength=0x105, lpBuffer=0x12d510, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache", lpFilePart=0x0) returned 0xb [0056.043] SetErrorMode (uMode=0x1) returned 0x0 [0056.043] FindFirstFileW (in: lpFileName="C:\\MSOCache\\*", lpFindFileData=0x12d6b0 | out: lpFindFileData=0x12d6b0*(dwFileAttributes=0x2013, ftCreationTime.dwLowDateTime=0xe7b42810, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xe7b42810, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe7b42810, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1af3b6b0 [0056.044] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d6c0 | out: lpFindFileData=0x12d6c0*(dwFileAttributes=0x2013, ftCreationTime.dwLowDateTime=0xe7b42810, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xe7b42810, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe7b42810, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0056.044] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d6c0 | out: lpFindFileData=0x12d6c0*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xe7b42810, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xa5cd3a40, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa5cd3a40, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="All Users", cAlternateFileName="ALLUSE~1")) returned 1 [0056.045] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d6c0 | out: lpFindFileData=0x12d6c0*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xe7b42810, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xa5cd3a40, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa5cd3a40, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="All Users", cAlternateFileName="ALLUSE~1")) returned 0 [0056.045] FindClose (in: hFindFile=0x1af3b6b0 | out: hFindFile=0x1af3b6b0) returned 1 [0056.045] SetErrorMode (uMode=0x0) returned 0x1 [0056.045] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\Decrypt Instructions.txt", nBufferLength=0x105, lpBuffer=0x12d3c0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\Decrypt Instructions.txt", lpFilePart=0x0) returned 0x24 [0056.045] SetErrorMode (uMode=0x1) returned 0x0 [0056.049] CreateFileW (lpFileName="C:\\MSOCache\\Decrypt Instructions.txt" (normalized: "c:\\msocache\\decrypt instructions.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1e8 [0056.049] GetFileType (hFile=0x1e8) returned 0x1 [0056.049] SetErrorMode (uMode=0x0) returned 0x1 [0056.050] GetFileType (hFile=0x1e8) returned 0x1 [0056.050] WriteFile (in: hFile=0x1e8, lpBuffer=0x273ae40*, nNumberOfBytesToWrite=0x773, lpNumberOfBytesWritten=0x12d928, lpOverlapped=0x0 | out: lpBuffer=0x273ae40*, lpNumberOfBytesWritten=0x12d928*=0x773, lpOverlapped=0x0) returned 1 [0056.051] CloseHandle (hObject=0x1e8) returned 1 [0056.052] GetFullPathNameW (in: lpFileName="C:\\MSOCache", nBufferLength=0x105, lpBuffer=0x12d5b0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache", lpFilePart=0x0) returned 0xb [0056.052] SetErrorMode (uMode=0x1) returned 0x0 [0056.052] FindFirstFileW (in: lpFileName="C:\\MSOCache\\*", lpFindFileData=0x12d750 | out: lpFindFileData=0x12d750*(dwFileAttributes=0x2013, ftCreationTime.dwLowDateTime=0xe7b42810, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x417c9030, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x417c9030, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1af3b6b0 [0056.053] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d760 | out: lpFindFileData=0x12d760*(dwFileAttributes=0x2013, ftCreationTime.dwLowDateTime=0xe7b42810, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x417c9030, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x417c9030, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0056.053] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d760 | out: lpFindFileData=0x12d760*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xe7b42810, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xa5cd3a40, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa5cd3a40, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="All Users", cAlternateFileName="ALLUSE~1")) returned 1 [0056.053] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d760 | out: lpFindFileData=0x12d760*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x417c9030, ftCreationTime.dwHighDateTime=0x1d5e786, ftLastAccessTime.dwLowDateTime=0x417c9030, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x417c9030, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x773, dwReserved0=0x0, dwReserved1=0x0, cFileName="Decrypt Instructions.txt", cAlternateFileName="DECRYP~1.TXT")) returned 1 [0056.053] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d760 | out: lpFindFileData=0x12d760*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x417c9030, ftCreationTime.dwHighDateTime=0x1d5e786, ftLastAccessTime.dwLowDateTime=0x417c9030, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x417c9030, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x773, dwReserved0=0x0, dwReserved1=0x0, cFileName="Decrypt Instructions.txt", cAlternateFileName="DECRYP~1.TXT")) returned 0 [0056.054] FindClose (in: hFindFile=0x1af3b6b0 | out: hFindFile=0x1af3b6b0) returned 1 [0056.054] SetErrorMode (uMode=0x0) returned 0x1 [0056.054] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users", nBufferLength=0x105, lpBuffer=0x12d4b0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users", lpFilePart=0x0) returned 0x15 [0056.054] SetErrorMode (uMode=0x1) returned 0x0 [0056.054] FindFirstFileW (in: lpFileName="C:\\MSOCache\\All Users\\*", lpFindFileData=0x12d650 | out: lpFindFileData=0x12d650*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xe7b42810, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xa5cd3a40, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa5cd3a40, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1af3b6b0 [0056.085] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xe7b42810, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xa5cd3a40, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa5cd3a40, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0056.109] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xecdfa490, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xee38cbf0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xee38cbf0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{90140000-0016-0409-1000-0000000FF1CE}-C", cAlternateFileName="{90140~3")) returned 1 [0056.109] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xe8729610, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xecdfa490, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xecdfa490, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{90140000-0018-0409-1000-0000000FF1CE}-C", cAlternateFileName="{90140~2")) returned 1 [0056.109] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xfc3e6570, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfc8a9170, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfc8a9170, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{90140000-0019-0409-1000-0000000FF1CE}-C", cAlternateFileName="{9877A~1")) returned 1 [0056.109] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xee829690, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf00dbad0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf00dbad0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{90140000-001A-0409-1000-0000000FF1CE}-C", cAlternateFileName="{9765F~1")) returned 1 [0056.109] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xfc8a9170, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfe076d70, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfe076d70, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{90140000-001B-0409-1000-0000000FF1CE}-C", cAlternateFileName="{94E50~1")) returned 1 [0056.110] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xf00dbad0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf58c8770, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf58c8770, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{90140000-002C-0409-1000-0000000FF1CE}-C", cAlternateFileName="{92787~1")) returned 1 [0056.110] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xfc138cb0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfc3e6570, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfc3e6570, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{90140000-0043-0409-1000-0000000FF1CE}-C", cAlternateFileName="{95310~1")) returned 1 [0056.110] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xf6e34d70, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa13c510, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfa13c510, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{90140000-0044-0409-1000-0000000FF1CE}-C", cAlternateFileName="{91454~1")) returned 1 [0056.110] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0x435769e0, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x43bdc500, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x43bdc500, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{90140000-0054-0409-1000-0000000FF1CE}-C", cAlternateFileName="{9EA85~1")) returned 1 [0056.110] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xf58ee8d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf6e0ec10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf6e0ec10, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{90140000-00A1-0409-1000-0000000FF1CE}-C", cAlternateFileName="{92572~1")) returned 1 [0056.110] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xa5b30b20, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0xa5bc90a0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa5bc90a0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{90140000-00B4-0409-1000-0000000FF1CE}-C", cAlternateFileName="{912E0~1")) returned 1 [0056.111] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xee38cbf0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xee803530, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xee803530, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{90140000-00BA-0409-1000-0000000FF1CE}-C", cAlternateFileName="{90140~4")) returned 1 [0056.111] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xe7b68970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xe8729610, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe8729610, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{90140000-0115-0409-1000-0000000FF1CE}-C", cAlternateFileName="{90140~1")) returned 1 [0056.111] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xfa13c510, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfc112b50, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfc112b50, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{90140000-0117-0409-1000-0000000FF1CE}-C", cAlternateFileName="{9AFC7~1")) returned 1 [0056.111] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xfe09ced0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x18179b90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x18179b90, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{91140000-0011-0000-1000-0000000FF1CE}-C", cAlternateFileName="{91140~1")) returned 1 [0056.111] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xa5cd3a40, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0xa8c22f80, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa8c22f80, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{91140000-003B-0000-1000-0000000FF1CE}-C", cAlternateFileName="{91140~3")) returned 1 [0056.111] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0x46538340, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x4a6d41a0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x4a6d41a0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{91140000-0057-0000-1000-0000000FF1CE}-C", cAlternateFileName="{91140~2")) returned 1 [0056.111] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0x46538340, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x4a6d41a0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x4a6d41a0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{91140000-0057-0000-1000-0000000FF1CE}-C", cAlternateFileName="{91140~2")) returned 0 [0056.112] FindClose (in: hFindFile=0x1af3b6b0 | out: hFindFile=0x1af3b6b0) returned 1 [0056.113] SetErrorMode (uMode=0x0) returned 0x1 [0056.113] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\Decrypt Instructions.txt", nBufferLength=0x105, lpBuffer=0x12d360, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\Decrypt Instructions.txt", lpFilePart=0x0) returned 0x2e [0056.113] SetErrorMode (uMode=0x1) returned 0x0 [0056.113] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\Decrypt Instructions.txt" (normalized: "c:\\msocache\\all users\\decrypt instructions.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1e8 [0056.114] GetFileType (hFile=0x1e8) returned 0x1 [0056.115] SetErrorMode (uMode=0x0) returned 0x1 [0056.115] GetFileType (hFile=0x1e8) returned 0x1 [0056.115] WriteFile (in: hFile=0x1e8, lpBuffer=0x27419e0*, nNumberOfBytesToWrite=0x773, lpNumberOfBytesWritten=0x12d8c8, lpOverlapped=0x0 | out: lpBuffer=0x27419e0*, lpNumberOfBytesWritten=0x12d8c8*=0x773, lpOverlapped=0x0) returned 1 [0056.117] CloseHandle (hObject=0x1e8) returned 1 [0056.118] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users", nBufferLength=0x105, lpBuffer=0x12d550, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users", lpFilePart=0x0) returned 0x15 [0056.118] SetErrorMode (uMode=0x1) returned 0x0 [0056.118] FindFirstFileW (in: lpFileName="C:\\MSOCache\\All Users\\*", lpFindFileData=0x12d6f0 | out: lpFindFileData=0x12d6f0*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xe7b42810, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x418615b0, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x418615b0, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1af3b6b0 [0056.118] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d700 | out: lpFindFileData=0x12d700*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xe7b42810, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x418615b0, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x418615b0, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0056.119] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d700 | out: lpFindFileData=0x12d700*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x418615b0, ftCreationTime.dwHighDateTime=0x1d5e786, ftLastAccessTime.dwLowDateTime=0x418615b0, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x418615b0, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x773, dwReserved0=0x0, dwReserved1=0x0, cFileName="Decrypt Instructions.txt", cAlternateFileName="DECRYP~1.TXT")) returned 1 [0056.119] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d700 | out: lpFindFileData=0x12d700*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xecdfa490, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xee38cbf0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xee38cbf0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{90140000-0016-0409-1000-0000000FF1CE}-C", cAlternateFileName="{90140~3")) returned 1 [0056.119] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d700 | out: lpFindFileData=0x12d700*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xe8729610, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xecdfa490, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xecdfa490, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{90140000-0018-0409-1000-0000000FF1CE}-C", cAlternateFileName="{90140~2")) returned 1 [0056.119] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d700 | out: lpFindFileData=0x12d700*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xfc3e6570, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfc8a9170, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfc8a9170, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{90140000-0019-0409-1000-0000000FF1CE}-C", cAlternateFileName="{9877A~1")) returned 1 [0056.119] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d700 | out: lpFindFileData=0x12d700*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xee829690, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf00dbad0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf00dbad0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{90140000-001A-0409-1000-0000000FF1CE}-C", cAlternateFileName="{9765F~1")) returned 1 [0056.120] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d700 | out: lpFindFileData=0x12d700*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xfc8a9170, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfe076d70, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfe076d70, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{90140000-001B-0409-1000-0000000FF1CE}-C", cAlternateFileName="{94E50~1")) returned 1 [0056.120] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d700 | out: lpFindFileData=0x12d700*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xf00dbad0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf58c8770, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf58c8770, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{90140000-002C-0409-1000-0000000FF1CE}-C", cAlternateFileName="{92787~1")) returned 1 [0056.120] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d700 | out: lpFindFileData=0x12d700*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xfc138cb0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfc3e6570, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfc3e6570, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{90140000-0043-0409-1000-0000000FF1CE}-C", cAlternateFileName="{95310~1")) returned 1 [0056.120] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d700 | out: lpFindFileData=0x12d700*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xf6e34d70, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa13c510, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfa13c510, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{90140000-0044-0409-1000-0000000FF1CE}-C", cAlternateFileName="{91454~1")) returned 1 [0056.120] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d700 | out: lpFindFileData=0x12d700*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0x435769e0, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x43bdc500, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x43bdc500, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{90140000-0054-0409-1000-0000000FF1CE}-C", cAlternateFileName="{9EA85~1")) returned 1 [0056.120] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d700 | out: lpFindFileData=0x12d700*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xf58ee8d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf6e0ec10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf6e0ec10, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{90140000-00A1-0409-1000-0000000FF1CE}-C", cAlternateFileName="{92572~1")) returned 1 [0056.120] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d700 | out: lpFindFileData=0x12d700*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xa5b30b20, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0xa5bc90a0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa5bc90a0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{90140000-00B4-0409-1000-0000000FF1CE}-C", cAlternateFileName="{912E0~1")) returned 1 [0056.120] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d700 | out: lpFindFileData=0x12d700*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xee38cbf0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xee803530, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xee803530, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{90140000-00BA-0409-1000-0000000FF1CE}-C", cAlternateFileName="{90140~4")) returned 1 [0056.121] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d700 | out: lpFindFileData=0x12d700*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xe7b68970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xe8729610, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe8729610, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{90140000-0115-0409-1000-0000000FF1CE}-C", cAlternateFileName="{90140~1")) returned 1 [0056.121] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d700 | out: lpFindFileData=0x12d700*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xfa13c510, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfc112b50, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfc112b50, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{90140000-0117-0409-1000-0000000FF1CE}-C", cAlternateFileName="{9AFC7~1")) returned 1 [0056.121] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d700 | out: lpFindFileData=0x12d700*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xfe09ced0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x18179b90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x18179b90, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{91140000-0011-0000-1000-0000000FF1CE}-C", cAlternateFileName="{91140~1")) returned 1 [0056.121] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d700 | out: lpFindFileData=0x12d700*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xa5cd3a40, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0xa8c22f80, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa8c22f80, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{91140000-003B-0000-1000-0000000FF1CE}-C", cAlternateFileName="{91140~3")) returned 1 [0056.121] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d700 | out: lpFindFileData=0x12d700*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0x46538340, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x4a6d41a0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x4a6d41a0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{91140000-0057-0000-1000-0000000FF1CE}-C", cAlternateFileName="{91140~2")) returned 1 [0056.121] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d700 | out: lpFindFileData=0x12d700*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0x46538340, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x4a6d41a0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x4a6d41a0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{91140000-0057-0000-1000-0000000FF1CE}-C", cAlternateFileName="{91140~2")) returned 0 [0056.121] FindClose (in: hFindFile=0x1af3b6b0 | out: hFindFile=0x1af3b6b0) returned 1 [0056.121] SetErrorMode (uMode=0x0) returned 0x1 [0056.121] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C", nBufferLength=0x105, lpBuffer=0x12d450, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C", lpFilePart=0x0) returned 0x3e [0056.122] SetErrorMode (uMode=0x1) returned 0x0 [0056.122] FindFirstFileW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\*", lpFindFileData=0x12d5f0 | out: lpFindFileData=0x12d5f0*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xecdfa490, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xee38cbf0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xee38cbf0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1af3b6b0 [0056.123] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d600 | out: lpFindFileData=0x12d600*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xecdfa490, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xee38cbf0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xee38cbf0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0056.123] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d600 | out: lpFindFileData=0x12d600*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x393df700, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x393df700, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xed035930, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x102fcbb, dwReserved0=0x0, dwReserved1=0x0, cFileName="ExcelLR.cab", cAlternateFileName="")) returned 1 [0056.123] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d600 | out: lpFindFileData=0x12d600*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3e02ab00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3e02ab00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xece1ee80, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x263e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ExcelMUI.msi", cAlternateFileName="")) returned 1 [0056.123] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d600 | out: lpFindFileData=0x12d600*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xecdfa490, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x61d, dwReserved0=0x0, dwReserved1=0x0, cFileName="ExcelMUI.xml", cAlternateFileName="")) returned 1 [0056.123] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d600 | out: lpFindFileData=0x12d600*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xee38cbf0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x8f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1 [0056.123] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d600 | out: lpFindFileData=0x12d600*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xee38cbf0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x8f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 0 [0056.124] FindClose (in: hFindFile=0x1af3b6b0 | out: hFindFile=0x1af3b6b0) returned 1 [0056.124] SetErrorMode (uMode=0x0) returned 0x1 [0056.125] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\Decrypt Instructions.txt", nBufferLength=0x105, lpBuffer=0x12d300, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\Decrypt Instructions.txt", lpFilePart=0x0) returned 0x57 [0056.125] SetErrorMode (uMode=0x1) returned 0x0 [0056.125] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\Decrypt Instructions.txt" (normalized: "c:\\msocache\\all users\\{90140000-0016-0409-1000-0000000ff1ce}-c\\decrypt instructions.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1e8 [0056.127] GetFileType (hFile=0x1e8) returned 0x1 [0056.127] SetErrorMode (uMode=0x0) returned 0x1 [0056.127] GetFileType (hFile=0x1e8) returned 0x1 [0056.128] WriteFile (in: hFile=0x1e8, lpBuffer=0x2749f60*, nNumberOfBytesToWrite=0x773, lpNumberOfBytesWritten=0x12d868, lpOverlapped=0x0 | out: lpBuffer=0x2749f60*, lpNumberOfBytesWritten=0x12d868*=0x773, lpOverlapped=0x0) returned 1 [0056.129] CloseHandle (hObject=0x1e8) returned 1 [0056.129] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C", nBufferLength=0x105, lpBuffer=0x12d4f0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C", lpFilePart=0x0) returned 0x3e [0056.130] SetErrorMode (uMode=0x1) returned 0x0 [0056.130] FindFirstFileW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\*", lpFindFileData=0x12d690 | out: lpFindFileData=0x12d690*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xecdfa490, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x41887710, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x41887710, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1af3b6b0 [0056.130] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d6a0 | out: lpFindFileData=0x12d6a0*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xecdfa490, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x41887710, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x41887710, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0056.130] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d6a0 | out: lpFindFileData=0x12d6a0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x41887710, ftCreationTime.dwHighDateTime=0x1d5e786, ftLastAccessTime.dwLowDateTime=0x41887710, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x41887710, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x773, dwReserved0=0x0, dwReserved1=0x0, cFileName="Decrypt Instructions.txt", cAlternateFileName="DECRYP~1.TXT")) returned 1 [0056.130] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d6a0 | out: lpFindFileData=0x12d6a0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x393df700, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x393df700, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xed035930, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x102fcbb, dwReserved0=0x0, dwReserved1=0x0, cFileName="ExcelLR.cab", cAlternateFileName="")) returned 1 [0056.130] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d6a0 | out: lpFindFileData=0x12d6a0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3e02ab00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3e02ab00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xece1ee80, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x263e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ExcelMUI.msi", cAlternateFileName="")) returned 1 [0056.130] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d6a0 | out: lpFindFileData=0x12d6a0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xecdfa490, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x61d, dwReserved0=0x0, dwReserved1=0x0, cFileName="ExcelMUI.xml", cAlternateFileName="")) returned 1 [0056.130] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d6a0 | out: lpFindFileData=0x12d6a0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xee38cbf0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x8f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1 [0056.130] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d6a0 | out: lpFindFileData=0x12d6a0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xee38cbf0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x8f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 0 [0056.131] FindClose (in: hFindFile=0x1af3b6b0 | out: hFindFile=0x1af3b6b0) returned 1 [0056.131] SetErrorMode (uMode=0x0) returned 0x1 [0056.131] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C", nBufferLength=0x105, lpBuffer=0x12d450, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C", lpFilePart=0x0) returned 0x3e [0056.131] SetErrorMode (uMode=0x1) returned 0x0 [0056.131] FindFirstFileW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\*", lpFindFileData=0x12d5f0 | out: lpFindFileData=0x12d5f0*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xe8729610, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xecdfa490, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xecdfa490, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1af3b6b0 [0056.136] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d600 | out: lpFindFileData=0x12d600*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xe8729610, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xecdfa490, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xecdfa490, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0056.136] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d600 | out: lpFindFileData=0x12d600*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3e02ab00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3e02ab00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xe874f770, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x263400, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerPointMUI.msi", cAlternateFileName="POWERP~1.MSI")) returned 1 [0056.136] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d600 | out: lpFindFileData=0x12d600*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4529b900, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x4529b900, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xe8728670, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x5aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerPointMUI.xml", cAlternateFileName="POWERP~1.XML")) returned 1 [0056.136] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d600 | out: lpFindFileData=0x12d600*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2d523500, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x2d523500, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xe8b079d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x431a290, dwReserved0=0x0, dwReserved1=0x0, cFileName="PptLR.cab", cAlternateFileName="")) returned 1 [0056.136] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d600 | out: lpFindFileData=0x12d600*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xecdfa490, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x75e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1 [0056.136] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d600 | out: lpFindFileData=0x12d600*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xecdfa490, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x75e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 0 [0056.137] FindClose (in: hFindFile=0x1af3b6b0 | out: hFindFile=0x1af3b6b0) returned 1 [0056.138] SetErrorMode (uMode=0x0) returned 0x1 [0056.139] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\Decrypt Instructions.txt", nBufferLength=0x105, lpBuffer=0x12d300, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\Decrypt Instructions.txt", lpFilePart=0x0) returned 0x57 [0056.139] SetErrorMode (uMode=0x1) returned 0x0 [0056.139] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\Decrypt Instructions.txt" (normalized: "c:\\msocache\\all users\\{90140000-0018-0409-1000-0000000ff1ce}-c\\decrypt instructions.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1e8 [0056.141] GetFileType (hFile=0x1e8) returned 0x1 [0056.141] SetErrorMode (uMode=0x0) returned 0x1 [0056.141] GetFileType (hFile=0x1e8) returned 0x1 [0056.141] WriteFile (in: hFile=0x1e8, lpBuffer=0x2750b68*, nNumberOfBytesToWrite=0x773, lpNumberOfBytesWritten=0x12d868, lpOverlapped=0x0 | out: lpBuffer=0x2750b68*, lpNumberOfBytesWritten=0x12d868*=0x773, lpOverlapped=0x0) returned 1 [0056.142] CloseHandle (hObject=0x1e8) returned 1 [0056.143] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C", nBufferLength=0x105, lpBuffer=0x12d4f0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C", lpFilePart=0x0) returned 0x3e [0056.143] SetErrorMode (uMode=0x1) returned 0x0 [0056.143] FindFirstFileW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\*", lpFindFileData=0x12d690 | out: lpFindFileData=0x12d690*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xe8729610, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x418ad870, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x418ad870, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1af3b6b0 [0056.144] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d6a0 | out: lpFindFileData=0x12d6a0*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xe8729610, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x418ad870, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x418ad870, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0056.144] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d6a0 | out: lpFindFileData=0x12d6a0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x418ad870, ftCreationTime.dwHighDateTime=0x1d5e786, ftLastAccessTime.dwLowDateTime=0x418ad870, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x418ad870, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x773, dwReserved0=0x0, dwReserved1=0x0, cFileName="Decrypt Instructions.txt", cAlternateFileName="DECRYP~1.TXT")) returned 1 [0056.144] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d6a0 | out: lpFindFileData=0x12d6a0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3e02ab00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3e02ab00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xe874f770, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x263400, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerPointMUI.msi", cAlternateFileName="POWERP~1.MSI")) returned 1 [0056.144] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d6a0 | out: lpFindFileData=0x12d6a0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4529b900, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x4529b900, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xe8728670, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x5aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerPointMUI.xml", cAlternateFileName="POWERP~1.XML")) returned 1 [0056.144] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d6a0 | out: lpFindFileData=0x12d6a0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2d523500, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x2d523500, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xe8b079d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x431a290, dwReserved0=0x0, dwReserved1=0x0, cFileName="PptLR.cab", cAlternateFileName="")) returned 1 [0056.144] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d6a0 | out: lpFindFileData=0x12d6a0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xecdfa490, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x75e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1 [0056.144] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d6a0 | out: lpFindFileData=0x12d6a0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xecdfa490, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x75e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 0 [0056.144] FindClose (in: hFindFile=0x1af3b6b0 | out: hFindFile=0x1af3b6b0) returned 1 [0056.144] SetErrorMode (uMode=0x0) returned 0x1 [0056.144] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C", nBufferLength=0x105, lpBuffer=0x12d450, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C", lpFilePart=0x0) returned 0x3e [0056.145] SetErrorMode (uMode=0x1) returned 0x0 [0056.145] FindFirstFileW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\*", lpFindFileData=0x12d5f0 | out: lpFindFileData=0x12d5f0*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xfc3e6570, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfc8a9170, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfc8a9170, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1af3b6b0 [0056.151] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d600 | out: lpFindFileData=0x12d600*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xfc3e6570, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfc8a9170, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfc8a9170, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0056.151] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d600 | out: lpFindFileData=0x12d600*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3e02ab00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3e02ab00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc40b730, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x265c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="PublisherMUI.msi", cAlternateFileName="PUBLIS~1.MSI")) returned 1 [0056.151] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d600 | out: lpFindFileData=0x12d600*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4529b900, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x4529b900, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc3e4630, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x5aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="PublisherMUI.xml", cAlternateFileName="PUBLIS~1.XML")) returned 1 [0056.151] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d600 | out: lpFindFileData=0x12d600*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3cd17e00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3cd17e00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc47e320, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x97f3f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="PubLR.cab", cAlternateFileName="")) returned 1 [0056.151] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d600 | out: lpFindFileData=0x12d600*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc8a9170, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x648, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1 [0056.151] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d600 | out: lpFindFileData=0x12d600*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc8a9170, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x648, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 0 [0056.152] FindClose (in: hFindFile=0x1af3b6b0 | out: hFindFile=0x1af3b6b0) returned 1 [0056.153] SetErrorMode (uMode=0x0) returned 0x1 [0056.154] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\Decrypt Instructions.txt", nBufferLength=0x105, lpBuffer=0x12d300, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\Decrypt Instructions.txt", lpFilePart=0x0) returned 0x57 [0056.154] SetErrorMode (uMode=0x1) returned 0x0 [0056.154] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\Decrypt Instructions.txt" (normalized: "c:\\msocache\\all users\\{90140000-0019-0409-1000-0000000ff1ce}-c\\decrypt instructions.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1e8 [0056.157] GetFileType (hFile=0x1e8) returned 0x1 [0056.157] SetErrorMode (uMode=0x0) returned 0x1 [0056.157] GetFileType (hFile=0x1e8) returned 0x1 [0056.157] WriteFile (in: hFile=0x1e8, lpBuffer=0x27577e0*, nNumberOfBytesToWrite=0x773, lpNumberOfBytesWritten=0x12d868, lpOverlapped=0x0 | out: lpBuffer=0x27577e0*, lpNumberOfBytesWritten=0x12d868*=0x773, lpOverlapped=0x0) returned 1 [0056.159] CloseHandle (hObject=0x1e8) returned 1 [0056.159] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C", nBufferLength=0x105, lpBuffer=0x12d4f0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C", lpFilePart=0x0) returned 0x3e [0056.159] SetErrorMode (uMode=0x1) returned 0x0 [0056.159] FindFirstFileW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\*", lpFindFileData=0x12d690 | out: lpFindFileData=0x12d690*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xfc3e6570, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x418d39d0, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x418d39d0, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1af3b6b0 [0056.160] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d6a0 | out: lpFindFileData=0x12d6a0*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xfc3e6570, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x418d39d0, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x418d39d0, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0056.160] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d6a0 | out: lpFindFileData=0x12d6a0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x418d39d0, ftCreationTime.dwHighDateTime=0x1d5e786, ftLastAccessTime.dwLowDateTime=0x418d39d0, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x418d39d0, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x773, dwReserved0=0x0, dwReserved1=0x0, cFileName="Decrypt Instructions.txt", cAlternateFileName="DECRYP~1.TXT")) returned 1 [0056.160] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d6a0 | out: lpFindFileData=0x12d6a0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3e02ab00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3e02ab00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc40b730, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x265c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="PublisherMUI.msi", cAlternateFileName="PUBLIS~1.MSI")) returned 1 [0056.160] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d6a0 | out: lpFindFileData=0x12d6a0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4529b900, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x4529b900, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc3e4630, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x5aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="PublisherMUI.xml", cAlternateFileName="PUBLIS~1.XML")) returned 1 [0056.160] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d6a0 | out: lpFindFileData=0x12d6a0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3cd17e00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3cd17e00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc47e320, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x97f3f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="PubLR.cab", cAlternateFileName="")) returned 1 [0056.160] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d6a0 | out: lpFindFileData=0x12d6a0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc8a9170, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x648, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1 [0056.160] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d6a0 | out: lpFindFileData=0x12d6a0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc8a9170, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x648, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 0 [0056.160] FindClose (in: hFindFile=0x1af3b6b0 | out: hFindFile=0x1af3b6b0) returned 1 [0056.160] SetErrorMode (uMode=0x0) returned 0x1 [0056.161] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C", nBufferLength=0x105, lpBuffer=0x12d450, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C", lpFilePart=0x0) returned 0x3e [0056.161] SetErrorMode (uMode=0x1) returned 0x0 [0056.161] FindFirstFileW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\*", lpFindFileData=0x12d5f0 | out: lpFindFileData=0x12d5f0*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xee829690, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf00dbad0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf00dbad0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1af3b6b0 [0056.806] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d600 | out: lpFindFileData=0x12d600*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xee829690, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf00dbad0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf00dbad0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0056.806] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d600 | out: lpFindFileData=0x12d600*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3a6f2400, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3a6f2400, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xeebe0180, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xe21fcc, dwReserved0=0x0, dwReserved1=0x0, cFileName="OutlkLR.cab", cAlternateFileName="")) returned 1 [0056.806] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d600 | out: lpFindFileData=0x12d600*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3e02ab00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3e02ab00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xee827f20, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x2bba00, dwReserved0=0x0, dwReserved1=0x0, cFileName="OutlookMUI.msi", cAlternateFileName="OUTLOO~1.MSI")) returned 1 [0056.806] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d600 | out: lpFindFileData=0x12d600*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xee827f20, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xc72, dwReserved0=0x0, dwReserved1=0x0, cFileName="OutlookMUI.xml", cAlternateFileName="OUTLOO~1.XML")) returned 1 [0056.806] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d600 | out: lpFindFileData=0x12d600*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf00db300, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x106f, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1 [0056.806] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d600 | out: lpFindFileData=0x12d600*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf00db300, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x106f, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 0 [0056.806] FindClose (in: hFindFile=0x1af3b6b0 | out: hFindFile=0x1af3b6b0) returned 1 [0056.807] SetErrorMode (uMode=0x0) returned 0x1 [0056.808] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\Decrypt Instructions.txt", nBufferLength=0x105, lpBuffer=0x12d300, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\Decrypt Instructions.txt", lpFilePart=0x0) returned 0x57 [0056.808] SetErrorMode (uMode=0x1) returned 0x0 [0056.808] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\Decrypt Instructions.txt" (normalized: "c:\\msocache\\all users\\{90140000-001a-0409-1000-0000000ff1ce}-c\\decrypt instructions.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1e8 [0056.810] GetFileType (hFile=0x1e8) returned 0x1 [0056.810] SetErrorMode (uMode=0x0) returned 0x1 [0056.810] GetFileType (hFile=0x1e8) returned 0x1 [0056.810] WriteFile (in: hFile=0x1e8, lpBuffer=0x275e448*, nNumberOfBytesToWrite=0x773, lpNumberOfBytesWritten=0x12d868, lpOverlapped=0x0 | out: lpBuffer=0x275e448*, lpNumberOfBytesWritten=0x12d868*=0x773, lpOverlapped=0x0) returned 1 [0056.811] CloseHandle (hObject=0x1e8) returned 1 [0056.811] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C", nBufferLength=0x105, lpBuffer=0x12d4f0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C", lpFilePart=0x0) returned 0x3e [0056.812] SetErrorMode (uMode=0x1) returned 0x0 [0056.812] FindFirstFileW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\*", lpFindFileData=0x12d690 | out: lpFindFileData=0x12d690*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xee829690, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x41eed230, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x41eed230, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1af3b6b0 [0056.812] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d6a0 | out: lpFindFileData=0x12d6a0*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xee829690, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x41eed230, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x41eed230, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0056.812] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d6a0 | out: lpFindFileData=0x12d6a0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x41eed230, ftCreationTime.dwHighDateTime=0x1d5e786, ftLastAccessTime.dwLowDateTime=0x41eed230, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x41f13390, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x773, dwReserved0=0x0, dwReserved1=0x0, cFileName="Decrypt Instructions.txt", cAlternateFileName="DECRYP~1.TXT")) returned 1 [0056.812] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d6a0 | out: lpFindFileData=0x12d6a0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3a6f2400, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3a6f2400, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xeebe0180, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xe21fcc, dwReserved0=0x0, dwReserved1=0x0, cFileName="OutlkLR.cab", cAlternateFileName="")) returned 1 [0056.812] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d6a0 | out: lpFindFileData=0x12d6a0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3e02ab00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3e02ab00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xee827f20, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x2bba00, dwReserved0=0x0, dwReserved1=0x0, cFileName="OutlookMUI.msi", cAlternateFileName="OUTLOO~1.MSI")) returned 1 [0056.812] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d6a0 | out: lpFindFileData=0x12d6a0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xee827f20, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xc72, dwReserved0=0x0, dwReserved1=0x0, cFileName="OutlookMUI.xml", cAlternateFileName="OUTLOO~1.XML")) returned 1 [0056.812] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d6a0 | out: lpFindFileData=0x12d6a0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf00db300, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x106f, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1 [0056.812] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d6a0 | out: lpFindFileData=0x12d6a0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf00db300, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x106f, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 0 [0056.812] FindClose (in: hFindFile=0x1af3b6b0 | out: hFindFile=0x1af3b6b0) returned 1 [0056.812] SetErrorMode (uMode=0x0) returned 0x1 [0056.813] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C", nBufferLength=0x105, lpBuffer=0x12d450, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C", lpFilePart=0x0) returned 0x3e [0056.813] SetErrorMode (uMode=0x1) returned 0x0 [0056.813] FindFirstFileW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\*", lpFindFileData=0x12d5f0 | out: lpFindFileData=0x12d5f0*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xfc8a9170, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfe076d70, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfe076d70, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1af3b6b0 [0056.819] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d600 | out: lpFindFileData=0x12d600*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xfc8a9170, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfe076d70, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfe076d70, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0056.819] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d600 | out: lpFindFileData=0x12d600*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfe076d70, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x978, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1 [0056.819] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d600 | out: lpFindFileData=0x12d600*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2fb48f00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x2fb48f00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc967850, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x29c6dbd, dwReserved0=0x0, dwReserved1=0x0, cFileName="WordLR.cab", cAlternateFileName="")) returned 1 [0056.819] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d600 | out: lpFindFileData=0x12d600*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3e02ab00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3e02ab00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc8a9170, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x267e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WordMUI.msi", cAlternateFileName="")) returned 1 [0056.819] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d600 | out: lpFindFileData=0x12d600*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc8a9170, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x708, dwReserved0=0x0, dwReserved1=0x0, cFileName="WordMUI.xml", cAlternateFileName="")) returned 1 [0056.819] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d600 | out: lpFindFileData=0x12d600*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc8a9170, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x708, dwReserved0=0x0, dwReserved1=0x0, cFileName="WordMUI.xml", cAlternateFileName="")) returned 0 [0056.819] FindClose (in: hFindFile=0x1af3b6b0 | out: hFindFile=0x1af3b6b0) returned 1 [0056.820] SetErrorMode (uMode=0x0) returned 0x1 [0056.820] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\Decrypt Instructions.txt", nBufferLength=0x105, lpBuffer=0x12d300, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\Decrypt Instructions.txt", lpFilePart=0x0) returned 0x57 [0056.821] SetErrorMode (uMode=0x1) returned 0x0 [0056.821] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\Decrypt Instructions.txt" (normalized: "c:\\msocache\\all users\\{90140000-001b-0409-1000-0000000ff1ce}-c\\decrypt instructions.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1e8 [0056.903] GetFileType (hFile=0x1e8) returned 0x1 [0056.903] SetErrorMode (uMode=0x0) returned 0x1 [0056.904] GetFileType (hFile=0x1e8) returned 0x1 [0056.904] WriteFile (in: hFile=0x1e8, lpBuffer=0x2765010*, nNumberOfBytesToWrite=0x773, lpNumberOfBytesWritten=0x12d868, lpOverlapped=0x0 | out: lpBuffer=0x2765010*, lpNumberOfBytesWritten=0x12d868*=0x773, lpOverlapped=0x0) returned 1 [0056.905] CloseHandle (hObject=0x1e8) returned 1 [0056.906] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C", nBufferLength=0x105, lpBuffer=0x12d4f0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C", lpFilePart=0x0) returned 0x3e [0056.906] SetErrorMode (uMode=0x1) returned 0x0 [0056.906] FindFirstFileW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\*", lpFindFileData=0x12d690 | out: lpFindFileData=0x12d690*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xfc8a9170, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x41fd1a70, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x41fd1a70, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1af3b6b0 [0056.907] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d6a0 | out: lpFindFileData=0x12d6a0*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xfc8a9170, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x41fd1a70, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x41fd1a70, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0056.907] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d6a0 | out: lpFindFileData=0x12d6a0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x41f13390, ftCreationTime.dwHighDateTime=0x1d5e786, ftLastAccessTime.dwLowDateTime=0x41f13390, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x41ff7bd0, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x773, dwReserved0=0x0, dwReserved1=0x0, cFileName="Decrypt Instructions.txt", cAlternateFileName="DECRYP~1.TXT")) returned 1 [0056.907] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d6a0 | out: lpFindFileData=0x12d6a0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfe076d70, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x978, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1 [0056.907] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d6a0 | out: lpFindFileData=0x12d6a0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2fb48f00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x2fb48f00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc967850, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x29c6dbd, dwReserved0=0x0, dwReserved1=0x0, cFileName="WordLR.cab", cAlternateFileName="")) returned 1 [0056.907] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d6a0 | out: lpFindFileData=0x12d6a0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3e02ab00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3e02ab00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc8a9170, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x267e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WordMUI.msi", cAlternateFileName="")) returned 1 [0056.907] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d6a0 | out: lpFindFileData=0x12d6a0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc8a9170, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x708, dwReserved0=0x0, dwReserved1=0x0, cFileName="WordMUI.xml", cAlternateFileName="")) returned 1 [0056.907] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d6a0 | out: lpFindFileData=0x12d6a0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc8a9170, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x708, dwReserved0=0x0, dwReserved1=0x0, cFileName="WordMUI.xml", cAlternateFileName="")) returned 0 [0056.907] FindClose (in: hFindFile=0x1af3b6b0 | out: hFindFile=0x1af3b6b0) returned 1 [0056.907] SetErrorMode (uMode=0x0) returned 0x1 [0056.907] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C", nBufferLength=0x105, lpBuffer=0x12d450, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C", lpFilePart=0x0) returned 0x3e [0056.907] SetErrorMode (uMode=0x1) returned 0x0 [0056.908] FindFirstFileW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\*", lpFindFileData=0x12d5f0 | out: lpFindFileData=0x12d5f0*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xf00dbad0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf58c8770, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf58c8770, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1af3b6b0 [0057.876] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d600 | out: lpFindFileData=0x12d600*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xf00dbad0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf58c8770, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf58c8770, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0057.877] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d600 | out: lpFindFileData=0x12d600*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf01c0310, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf07b3a10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf07b3a10, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.en", cAlternateFileName="")) returned 1 [0057.877] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d600 | out: lpFindFileData=0x12d600*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf4d53d90, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf4f690d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf4f690d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.es", cAlternateFileName="")) returned 1 [0057.877] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d600 | out: lpFindFileData=0x12d600*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf2bda830, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf30772d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf30772d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.fr", cAlternateFileName="")) returned 1 [0057.877] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d600 | out: lpFindFileData=0x12d600*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x40650500, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x40650500, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf0126df0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xd4200, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proofing.msi", cAlternateFileName="")) returned 1 [0057.877] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d600 | out: lpFindFileData=0x12d600*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4529b900, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x4529b900, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf00db300, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x32b, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proofing.xml", cAlternateFileName="")) returned 1 [0057.877] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d600 | out: lpFindFileData=0x12d600*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x42c75f00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x42c75f00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf58c6830, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x16fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1 [0057.877] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d600 | out: lpFindFileData=0x12d600*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x42c75f00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x42c75f00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf58c6830, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x16fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 0 [0057.878] FindClose (in: hFindFile=0x1af3b6b0 | out: hFindFile=0x1af3b6b0) returned 1 [0057.879] SetErrorMode (uMode=0x0) returned 0x1 [0057.884] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Decrypt Instructions.txt", nBufferLength=0x105, lpBuffer=0x12d300, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Decrypt Instructions.txt", lpFilePart=0x0) returned 0x57 [0057.884] SetErrorMode (uMode=0x1) returned 0x0 [0057.884] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Decrypt Instructions.txt" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\decrypt instructions.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1e8 [0057.904] GetFileType (hFile=0x1e8) returned 0x1 [0057.904] SetErrorMode (uMode=0x0) returned 0x1 [0057.905] GetFileType (hFile=0x1e8) returned 0x1 [0057.905] WriteFile (in: hFile=0x1e8, lpBuffer=0x276ba88*, nNumberOfBytesToWrite=0x773, lpNumberOfBytesWritten=0x12d868, lpOverlapped=0x0 | out: lpBuffer=0x276ba88*, lpNumberOfBytesWritten=0x12d868*=0x773, lpOverlapped=0x0) returned 1 [0057.906] CloseHandle (hObject=0x1e8) returned 1 [0057.907] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C", nBufferLength=0x105, lpBuffer=0x12d4f0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C", lpFilePart=0x0) returned 0x3e [0057.907] SetErrorMode (uMode=0x1) returned 0x0 [0057.907] FindFirstFileW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\*", lpFindFileData=0x12d690 | out: lpFindFileData=0x12d690*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xf00dbad0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x42931110, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x42931110, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1af3b6b0 [0057.907] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d6a0 | out: lpFindFileData=0x12d6a0*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xf00dbad0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x42931110, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x42931110, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0057.907] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d6a0 | out: lpFindFileData=0x12d6a0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x42931110, ftCreationTime.dwHighDateTime=0x1d5e786, ftLastAccessTime.dwLowDateTime=0x42931110, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x4297d3d0, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x773, dwReserved0=0x0, dwReserved1=0x0, cFileName="Decrypt Instructions.txt", cAlternateFileName="DECRYP~1.TXT")) returned 1 [0057.908] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d6a0 | out: lpFindFileData=0x12d6a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf01c0310, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf07b3a10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf07b3a10, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.en", cAlternateFileName="")) returned 1 [0057.908] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d6a0 | out: lpFindFileData=0x12d6a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf4d53d90, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf4f690d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf4f690d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.es", cAlternateFileName="")) returned 1 [0057.908] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d6a0 | out: lpFindFileData=0x12d6a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf2bda830, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf30772d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf30772d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.fr", cAlternateFileName="")) returned 1 [0057.908] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d6a0 | out: lpFindFileData=0x12d6a0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x40650500, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x40650500, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf0126df0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xd4200, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proofing.msi", cAlternateFileName="")) returned 1 [0057.908] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d6a0 | out: lpFindFileData=0x12d6a0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4529b900, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x4529b900, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf00db300, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x32b, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proofing.xml", cAlternateFileName="")) returned 1 [0057.908] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d6a0 | out: lpFindFileData=0x12d6a0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x42c75f00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x42c75f00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf58c6830, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x16fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1 [0057.908] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d6a0 | out: lpFindFileData=0x12d6a0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x42c75f00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x42c75f00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf58c6830, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x16fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 0 [0057.908] FindClose (in: hFindFile=0x1af3b6b0 | out: hFindFile=0x1af3b6b0) returned 1 [0057.908] SetErrorMode (uMode=0x0) returned 0x1 [0057.908] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en", nBufferLength=0x105, lpBuffer=0x12d3f0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en", lpFilePart=0x0) returned 0x47 [0057.909] SetErrorMode (uMode=0x1) returned 0x0 [0057.909] FindFirstFileW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf01c0310, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf07b3a10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf07b3a10, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1af3b6b0 [0057.909] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5a0 | out: lpFindFileData=0x12d5a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf01c0310, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf07b3a10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf07b3a10, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0057.909] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5a0 | out: lpFindFileData=0x12d5a0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x219b4a00, ftCreationTime.dwHighDateTime=0x1cad01b, ftLastAccessTime.dwLowDateTime=0x219b4a00, ftLastAccessTime.dwHighDateTime=0x1cad01b, ftLastWriteTime.dwLowDateTime=0xf07b1ad0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xaf35ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.cab", cAlternateFileName="")) returned 1 [0057.909] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5a0 | out: lpFindFileData=0x12d5a0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4db6cb00, ftCreationTime.dwHighDateTime=0x1cad01b, ftLastAccessTime.dwLowDateTime=0x4db6cb00, ftLastAccessTime.dwHighDateTime=0x1cad01b, ftLastWriteTime.dwLowDateTime=0xf020c5d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xd5c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.msi", cAlternateFileName="")) returned 1 [0057.909] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5a0 | out: lpFindFileData=0x12d5a0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa38b7300, ftCreationTime.dwHighDateTime=0x1cad01b, ftLastAccessTime.dwLowDateTime=0xa38b7300, ftLastAccessTime.dwHighDateTime=0x1cad01b, ftLastWriteTime.dwLowDateTime=0xf01be3d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x543, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.xml", cAlternateFileName="")) returned 1 [0057.910] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5a0 | out: lpFindFileData=0x12d5a0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa38b7300, ftCreationTime.dwHighDateTime=0x1cad01b, ftLastAccessTime.dwLowDateTime=0xa38b7300, ftLastAccessTime.dwHighDateTime=0x1cad01b, ftLastWriteTime.dwLowDateTime=0xf01be3d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x543, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.xml", cAlternateFileName="")) returned 0 [0057.910] FindClose (in: hFindFile=0x1af3b6b0 | out: hFindFile=0x1af3b6b0) returned 1 [0057.910] SetErrorMode (uMode=0x0) returned 0x1 [0057.911] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Decrypt Instructions.txt", nBufferLength=0x105, lpBuffer=0x12d2a0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Decrypt Instructions.txt", lpFilePart=0x0) returned 0x60 [0057.911] SetErrorMode (uMode=0x1) returned 0x0 [0057.911] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Decrypt Instructions.txt" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.en\\decrypt instructions.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1e8 [0057.911] GetFileType (hFile=0x1e8) returned 0x1 [0057.911] SetErrorMode (uMode=0x0) returned 0x1 [0057.911] GetFileType (hFile=0x1e8) returned 0x1 [0057.912] WriteFile (in: hFile=0x1e8, lpBuffer=0x2772b70*, nNumberOfBytesToWrite=0x773, lpNumberOfBytesWritten=0x12d808, lpOverlapped=0x0 | out: lpBuffer=0x2772b70*, lpNumberOfBytesWritten=0x12d808*=0x773, lpOverlapped=0x0) returned 1 [0057.913] CloseHandle (hObject=0x1e8) returned 1 [0057.914] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en", nBufferLength=0x105, lpBuffer=0x12d490, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en", lpFilePart=0x0) returned 0x47 [0057.933] SetErrorMode (uMode=0x1) returned 0x0 [0057.933] FindFirstFileW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\*", lpFindFileData=0x12d630 | out: lpFindFileData=0x12d630*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf01c0310, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x4297d3d0, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x4297d3d0, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1af3b6b0 [0057.933] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d640 | out: lpFindFileData=0x12d640*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf01c0310, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x4297d3d0, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x4297d3d0, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0057.933] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d640 | out: lpFindFileData=0x12d640*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4297d3d0, ftCreationTime.dwHighDateTime=0x1d5e786, ftLastAccessTime.dwLowDateTime=0x4297d3d0, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x4297d3d0, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x773, dwReserved0=0x0, dwReserved1=0x0, cFileName="Decrypt Instructions.txt", cAlternateFileName="DECRYP~1.TXT")) returned 1 [0057.933] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d640 | out: lpFindFileData=0x12d640*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x219b4a00, ftCreationTime.dwHighDateTime=0x1cad01b, ftLastAccessTime.dwLowDateTime=0x219b4a00, ftLastAccessTime.dwHighDateTime=0x1cad01b, ftLastWriteTime.dwLowDateTime=0xf07b1ad0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xaf35ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.cab", cAlternateFileName="")) returned 1 [0057.934] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d640 | out: lpFindFileData=0x12d640*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4db6cb00, ftCreationTime.dwHighDateTime=0x1cad01b, ftLastAccessTime.dwLowDateTime=0x4db6cb00, ftLastAccessTime.dwHighDateTime=0x1cad01b, ftLastWriteTime.dwLowDateTime=0xf020c5d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xd5c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.msi", cAlternateFileName="")) returned 1 [0057.934] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d640 | out: lpFindFileData=0x12d640*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa38b7300, ftCreationTime.dwHighDateTime=0x1cad01b, ftLastAccessTime.dwLowDateTime=0xa38b7300, ftLastAccessTime.dwHighDateTime=0x1cad01b, ftLastWriteTime.dwLowDateTime=0xf01be3d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x543, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.xml", cAlternateFileName="")) returned 1 [0057.934] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d640 | out: lpFindFileData=0x12d640*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa38b7300, ftCreationTime.dwHighDateTime=0x1cad01b, ftLastAccessTime.dwLowDateTime=0xa38b7300, ftLastAccessTime.dwHighDateTime=0x1cad01b, ftLastWriteTime.dwLowDateTime=0xf01be3d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x543, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.xml", cAlternateFileName="")) returned 0 [0057.934] FindClose (in: hFindFile=0x1af3b6b0 | out: hFindFile=0x1af3b6b0) returned 1 [0057.934] SetErrorMode (uMode=0x0) returned 0x1 [0057.934] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es", nBufferLength=0x105, lpBuffer=0x12d3f0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es", lpFilePart=0x0) returned 0x47 [0057.934] SetErrorMode (uMode=0x1) returned 0x0 [0057.934] FindFirstFileW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf4d53d90, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf4f690d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf4f690d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1af3b6b0 [0058.204] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5a0 | out: lpFindFileData=0x12d5a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf4d53d90, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf4f690d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf4f690d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0058.204] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5a0 | out: lpFindFileData=0x12d5a0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3ba05100, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3ba05100, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf4f690d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xd02aea, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.cab", cAlternateFileName="")) returned 1 [0058.204] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5a0 | out: lpFindFileData=0x12d5a0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3f33d800, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3f33d800, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf4e5c7f0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xd7200, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.msi", cAlternateFileName="")) returned 1 [0058.204] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5a0 | out: lpFindFileData=0x12d5a0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf4e37e00, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x5b1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.xml", cAlternateFileName="")) returned 1 [0058.204] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5a0 | out: lpFindFileData=0x12d5a0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf4e37e00, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x5b1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.xml", cAlternateFileName="")) returned 0 [0058.204] FindClose (in: hFindFile=0x1af3b6b0 | out: hFindFile=0x1af3b6b0) returned 1 [0058.204] SetErrorMode (uMode=0x0) returned 0x1 [0058.206] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Decrypt Instructions.txt", nBufferLength=0x105, lpBuffer=0x12d2a0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Decrypt Instructions.txt", lpFilePart=0x0) returned 0x60 [0058.206] SetErrorMode (uMode=0x1) returned 0x0 [0058.206] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Decrypt Instructions.txt" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.es\\decrypt instructions.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1e8 [0058.207] GetFileType (hFile=0x1e8) returned 0x1 [0058.207] SetErrorMode (uMode=0x0) returned 0x1 [0058.207] GetFileType (hFile=0x1e8) returned 0x1 [0058.207] WriteFile (in: hFile=0x1e8, lpBuffer=0x2779648*, nNumberOfBytesToWrite=0x773, lpNumberOfBytesWritten=0x12d808, lpOverlapped=0x0 | out: lpBuffer=0x2779648*, lpNumberOfBytesWritten=0x12d808*=0x773, lpOverlapped=0x0) returned 1 [0058.208] CloseHandle (hObject=0x1e8) returned 1 [0058.209] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es", nBufferLength=0x105, lpBuffer=0x12d490, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es", lpFilePart=0x0) returned 0x47 [0058.209] SetErrorMode (uMode=0x1) returned 0x0 [0058.209] FindFirstFileW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\*", lpFindFileData=0x12d630 | out: lpFindFileData=0x12d630*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf4d53d90, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x42c50df0, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x42c50df0, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1af3b6b0 [0058.209] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d640 | out: lpFindFileData=0x12d640*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf4d53d90, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x42c50df0, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x42c50df0, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0058.209] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d640 | out: lpFindFileData=0x12d640*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x42c50df0, ftCreationTime.dwHighDateTime=0x1d5e786, ftLastAccessTime.dwLowDateTime=0x42c50df0, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x42c50df0, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x773, dwReserved0=0x0, dwReserved1=0x0, cFileName="Decrypt Instructions.txt", cAlternateFileName="DECRYP~1.TXT")) returned 1 [0058.209] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d640 | out: lpFindFileData=0x12d640*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3ba05100, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3ba05100, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf4f690d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xd02aea, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.cab", cAlternateFileName="")) returned 1 [0058.210] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d640 | out: lpFindFileData=0x12d640*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3f33d800, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3f33d800, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf4e5c7f0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xd7200, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.msi", cAlternateFileName="")) returned 1 [0058.210] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d640 | out: lpFindFileData=0x12d640*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf4e37e00, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x5b1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.xml", cAlternateFileName="")) returned 1 [0058.210] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d640 | out: lpFindFileData=0x12d640*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf4e37e00, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x5b1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.xml", cAlternateFileName="")) returned 0 [0058.210] FindClose (in: hFindFile=0x1af3b6b0 | out: hFindFile=0x1af3b6b0) returned 1 [0058.210] SetErrorMode (uMode=0x0) returned 0x1 [0058.210] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr", nBufferLength=0x105, lpBuffer=0x12d3f0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr", lpFilePart=0x0) returned 0x47 [0058.210] SetErrorMode (uMode=0x1) returned 0x0 [0058.210] FindFirstFileW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf2bda830, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf30772d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf30772d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1af3b6b0 [0058.211] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5a0 | out: lpFindFileData=0x12d5a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf2bda830, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf30772d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf30772d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0058.211] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5a0 | out: lpFindFileData=0x12d5a0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x35aa7000, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x35aa7000, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf3076b00, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x1416b54, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.cab", cAlternateFileName="")) returned 1 [0058.211] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5a0 | out: lpFindFileData=0x12d5a0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3f33d800, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3f33d800, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf2e3b660, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xd8400, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.msi", cAlternateFileName="")) returned 1 [0058.211] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5a0 | out: lpFindFileData=0x12d5a0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf2bd90c0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x5b2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.xml", cAlternateFileName="")) returned 1 [0058.211] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5a0 | out: lpFindFileData=0x12d5a0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf2bd90c0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x5b2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.xml", cAlternateFileName="")) returned 0 [0058.211] FindClose (in: hFindFile=0x1af3b6b0 | out: hFindFile=0x1af3b6b0) returned 1 [0058.212] SetErrorMode (uMode=0x0) returned 0x1 [0058.213] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Decrypt Instructions.txt", nBufferLength=0x105, lpBuffer=0x12d2a0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Decrypt Instructions.txt", lpFilePart=0x0) returned 0x60 [0058.213] SetErrorMode (uMode=0x1) returned 0x0 [0058.213] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Decrypt Instructions.txt" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.fr\\decrypt instructions.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1e8 [0058.213] GetFileType (hFile=0x1e8) returned 0x1 [0058.213] SetErrorMode (uMode=0x0) returned 0x1 [0058.213] GetFileType (hFile=0x1e8) returned 0x1 [0058.214] WriteFile (in: hFile=0x1e8, lpBuffer=0x2780120*, nNumberOfBytesToWrite=0x773, lpNumberOfBytesWritten=0x12d808, lpOverlapped=0x0 | out: lpBuffer=0x2780120*, lpNumberOfBytesWritten=0x12d808*=0x773, lpOverlapped=0x0) returned 1 [0058.215] CloseHandle (hObject=0x1e8) returned 1 [0058.215] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr", nBufferLength=0x105, lpBuffer=0x12d490, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr", lpFilePart=0x0) returned 0x47 [0058.216] SetErrorMode (uMode=0x1) returned 0x0 [0058.216] FindFirstFileW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\*", lpFindFileData=0x12d630 | out: lpFindFileData=0x12d630*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf2bda830, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x42c50df0, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x42c50df0, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1af3b6b0 [0058.216] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d640 | out: lpFindFileData=0x12d640*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf2bda830, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x42c50df0, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x42c50df0, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0058.216] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d640 | out: lpFindFileData=0x12d640*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x42c50df0, ftCreationTime.dwHighDateTime=0x1d5e786, ftLastAccessTime.dwLowDateTime=0x42c50df0, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x42c76f50, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x773, dwReserved0=0x0, dwReserved1=0x0, cFileName="Decrypt Instructions.txt", cAlternateFileName="DECRYP~1.TXT")) returned 1 [0058.216] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d640 | out: lpFindFileData=0x12d640*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x35aa7000, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x35aa7000, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf3076b00, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x1416b54, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.cab", cAlternateFileName="")) returned 1 [0058.216] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d640 | out: lpFindFileData=0x12d640*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3f33d800, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3f33d800, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf2e3b660, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xd8400, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.msi", cAlternateFileName="")) returned 1 [0058.216] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d640 | out: lpFindFileData=0x12d640*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf2bd90c0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x5b2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.xml", cAlternateFileName="")) returned 1 [0058.216] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d640 | out: lpFindFileData=0x12d640*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf2bd90c0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x5b2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.xml", cAlternateFileName="")) returned 0 [0058.217] FindClose (in: hFindFile=0x1af3b6b0 | out: hFindFile=0x1af3b6b0) returned 1 [0058.217] SetErrorMode (uMode=0x0) returned 0x1 [0058.217] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C", nBufferLength=0x105, lpBuffer=0x12d450, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C", lpFilePart=0x0) returned 0x3e [0058.217] SetErrorMode (uMode=0x1) returned 0x0 [0058.217] FindFirstFileW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\*", lpFindFileData=0x12d5f0 | out: lpFindFileData=0x12d5f0*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xfc138cb0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfc3e6570, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfc3e6570, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1af3b6b0 [0058.233] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d600 | out: lpFindFileData=0x12d600*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xfc138cb0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfc3e6570, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfc3e6570, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0058.233] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d600 | out: lpFindFileData=0x12d600*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3f33d800, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3f33d800, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc138cb0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xd5600, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office32MUI.msi", cAlternateFileName="OFFICE~1.MSI")) returned 1 [0058.233] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d600 | out: lpFindFileData=0x12d600*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4529b900, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x4529b900, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc138cb0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x567, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office32MUI.xml", cAlternateFileName="OFFICE~1.XML")) returned 1 [0058.233] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d600 | out: lpFindFileData=0x12d600*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3e02ab00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3e02ab00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc301560, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x2cb13b, dwReserved0=0x0, dwReserved1=0x0, cFileName="OWOW32LR.cab", cAlternateFileName="")) returned 1 [0058.233] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d600 | out: lpFindFileData=0x12d600*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc3e4630, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x93a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1 [0058.234] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d600 | out: lpFindFileData=0x12d600*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc3e4630, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x93a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 0 [0058.234] FindClose (in: hFindFile=0x1af3b6b0 | out: hFindFile=0x1af3b6b0) returned 1 [0058.235] SetErrorMode (uMode=0x0) returned 0x1 [0058.236] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Decrypt Instructions.txt", nBufferLength=0x105, lpBuffer=0x12d300, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Decrypt Instructions.txt", lpFilePart=0x0) returned 0x57 [0058.236] SetErrorMode (uMode=0x1) returned 0x0 [0058.236] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Decrypt Instructions.txt" (normalized: "c:\\msocache\\all users\\{90140000-0043-0409-1000-0000000ff1ce}-c\\decrypt instructions.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1e8 [0058.238] GetFileType (hFile=0x1e8) returned 0x1 [0058.238] SetErrorMode (uMode=0x0) returned 0x1 [0058.238] GetFileType (hFile=0x1e8) returned 0x1 [0058.239] WriteFile (in: hFile=0x1e8, lpBuffer=0x2786d30*, nNumberOfBytesToWrite=0x773, lpNumberOfBytesWritten=0x12d868, lpOverlapped=0x0 | out: lpBuffer=0x2786d30*, lpNumberOfBytesWritten=0x12d868*=0x773, lpOverlapped=0x0) returned 1 [0058.240] CloseHandle (hObject=0x1e8) returned 1 [0058.240] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C", nBufferLength=0x105, lpBuffer=0x12d4f0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C", lpFilePart=0x0) returned 0x3e [0058.240] SetErrorMode (uMode=0x1) returned 0x0 [0058.241] FindFirstFileW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\*", lpFindFileData=0x12d690 | out: lpFindFileData=0x12d690*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xfc138cb0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x42c9d0b0, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x42c9d0b0, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1af3b6b0 [0058.241] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d6a0 | out: lpFindFileData=0x12d6a0*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xfc138cb0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x42c9d0b0, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x42c9d0b0, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0058.241] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d6a0 | out: lpFindFileData=0x12d6a0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x42c9d0b0, ftCreationTime.dwHighDateTime=0x1d5e786, ftLastAccessTime.dwLowDateTime=0x42c9d0b0, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x42c9d0b0, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x773, dwReserved0=0x0, dwReserved1=0x0, cFileName="Decrypt Instructions.txt", cAlternateFileName="DECRYP~1.TXT")) returned 1 [0058.241] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d6a0 | out: lpFindFileData=0x12d6a0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3f33d800, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3f33d800, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc138cb0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xd5600, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office32MUI.msi", cAlternateFileName="OFFICE~1.MSI")) returned 1 [0058.241] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d6a0 | out: lpFindFileData=0x12d6a0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4529b900, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x4529b900, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc138cb0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x567, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office32MUI.xml", cAlternateFileName="OFFICE~1.XML")) returned 1 [0058.241] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d6a0 | out: lpFindFileData=0x12d6a0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3e02ab00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3e02ab00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc301560, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x2cb13b, dwReserved0=0x0, dwReserved1=0x0, cFileName="OWOW32LR.cab", cAlternateFileName="")) returned 1 [0058.241] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d6a0 | out: lpFindFileData=0x12d6a0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc3e4630, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x93a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1 [0058.241] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d6a0 | out: lpFindFileData=0x12d6a0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc3e4630, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x93a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 0 [0058.241] FindClose (in: hFindFile=0x1af3b6b0 | out: hFindFile=0x1af3b6b0) returned 1 [0058.242] SetErrorMode (uMode=0x0) returned 0x1 [0058.242] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C", nBufferLength=0x105, lpBuffer=0x12d450, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C", lpFilePart=0x0) returned 0x3e [0058.242] SetErrorMode (uMode=0x1) returned 0x0 [0058.242] FindFirstFileW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\*", lpFindFileData=0x12d5f0 | out: lpFindFileData=0x12d5f0*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xf6e34d70, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa13c510, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfa13c510, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1af3b6b0 [0058.250] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d600 | out: lpFindFileData=0x12d600*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xf6e34d70, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa13c510, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfa13c510, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0058.250] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d600 | out: lpFindFileData=0x12d600*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbd907a00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbd907a00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf79111d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x1200204, dwReserved0=0x0, dwReserved1=0x0, cFileName="InfLR.cab", cAlternateFileName="")) returned 1 [0058.250] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d600 | out: lpFindFileData=0x12d600*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbd907a00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbd907a00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf6e58f90, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x2fac00, dwReserved0=0x0, dwReserved1=0x0, cFileName="InfoPathMUI.msi", cAlternateFileName="INFOPA~1.MSI")) returned 1 [0058.250] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d600 | out: lpFindFileData=0x12d600*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbec1a700, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbec1a700, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf6e345a0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x4cf, dwReserved0=0x0, dwReserved1=0x0, cFileName="InfoPathMUI.xml", cAlternateFileName="INFOPA~1.XML")) returned 1 [0058.250] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d600 | out: lpFindFileData=0x12d600*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbec1a700, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbec1a700, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfa13c510, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x73c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1 [0058.250] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d600 | out: lpFindFileData=0x12d600*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbec1a700, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbec1a700, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfa13c510, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x73c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 0 [0058.251] FindClose (in: hFindFile=0x1af3b6b0 | out: hFindFile=0x1af3b6b0) returned 1 [0058.252] SetErrorMode (uMode=0x0) returned 0x1 [0058.253] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\Decrypt Instructions.txt", nBufferLength=0x105, lpBuffer=0x12d300, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\Decrypt Instructions.txt", lpFilePart=0x0) returned 0x57 [0058.253] SetErrorMode (uMode=0x1) returned 0x0 [0058.253] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\Decrypt Instructions.txt" (normalized: "c:\\msocache\\all users\\{90140000-0044-0409-1000-0000000ff1ce}-c\\decrypt instructions.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1e8 [0058.255] GetFileType (hFile=0x1e8) returned 0x1 [0058.255] SetErrorMode (uMode=0x0) returned 0x1 [0058.255] GetFileType (hFile=0x1e8) returned 0x1 [0058.255] WriteFile (in: hFile=0x1e8, lpBuffer=0x278d990*, nNumberOfBytesToWrite=0x773, lpNumberOfBytesWritten=0x12d868, lpOverlapped=0x0 | out: lpBuffer=0x278d990*, lpNumberOfBytesWritten=0x12d868*=0x773, lpOverlapped=0x0) returned 1 [0058.257] CloseHandle (hObject=0x1e8) returned 1 [0058.257] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C", nBufferLength=0x105, lpBuffer=0x12d4f0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C", lpFilePart=0x0) returned 0x3e [0058.257] SetErrorMode (uMode=0x1) returned 0x0 [0058.257] FindFirstFileW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\*", lpFindFileData=0x12d690 | out: lpFindFileData=0x12d690*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xf6e34d70, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x42cc3210, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x42cc3210, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1af3b6b0 [0058.258] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d6a0 | out: lpFindFileData=0x12d6a0*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xf6e34d70, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x42cc3210, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x42cc3210, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0058.258] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d6a0 | out: lpFindFileData=0x12d6a0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x42cc3210, ftCreationTime.dwHighDateTime=0x1d5e786, ftLastAccessTime.dwLowDateTime=0x42cc3210, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x42cc3210, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x773, dwReserved0=0x0, dwReserved1=0x0, cFileName="Decrypt Instructions.txt", cAlternateFileName="DECRYP~1.TXT")) returned 1 [0058.258] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d6a0 | out: lpFindFileData=0x12d6a0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbd907a00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbd907a00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf79111d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x1200204, dwReserved0=0x0, dwReserved1=0x0, cFileName="InfLR.cab", cAlternateFileName="")) returned 1 [0058.258] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d6a0 | out: lpFindFileData=0x12d6a0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbd907a00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbd907a00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf6e58f90, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x2fac00, dwReserved0=0x0, dwReserved1=0x0, cFileName="InfoPathMUI.msi", cAlternateFileName="INFOPA~1.MSI")) returned 1 [0058.258] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d6a0 | out: lpFindFileData=0x12d6a0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbec1a700, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbec1a700, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf6e345a0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x4cf, dwReserved0=0x0, dwReserved1=0x0, cFileName="InfoPathMUI.xml", cAlternateFileName="INFOPA~1.XML")) returned 1 [0058.258] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d6a0 | out: lpFindFileData=0x12d6a0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbec1a700, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbec1a700, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfa13c510, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x73c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1 [0058.258] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d6a0 | out: lpFindFileData=0x12d6a0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbec1a700, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbec1a700, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfa13c510, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x73c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 0 [0058.258] FindClose (in: hFindFile=0x1af3b6b0 | out: hFindFile=0x1af3b6b0) returned 1 [0058.258] SetErrorMode (uMode=0x0) returned 0x1 [0058.259] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C", nBufferLength=0x105, lpBuffer=0x12d450, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C", lpFilePart=0x0) returned 0x3e [0058.259] SetErrorMode (uMode=0x1) returned 0x0 [0058.259] FindFirstFileW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\*", lpFindFileData=0x12d5f0 | out: lpFindFileData=0x12d5f0*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0x435769e0, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x43bdc500, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x43bdc500, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1af3b6b0 [0058.259] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d600 | out: lpFindFileData=0x12d600*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0x435769e0, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x43bdc500, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x43bdc500, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0058.260] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d600 | out: lpFindFileData=0x12d600*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5f356eb0, ftCreationTime.dwHighDateTime=0x1cbe576, ftLastAccessTime.dwLowDateTime=0x5f356eb0, ftLastAccessTime.dwHighDateTime=0x1cbe576, ftLastWriteTime.dwLowDateTime=0x43bdc500, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x1861, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1 [0058.260] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d600 | out: lpFindFileData=0x12d600*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7fb9f9e0, ftCreationTime.dwHighDateTime=0x1cbe575, ftLastAccessTime.dwLowDateTime=0x7fb9f9e0, ftLastAccessTime.dwHighDateTime=0x1cbe575, ftLastWriteTime.dwLowDateTime=0x437179c0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x30780dd, dwReserved0=0x0, dwReserved1=0x0, cFileName="VisioLR.cab", cAlternateFileName="")) returned 1 [0058.260] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d600 | out: lpFindFileData=0x12d600*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x272b1e70, ftCreationTime.dwHighDateTime=0x1cbe576, ftLastAccessTime.dwLowDateTime=0x272b1e70, ftLastAccessTime.dwHighDateTime=0x1cbe576, ftLastWriteTime.dwLowDateTime=0x435c1d00, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x2ab000, dwReserved0=0x0, dwReserved1=0x0, cFileName="VisioMUI.msi", cAlternateFileName="")) returned 1 [0058.260] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d600 | out: lpFindFileData=0x12d600*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5f0a8e20, ftCreationTime.dwHighDateTime=0x1cbe576, ftLastAccessTime.dwLowDateTime=0x5f0a8e20, ftLastAccessTime.dwHighDateTime=0x1cbe576, ftLastWriteTime.dwLowDateTime=0x4359ac00, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x251f, dwReserved0=0x0, dwReserved1=0x0, cFileName="VisioMUI.xml", cAlternateFileName="")) returned 1 [0058.260] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d600 | out: lpFindFileData=0x12d600*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5f0a8e20, ftCreationTime.dwHighDateTime=0x1cbe576, ftLastAccessTime.dwLowDateTime=0x5f0a8e20, ftLastAccessTime.dwHighDateTime=0x1cbe576, ftLastWriteTime.dwLowDateTime=0x4359ac00, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x251f, dwReserved0=0x0, dwReserved1=0x0, cFileName="VisioMUI.xml", cAlternateFileName="")) returned 0 [0058.260] FindClose (in: hFindFile=0x1af3b6b0 | out: hFindFile=0x1af3b6b0) returned 1 [0058.260] SetErrorMode (uMode=0x0) returned 0x1 [0058.265] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\Decrypt Instructions.txt", nBufferLength=0x105, lpBuffer=0x12d300, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\Decrypt Instructions.txt", lpFilePart=0x0) returned 0x57 [0058.266] SetErrorMode (uMode=0x1) returned 0x0 [0058.266] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\Decrypt Instructions.txt" (normalized: "c:\\msocache\\all users\\{90140000-0054-0409-1000-0000000ff1ce}-c\\decrypt instructions.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1e8 [0058.275] GetFileType (hFile=0x1e8) returned 0x1 [0058.275] SetErrorMode (uMode=0x0) returned 0x1 [0058.275] GetFileType (hFile=0x1e8) returned 0x1 [0058.275] WriteFile (in: hFile=0x1e8, lpBuffer=0x2794570*, nNumberOfBytesToWrite=0x773, lpNumberOfBytesWritten=0x12d868, lpOverlapped=0x0 | out: lpBuffer=0x2794570*, lpNumberOfBytesWritten=0x12d868*=0x773, lpOverlapped=0x0) returned 1 [0058.276] CloseHandle (hObject=0x1e8) returned 1 [0058.277] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C", nBufferLength=0x105, lpBuffer=0x12d4f0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C", lpFilePart=0x0) returned 0x3e [0058.277] SetErrorMode (uMode=0x1) returned 0x0 [0058.277] FindFirstFileW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\*", lpFindFileData=0x12d690 | out: lpFindFileData=0x12d690*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0x435769e0, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x42ce9370, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x42ce9370, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1af3b6b0 [0058.277] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d6a0 | out: lpFindFileData=0x12d6a0*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0x435769e0, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x42ce9370, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x42ce9370, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0058.277] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d6a0 | out: lpFindFileData=0x12d6a0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x42ce9370, ftCreationTime.dwHighDateTime=0x1d5e786, ftLastAccessTime.dwLowDateTime=0x42ce9370, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x42d0f4d0, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x773, dwReserved0=0x0, dwReserved1=0x0, cFileName="Decrypt Instructions.txt", cAlternateFileName="DECRYP~1.TXT")) returned 1 [0058.278] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d6a0 | out: lpFindFileData=0x12d6a0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5f356eb0, ftCreationTime.dwHighDateTime=0x1cbe576, ftLastAccessTime.dwLowDateTime=0x5f356eb0, ftLastAccessTime.dwHighDateTime=0x1cbe576, ftLastWriteTime.dwLowDateTime=0x43bdc500, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x1861, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1 [0058.278] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d6a0 | out: lpFindFileData=0x12d6a0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7fb9f9e0, ftCreationTime.dwHighDateTime=0x1cbe575, ftLastAccessTime.dwLowDateTime=0x7fb9f9e0, ftLastAccessTime.dwHighDateTime=0x1cbe575, ftLastWriteTime.dwLowDateTime=0x437179c0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x30780dd, dwReserved0=0x0, dwReserved1=0x0, cFileName="VisioLR.cab", cAlternateFileName="")) returned 1 [0058.278] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d6a0 | out: lpFindFileData=0x12d6a0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x272b1e70, ftCreationTime.dwHighDateTime=0x1cbe576, ftLastAccessTime.dwLowDateTime=0x272b1e70, ftLastAccessTime.dwHighDateTime=0x1cbe576, ftLastWriteTime.dwLowDateTime=0x435c1d00, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x2ab000, dwReserved0=0x0, dwReserved1=0x0, cFileName="VisioMUI.msi", cAlternateFileName="")) returned 1 [0058.278] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d6a0 | out: lpFindFileData=0x12d6a0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5f0a8e20, ftCreationTime.dwHighDateTime=0x1cbe576, ftLastAccessTime.dwLowDateTime=0x5f0a8e20, ftLastAccessTime.dwHighDateTime=0x1cbe576, ftLastWriteTime.dwLowDateTime=0x4359ac00, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x251f, dwReserved0=0x0, dwReserved1=0x0, cFileName="VisioMUI.xml", cAlternateFileName="")) returned 1 [0058.278] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d6a0 | out: lpFindFileData=0x12d6a0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5f0a8e20, ftCreationTime.dwHighDateTime=0x1cbe576, ftLastAccessTime.dwLowDateTime=0x5f0a8e20, ftLastAccessTime.dwHighDateTime=0x1cbe576, ftLastWriteTime.dwLowDateTime=0x4359ac00, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x251f, dwReserved0=0x0, dwReserved1=0x0, cFileName="VisioMUI.xml", cAlternateFileName="")) returned 0 [0058.278] FindClose (in: hFindFile=0x1af3b6b0 | out: hFindFile=0x1af3b6b0) returned 1 [0058.278] SetErrorMode (uMode=0x0) returned 0x1 [0058.278] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C", nBufferLength=0x105, lpBuffer=0x12d450, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C", lpFilePart=0x0) returned 0x3e [0058.278] SetErrorMode (uMode=0x1) returned 0x0 [0058.279] FindFirstFileW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\*", lpFindFileData=0x12d5f0 | out: lpFindFileData=0x12d5f0*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xf58ee8d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf6e0ec10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf6e0ec10, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1af3b6b0 [0058.325] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d600 | out: lpFindFileData=0x12d600*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xf58ee8d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf6e0ec10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf6e0ec10, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0058.761] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d600 | out: lpFindFileData=0x12d600*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3e02ab00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3e02ab00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf5914a30, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x263400, dwReserved0=0x0, dwReserved1=0x0, cFileName="OneNoteMUI.msi", cAlternateFileName="ONENOT~1.MSI")) returned 1 [0058.761] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d600 | out: lpFindFileData=0x12d600*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf58ed930, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x646, dwReserved0=0x0, dwReserved1=0x0, cFileName="OneNoteMUI.xml", cAlternateFileName="ONENOT~1.XML")) returned 1 [0058.993] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d600 | out: lpFindFileData=0x12d600*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x36db9d00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x36db9d00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf5e95540, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x10a5df8, dwReserved0=0x0, dwReserved1=0x0, cFileName="OnoteLR.cab", cAlternateFileName="")) returned 1 [0058.993] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d600 | out: lpFindFileData=0x12d600*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf6e0d4a0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x7c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1 [0058.993] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d600 | out: lpFindFileData=0x12d600*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf6e0d4a0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x7c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 0 [0058.995] FindClose (in: hFindFile=0x1af3b6b0 | out: hFindFile=0x1af3b6b0) returned 1 [0058.996] SetErrorMode (uMode=0x0) returned 0x1 [0058.997] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\Decrypt Instructions.txt", nBufferLength=0x105, lpBuffer=0x12d300, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\Decrypt Instructions.txt", lpFilePart=0x0) returned 0x57 [0058.997] SetErrorMode (uMode=0x1) returned 0x0 [0058.997] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\Decrypt Instructions.txt" (normalized: "c:\\msocache\\all users\\{90140000-00a1-0409-1000-0000000ff1ce}-c\\decrypt instructions.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1e8 [0059.000] GetFileType (hFile=0x1e8) returned 0x1 [0059.000] SetErrorMode (uMode=0x0) returned 0x1 [0059.000] GetFileType (hFile=0x1e8) returned 0x1 [0059.000] WriteFile (in: hFile=0x1e8, lpBuffer=0x279b160*, nNumberOfBytesToWrite=0x773, lpNumberOfBytesWritten=0x12d868, lpOverlapped=0x0 | out: lpBuffer=0x279b160*, lpNumberOfBytesWritten=0x12d868*=0x773, lpOverlapped=0x0) returned 1 [0059.002] CloseHandle (hObject=0x1e8) returned 1 [0059.002] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C", nBufferLength=0x105, lpBuffer=0x12d4f0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C", lpFilePart=0x0) returned 0x3e [0059.003] SetErrorMode (uMode=0x1) returned 0x0 [0059.003] FindFirstFileW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\*", lpFindFileData=0x12d690 | out: lpFindFileData=0x12d690*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xf58ee8d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x433e7410, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x433e7410, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1af3b6b0 [0059.003] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d6a0 | out: lpFindFileData=0x12d6a0*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xf58ee8d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x433e7410, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x433e7410, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0059.003] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d6a0 | out: lpFindFileData=0x12d6a0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x433e7410, ftCreationTime.dwHighDateTime=0x1d5e786, ftLastAccessTime.dwLowDateTime=0x433e7410, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x433e7410, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x773, dwReserved0=0x0, dwReserved1=0x0, cFileName="Decrypt Instructions.txt", cAlternateFileName="DECRYP~1.TXT")) returned 1 [0059.003] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d6a0 | out: lpFindFileData=0x12d6a0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3e02ab00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3e02ab00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf5914a30, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x263400, dwReserved0=0x0, dwReserved1=0x0, cFileName="OneNoteMUI.msi", cAlternateFileName="ONENOT~1.MSI")) returned 1 [0059.003] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d6a0 | out: lpFindFileData=0x12d6a0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf58ed930, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x646, dwReserved0=0x0, dwReserved1=0x0, cFileName="OneNoteMUI.xml", cAlternateFileName="ONENOT~1.XML")) returned 1 [0059.003] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d6a0 | out: lpFindFileData=0x12d6a0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x36db9d00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x36db9d00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf5e95540, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x10a5df8, dwReserved0=0x0, dwReserved1=0x0, cFileName="OnoteLR.cab", cAlternateFileName="")) returned 1 [0059.003] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d6a0 | out: lpFindFileData=0x12d6a0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf6e0d4a0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x7c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1 [0059.004] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d6a0 | out: lpFindFileData=0x12d6a0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf6e0d4a0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x7c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 0 [0059.004] FindClose (in: hFindFile=0x1af3b6b0 | out: hFindFile=0x1af3b6b0) returned 1 [0059.004] SetErrorMode (uMode=0x0) returned 0x1 [0059.004] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C", nBufferLength=0x105, lpBuffer=0x12d450, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C", lpFilePart=0x0) returned 0x3e [0059.004] SetErrorMode (uMode=0x1) returned 0x0 [0059.004] FindFirstFileW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\*", lpFindFileData=0x12d5f0 | out: lpFindFileData=0x12d5f0*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xa5b30b20, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0xa5bc90a0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa5bc90a0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1af3b6b0 [0059.108] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d600 | out: lpFindFileData=0x12d600*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xa5b30b20, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0xa5bc90a0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa5bc90a0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0059.108] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d600 | out: lpFindFileData=0x12d600*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x308ae9f0, ftCreationTime.dwHighDateTime=0x1cbe56c, ftLastAccessTime.dwLowDateTime=0x308ae9f0, ftLastAccessTime.dwHighDateTime=0x1cbe56c, ftLastWriteTime.dwLowDateTime=0xa5b55ce0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x265400, dwReserved0=0x0, dwReserved1=0x0, cFileName="ProjectMUI.msi", cAlternateFileName="PROJEC~1.MSI")) returned 1 [0059.108] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d600 | out: lpFindFileData=0x12d600*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x30a2b7b0, ftCreationTime.dwHighDateTime=0x1cbe56c, ftLastAccessTime.dwLowDateTime=0x30a2b7b0, ftLastAccessTime.dwHighDateTime=0x1cbe56c, ftLastWriteTime.dwLowDateTime=0xa5b2ebe0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x5ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="ProjectMUI.xml", cAlternateFileName="PROJEC~1.XML")) returned 1 [0059.109] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d600 | out: lpFindFileData=0x12d600*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x30306de0, ftCreationTime.dwHighDateTime=0x1cbe56c, ftLastAccessTime.dwLowDateTime=0x30306de0, ftLastAccessTime.dwHighDateTime=0x1cbe56c, ftLastWriteTime.dwLowDateTime=0xa5b7cde0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x7e1dcd, dwReserved0=0x0, dwReserved1=0x0, cFileName="ProjLR.cab", cAlternateFileName="")) returned 1 [0059.109] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d600 | out: lpFindFileData=0x12d600*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x309dfcc0, ftCreationTime.dwHighDateTime=0x1cbe56c, ftLastAccessTime.dwLowDateTime=0x309dfcc0, ftLastAccessTime.dwHighDateTime=0x1cbe56c, ftLastWriteTime.dwLowDateTime=0xa5bc88d0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x750, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1 [0059.109] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d600 | out: lpFindFileData=0x12d600*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x309dfcc0, ftCreationTime.dwHighDateTime=0x1cbe56c, ftLastAccessTime.dwLowDateTime=0x309dfcc0, ftLastAccessTime.dwHighDateTime=0x1cbe56c, ftLastWriteTime.dwLowDateTime=0xa5bc88d0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x750, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 0 [0059.109] FindClose (in: hFindFile=0x1af3b6b0 | out: hFindFile=0x1af3b6b0) returned 1 [0059.110] SetErrorMode (uMode=0x0) returned 0x1 [0059.111] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\Decrypt Instructions.txt", nBufferLength=0x105, lpBuffer=0x12d300, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\Decrypt Instructions.txt", lpFilePart=0x0) returned 0x57 [0059.111] SetErrorMode (uMode=0x1) returned 0x0 [0059.111] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\Decrypt Instructions.txt" (normalized: "c:\\msocache\\all users\\{90140000-00b4-0409-1000-0000000ff1ce}-c\\decrypt instructions.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1e8 [0059.113] GetFileType (hFile=0x1e8) returned 0x1 [0059.113] SetErrorMode (uMode=0x0) returned 0x1 [0059.113] GetFileType (hFile=0x1e8) returned 0x1 [0059.113] WriteFile (in: hFile=0x1e8, lpBuffer=0x27a1db8*, nNumberOfBytesToWrite=0x773, lpNumberOfBytesWritten=0x12d868, lpOverlapped=0x0 | out: lpBuffer=0x27a1db8*, lpNumberOfBytesWritten=0x12d868*=0x773, lpOverlapped=0x0) returned 1 [0059.115] CloseHandle (hObject=0x1e8) returned 1 [0059.115] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C", nBufferLength=0x105, lpBuffer=0x12d4f0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C", lpFilePart=0x0) returned 0x3e [0059.115] SetErrorMode (uMode=0x1) returned 0x0 [0059.115] FindFirstFileW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\*", lpFindFileData=0x12d690 | out: lpFindFileData=0x12d690*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xa5b30b20, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0x434f1db0, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x434f1db0, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1af3b6b0 [0059.116] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d6a0 | out: lpFindFileData=0x12d6a0*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xa5b30b20, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0x434f1db0, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x434f1db0, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0059.116] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d6a0 | out: lpFindFileData=0x12d6a0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x434f1db0, ftCreationTime.dwHighDateTime=0x1d5e786, ftLastAccessTime.dwLowDateTime=0x434f1db0, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x434f1db0, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x773, dwReserved0=0x0, dwReserved1=0x0, cFileName="Decrypt Instructions.txt", cAlternateFileName="DECRYP~1.TXT")) returned 1 [0059.116] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d6a0 | out: lpFindFileData=0x12d6a0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x308ae9f0, ftCreationTime.dwHighDateTime=0x1cbe56c, ftLastAccessTime.dwLowDateTime=0x308ae9f0, ftLastAccessTime.dwHighDateTime=0x1cbe56c, ftLastWriteTime.dwLowDateTime=0xa5b55ce0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x265400, dwReserved0=0x0, dwReserved1=0x0, cFileName="ProjectMUI.msi", cAlternateFileName="PROJEC~1.MSI")) returned 1 [0059.116] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d6a0 | out: lpFindFileData=0x12d6a0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x30a2b7b0, ftCreationTime.dwHighDateTime=0x1cbe56c, ftLastAccessTime.dwLowDateTime=0x30a2b7b0, ftLastAccessTime.dwHighDateTime=0x1cbe56c, ftLastWriteTime.dwLowDateTime=0xa5b2ebe0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x5ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="ProjectMUI.xml", cAlternateFileName="PROJEC~1.XML")) returned 1 [0059.116] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d6a0 | out: lpFindFileData=0x12d6a0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x30306de0, ftCreationTime.dwHighDateTime=0x1cbe56c, ftLastAccessTime.dwLowDateTime=0x30306de0, ftLastAccessTime.dwHighDateTime=0x1cbe56c, ftLastWriteTime.dwLowDateTime=0xa5b7cde0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x7e1dcd, dwReserved0=0x0, dwReserved1=0x0, cFileName="ProjLR.cab", cAlternateFileName="")) returned 1 [0059.116] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d6a0 | out: lpFindFileData=0x12d6a0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x309dfcc0, ftCreationTime.dwHighDateTime=0x1cbe56c, ftLastAccessTime.dwLowDateTime=0x309dfcc0, ftLastAccessTime.dwHighDateTime=0x1cbe56c, ftLastWriteTime.dwLowDateTime=0xa5bc88d0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x750, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1 [0059.116] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d6a0 | out: lpFindFileData=0x12d6a0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x309dfcc0, ftCreationTime.dwHighDateTime=0x1cbe56c, ftLastAccessTime.dwLowDateTime=0x309dfcc0, ftLastAccessTime.dwHighDateTime=0x1cbe56c, ftLastWriteTime.dwLowDateTime=0xa5bc88d0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x750, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 0 [0059.116] FindClose (in: hFindFile=0x1af3b6b0 | out: hFindFile=0x1af3b6b0) returned 1 [0059.116] SetErrorMode (uMode=0x0) returned 0x1 [0059.116] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C", nBufferLength=0x105, lpBuffer=0x12d450, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C", lpFilePart=0x0) returned 0x3e [0059.117] SetErrorMode (uMode=0x1) returned 0x0 [0059.117] FindFirstFileW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\*", lpFindFileData=0x12d5f0 | out: lpFindFileData=0x12d5f0*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xee38cbf0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xee803530, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xee803530, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1af3b6b0 [0059.136] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d600 | out: lpFindFileData=0x12d600*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xee38cbf0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xee803530, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xee803530, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0059.136] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d600 | out: lpFindFileData=0x12d600*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbd907a00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbd907a00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xee4bb7b0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x3e7e1f, dwReserved0=0x0, dwReserved1=0x0, cFileName="GrooveLR.cab", cAlternateFileName="")) returned 1 [0059.136] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d600 | out: lpFindFileData=0x12d600*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbd907a00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbd907a00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xee3b15e0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x264400, dwReserved0=0x0, dwReserved1=0x0, cFileName="GrooveMUI.msi", cAlternateFileName="GROOVE~1.MSI")) returned 1 [0059.136] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d600 | out: lpFindFileData=0x12d600*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbec1a700, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbec1a700, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xee38cbf0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x391, dwReserved0=0x0, dwReserved1=0x0, cFileName="GrooveMUI.xml", cAlternateFileName="GROOVE~1.XML")) returned 1 [0059.136] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d600 | out: lpFindFileData=0x12d600*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbec1a700, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbec1a700, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xee803530, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x5ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1 [0059.136] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d600 | out: lpFindFileData=0x12d600*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbec1a700, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbec1a700, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xee803530, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x5ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 0 [0059.137] FindClose (in: hFindFile=0x1af3b6b0 | out: hFindFile=0x1af3b6b0) returned 1 [0059.138] SetErrorMode (uMode=0x0) returned 0x1 [0059.139] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\Decrypt Instructions.txt", nBufferLength=0x105, lpBuffer=0x12d300, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\Decrypt Instructions.txt", lpFilePart=0x0) returned 0x57 [0059.139] SetErrorMode (uMode=0x1) returned 0x0 [0059.139] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\Decrypt Instructions.txt" (normalized: "c:\\msocache\\all users\\{90140000-00ba-0409-1000-0000000ff1ce}-c\\decrypt instructions.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1e8 [0059.141] GetFileType (hFile=0x1e8) returned 0x1 [0059.141] SetErrorMode (uMode=0x0) returned 0x1 [0059.141] GetFileType (hFile=0x1e8) returned 0x1 [0059.141] WriteFile (in: hFile=0x1e8, lpBuffer=0x27a8a18*, nNumberOfBytesToWrite=0x773, lpNumberOfBytesWritten=0x12d868, lpOverlapped=0x0 | out: lpBuffer=0x27a8a18*, lpNumberOfBytesWritten=0x12d868*=0x773, lpOverlapped=0x0) returned 1 [0059.142] CloseHandle (hObject=0x1e8) returned 1 [0059.143] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C", nBufferLength=0x105, lpBuffer=0x12d4f0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C", lpFilePart=0x0) returned 0x3e [0059.143] SetErrorMode (uMode=0x1) returned 0x0 [0059.143] FindFirstFileW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\*", lpFindFileData=0x12d690 | out: lpFindFileData=0x12d690*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xee38cbf0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x4353e070, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x4353e070, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1af3b6b0 [0059.143] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d6a0 | out: lpFindFileData=0x12d6a0*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xee38cbf0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x4353e070, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x4353e070, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0059.143] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d6a0 | out: lpFindFileData=0x12d6a0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4353e070, ftCreationTime.dwHighDateTime=0x1d5e786, ftLastAccessTime.dwLowDateTime=0x4353e070, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x4353e070, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x773, dwReserved0=0x0, dwReserved1=0x0, cFileName="Decrypt Instructions.txt", cAlternateFileName="DECRYP~1.TXT")) returned 1 [0059.143] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d6a0 | out: lpFindFileData=0x12d6a0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbd907a00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbd907a00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xee4bb7b0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x3e7e1f, dwReserved0=0x0, dwReserved1=0x0, cFileName="GrooveLR.cab", cAlternateFileName="")) returned 1 [0059.143] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d6a0 | out: lpFindFileData=0x12d6a0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbd907a00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbd907a00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xee3b15e0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x264400, dwReserved0=0x0, dwReserved1=0x0, cFileName="GrooveMUI.msi", cAlternateFileName="GROOVE~1.MSI")) returned 1 [0059.144] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d6a0 | out: lpFindFileData=0x12d6a0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbec1a700, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbec1a700, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xee38cbf0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x391, dwReserved0=0x0, dwReserved1=0x0, cFileName="GrooveMUI.xml", cAlternateFileName="GROOVE~1.XML")) returned 1 [0059.144] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d6a0 | out: lpFindFileData=0x12d6a0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbec1a700, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbec1a700, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xee803530, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x5ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1 [0059.144] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d6a0 | out: lpFindFileData=0x12d6a0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbec1a700, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbec1a700, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xee803530, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x5ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 0 [0059.144] FindClose (in: hFindFile=0x1af3b6b0 | out: hFindFile=0x1af3b6b0) returned 1 [0059.144] SetErrorMode (uMode=0x0) returned 0x1 [0059.144] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C", nBufferLength=0x105, lpBuffer=0x12d450, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C", lpFilePart=0x0) returned 0x3e [0059.144] SetErrorMode (uMode=0x1) returned 0x0 [0059.144] FindFirstFileW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\*", lpFindFileData=0x12d5f0 | out: lpFindFileData=0x12d5f0*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xe7b68970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xe8729610, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe8729610, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1af3b6b0 [0059.174] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d600 | out: lpFindFileData=0x12d600*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xe7b68970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xe8729610, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe8729610, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0059.175] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d600 | out: lpFindFileData=0x12d600*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe8691090, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xe8691090, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe8691090, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 1 [0059.175] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d600 | out: lpFindFileData=0x12d600*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x11e8ef00, ftCreationTime.dwHighDateTime=0x1cacdea, ftLastAccessTime.dwLowDateTime=0x11e8ef00, ftLastAccessTime.dwHighDateTime=0x1cacdea, ftLastWriteTime.dwLowDateTime=0xe84c60d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x91975, dwReserved0=0x0, dwReserved1=0x0, cFileName="branding.xml", cAlternateFileName="")) returned 1 [0059.175] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d600 | out: lpFindFileData=0x12d600*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa26c9d00, ftCreationTime.dwHighDateTime=0x1cac9ae, ftLastAccessTime.dwLowDateTime=0xa26c9d00, ftLastAccessTime.dwHighDateTime=0x1cac9ae, ftLastWriteTime.dwLowDateTime=0xe85142d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xccb88, dwReserved0=0x0, dwReserved1=0x0, cFileName="DW20.EXE", cAlternateFileName="")) returned 1 [0059.175] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d600 | out: lpFindFileData=0x12d600*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xabf60500, ftCreationTime.dwHighDateTime=0x1cac9ae, ftLastAccessTime.dwLowDateTime=0xabf60500, ftLastAccessTime.dwHighDateTime=0x1cac9ae, ftLastWriteTime.dwLowDateTime=0xe85ab8b0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x80760, dwReserved0=0x0, dwReserved1=0x0, cFileName="dwdcw20.dll", cAlternateFileName="")) returned 1 [0059.175] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d600 | out: lpFindFileData=0x12d600*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xabf60500, ftCreationTime.dwHighDateTime=0x1cac9ae, ftLastAccessTime.dwLowDateTime=0xabf60500, ftLastAccessTime.dwHighDateTime=0x1cac9ae, ftLastWriteTime.dwLowDateTime=0xe85f73a0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x7eda0, dwReserved0=0x0, dwReserved1=0x0, cFileName="dwtrig20.exe", cAlternateFileName="")) returned 1 [0059.175] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d600 | out: lpFindFileData=0x12d600*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8d646800, ftCreationTime.dwHighDateTime=0x1cacc53, ftLastAccessTime.dwLowDateTime=0x8d646800, ftLastAccessTime.dwHighDateTime=0x1cacc53, ftLastWriteTime.dwLowDateTime=0xe8728670, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x741, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.VC90.CRT.manifest", cAlternateFileName="MICROS~1.MAN")) returned 1 [0059.175] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d600 | out: lpFindFileData=0x12d600*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8c333b00, ftCreationTime.dwHighDateTime=0x1cacc53, ftLastAccessTime.dwLowDateTime=0x8c333b00, ftLastAccessTime.dwHighDateTime=0x1cacc53, ftLastWriteTime.dwLowDateTime=0xe86b5a80, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xa0200, dwReserved0=0x0, dwReserved1=0x0, cFileName="msvcr90.dll", cAlternateFileName="")) returned 1 [0059.175] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d600 | out: lpFindFileData=0x12d600*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3ba05100, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3ba05100, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xe7e3b3f0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xd79282, dwReserved0=0x0, dwReserved1=0x0, cFileName="OfficeLR.cab", cAlternateFileName="")) returned 1 [0059.175] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d600 | out: lpFindFileData=0x12d600*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3cd17e00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3cd17e00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xe7c4ba40, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x387e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="OfficeMUI.msi", cAlternateFileName="OFFICE~2.MSI")) returned 1 [0059.175] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d600 | out: lpFindFileData=0x12d600*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xe7c27050, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x15b5, dwReserved0=0x0, dwReserved1=0x0, cFileName="OfficeMUI.xml", cAlternateFileName="OFFICE~2.XML")) returned 1 [0059.175] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d600 | out: lpFindFileData=0x12d600*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3f33d800, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3f33d800, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xe7b68970, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xd4200, dwReserved0=0x0, dwReserved1=0x0, cFileName="OfficeMUISet.msi", cAlternateFileName="OFFICE~1.MSI")) returned 1 [0059.175] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d600 | out: lpFindFileData=0x12d600*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4529b900, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x4529b900, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xe7b68970, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x333, dwReserved0=0x0, dwReserved1=0x0, cFileName="OfficeMUISet.xml", cAlternateFileName="OFFICE~1.XML")) returned 1 [0059.176] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d600 | out: lpFindFileData=0x12d600*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xc8b16200, ftCreationTime.dwHighDateTime=0x1cac190, ftLastAccessTime.dwLowDateTime=0xc8b16200, ftLastAccessTime.dwHighDateTime=0x1cac190, ftLastWriteTime.dwLowDateTime=0xe8728670, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x2ed80, dwReserved0=0x0, dwReserved1=0x0, cFileName="osetupui.dll", cAlternateFileName="")) returned 1 [0059.176] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d600 | out: lpFindFileData=0x12d600*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x77cbb000, ftCreationTime.dwHighDateTime=0x1cac57a, ftLastAccessTime.dwLowDateTime=0x77cbb000, ftLastAccessTime.dwHighDateTime=0x1cac57a, ftLastWriteTime.dwLowDateTime=0xe8728670, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x6a3b, dwReserved0=0x0, dwReserved1=0x0, cFileName="pss10r.chm", cAlternateFileName="")) returned 1 [0059.176] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d600 | out: lpFindFileData=0x12d600*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7cab9f00, ftCreationTime.dwHighDateTime=0x1cac8ad, ftLastAccessTime.dwLowDateTime=0x7cab9f00, ftLastAccessTime.dwHighDateTime=0x1cac8ad, ftLastWriteTime.dwLowDateTime=0xe8728670, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x10676, dwReserved0=0x0, dwReserved1=0x0, cFileName="setup.chm", cAlternateFileName="")) returned 1 [0059.176] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d600 | out: lpFindFileData=0x12d600*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x42c75f00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x42c75f00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xe8728670, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x2488, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1 [0059.176] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d600 | out: lpFindFileData=0x12d600*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x131a1c00, ftCreationTime.dwHighDateTime=0x1cacdea, ftLastAccessTime.dwLowDateTime=0x131a1c00, ftLastAccessTime.dwHighDateTime=0x1cacdea, ftLastWriteTime.dwLowDateTime=0xe84c60d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ShellUI.MST", cAlternateFileName="")) returned 1 [0059.176] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d600 | out: lpFindFileData=0x12d600*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x131a1c00, ftCreationTime.dwHighDateTime=0x1cacdea, ftLastAccessTime.dwLowDateTime=0x131a1c00, ftLastAccessTime.dwHighDateTime=0x1cacdea, ftLastWriteTime.dwLowDateTime=0xe84c60d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ShellUI.MST", cAlternateFileName="")) returned 0 [0059.176] FindClose (in: hFindFile=0x1af3b6b0 | out: hFindFile=0x1af3b6b0) returned 1 [0059.177] SetErrorMode (uMode=0x0) returned 0x1 [0059.181] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\Decrypt Instructions.txt", nBufferLength=0x105, lpBuffer=0x12d300, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\Decrypt Instructions.txt", lpFilePart=0x0) returned 0x57 [0059.181] SetErrorMode (uMode=0x1) returned 0x0 [0059.181] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\Decrypt Instructions.txt" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\decrypt instructions.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1e8 [0059.194] GetFileType (hFile=0x1e8) returned 0x1 [0059.195] SetErrorMode (uMode=0x0) returned 0x1 [0059.195] GetFileType (hFile=0x1e8) returned 0x1 [0059.195] WriteFile (in: hFile=0x1e8, lpBuffer=0x27b09e0*, nNumberOfBytesToWrite=0x773, lpNumberOfBytesWritten=0x12d868, lpOverlapped=0x0 | out: lpBuffer=0x27b09e0*, lpNumberOfBytesWritten=0x12d868*=0x773, lpOverlapped=0x0) returned 1 [0059.196] CloseHandle (hObject=0x1e8) returned 1 [0059.196] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C", nBufferLength=0x105, lpBuffer=0x12d4f0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C", lpFilePart=0x0) returned 0x3e [0059.201] SetErrorMode (uMode=0x1) returned 0x0 [0059.201] FindFirstFileW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\*", lpFindFileData=0x12d690 | out: lpFindFileData=0x12d690*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xe7b68970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x435b0490, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x435b0490, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1af3b6b0 [0059.202] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d6a0 | out: lpFindFileData=0x12d6a0*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xe7b68970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x435b0490, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x435b0490, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0059.202] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d6a0 | out: lpFindFileData=0x12d6a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe8691090, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xe8691090, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe8691090, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 1 [0059.202] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d6a0 | out: lpFindFileData=0x12d6a0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x11e8ef00, ftCreationTime.dwHighDateTime=0x1cacdea, ftLastAccessTime.dwLowDateTime=0x11e8ef00, ftLastAccessTime.dwHighDateTime=0x1cacdea, ftLastWriteTime.dwLowDateTime=0xe84c60d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x91975, dwReserved0=0x0, dwReserved1=0x0, cFileName="branding.xml", cAlternateFileName="")) returned 1 [0059.202] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d6a0 | out: lpFindFileData=0x12d6a0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x435b0490, ftCreationTime.dwHighDateTime=0x1d5e786, ftLastAccessTime.dwLowDateTime=0x435b0490, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x435b0490, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x773, dwReserved0=0x0, dwReserved1=0x0, cFileName="Decrypt Instructions.txt", cAlternateFileName="DECRYP~1.TXT")) returned 1 [0059.202] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d6a0 | out: lpFindFileData=0x12d6a0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa26c9d00, ftCreationTime.dwHighDateTime=0x1cac9ae, ftLastAccessTime.dwLowDateTime=0xa26c9d00, ftLastAccessTime.dwHighDateTime=0x1cac9ae, ftLastWriteTime.dwLowDateTime=0xe85142d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xccb88, dwReserved0=0x0, dwReserved1=0x0, cFileName="DW20.EXE", cAlternateFileName="")) returned 1 [0059.202] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d6a0 | out: lpFindFileData=0x12d6a0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xabf60500, ftCreationTime.dwHighDateTime=0x1cac9ae, ftLastAccessTime.dwLowDateTime=0xabf60500, ftLastAccessTime.dwHighDateTime=0x1cac9ae, ftLastWriteTime.dwLowDateTime=0xe85ab8b0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x80760, dwReserved0=0x0, dwReserved1=0x0, cFileName="dwdcw20.dll", cAlternateFileName="")) returned 1 [0059.202] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d6a0 | out: lpFindFileData=0x12d6a0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xabf60500, ftCreationTime.dwHighDateTime=0x1cac9ae, ftLastAccessTime.dwLowDateTime=0xabf60500, ftLastAccessTime.dwHighDateTime=0x1cac9ae, ftLastWriteTime.dwLowDateTime=0xe85f73a0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x7eda0, dwReserved0=0x0, dwReserved1=0x0, cFileName="dwtrig20.exe", cAlternateFileName="")) returned 1 [0059.202] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d6a0 | out: lpFindFileData=0x12d6a0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8d646800, ftCreationTime.dwHighDateTime=0x1cacc53, ftLastAccessTime.dwLowDateTime=0x8d646800, ftLastAccessTime.dwHighDateTime=0x1cacc53, ftLastWriteTime.dwLowDateTime=0xe8728670, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x741, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.VC90.CRT.manifest", cAlternateFileName="MICROS~1.MAN")) returned 1 [0059.202] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d6a0 | out: lpFindFileData=0x12d6a0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8c333b00, ftCreationTime.dwHighDateTime=0x1cacc53, ftLastAccessTime.dwLowDateTime=0x8c333b00, ftLastAccessTime.dwHighDateTime=0x1cacc53, ftLastWriteTime.dwLowDateTime=0xe86b5a80, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xa0200, dwReserved0=0x0, dwReserved1=0x0, cFileName="msvcr90.dll", cAlternateFileName="")) returned 1 [0059.202] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d6a0 | out: lpFindFileData=0x12d6a0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3ba05100, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3ba05100, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xe7e3b3f0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xd79282, dwReserved0=0x0, dwReserved1=0x0, cFileName="OfficeLR.cab", cAlternateFileName="")) returned 1 [0059.202] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d6a0 | out: lpFindFileData=0x12d6a0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3cd17e00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3cd17e00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xe7c4ba40, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x387e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="OfficeMUI.msi", cAlternateFileName="OFFICE~2.MSI")) returned 1 [0059.203] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d6a0 | out: lpFindFileData=0x12d6a0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xe7c27050, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x15b5, dwReserved0=0x0, dwReserved1=0x0, cFileName="OfficeMUI.xml", cAlternateFileName="OFFICE~2.XML")) returned 1 [0059.203] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d6a0 | out: lpFindFileData=0x12d6a0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3f33d800, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3f33d800, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xe7b68970, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xd4200, dwReserved0=0x0, dwReserved1=0x0, cFileName="OfficeMUISet.msi", cAlternateFileName="OFFICE~1.MSI")) returned 1 [0059.203] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d6a0 | out: lpFindFileData=0x12d6a0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4529b900, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x4529b900, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xe7b68970, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x333, dwReserved0=0x0, dwReserved1=0x0, cFileName="OfficeMUISet.xml", cAlternateFileName="OFFICE~1.XML")) returned 1 [0059.203] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d6a0 | out: lpFindFileData=0x12d6a0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xc8b16200, ftCreationTime.dwHighDateTime=0x1cac190, ftLastAccessTime.dwLowDateTime=0xc8b16200, ftLastAccessTime.dwHighDateTime=0x1cac190, ftLastWriteTime.dwLowDateTime=0xe8728670, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x2ed80, dwReserved0=0x0, dwReserved1=0x0, cFileName="osetupui.dll", cAlternateFileName="")) returned 1 [0059.203] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d6a0 | out: lpFindFileData=0x12d6a0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x77cbb000, ftCreationTime.dwHighDateTime=0x1cac57a, ftLastAccessTime.dwLowDateTime=0x77cbb000, ftLastAccessTime.dwHighDateTime=0x1cac57a, ftLastWriteTime.dwLowDateTime=0xe8728670, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x6a3b, dwReserved0=0x0, dwReserved1=0x0, cFileName="pss10r.chm", cAlternateFileName="")) returned 1 [0059.203] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d6a0 | out: lpFindFileData=0x12d6a0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7cab9f00, ftCreationTime.dwHighDateTime=0x1cac8ad, ftLastAccessTime.dwLowDateTime=0x7cab9f00, ftLastAccessTime.dwHighDateTime=0x1cac8ad, ftLastWriteTime.dwLowDateTime=0xe8728670, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x10676, dwReserved0=0x0, dwReserved1=0x0, cFileName="setup.chm", cAlternateFileName="")) returned 1 [0059.203] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d6a0 | out: lpFindFileData=0x12d6a0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x42c75f00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x42c75f00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xe8728670, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x2488, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1 [0059.203] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d6a0 | out: lpFindFileData=0x12d6a0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x131a1c00, ftCreationTime.dwHighDateTime=0x1cacdea, ftLastAccessTime.dwLowDateTime=0x131a1c00, ftLastAccessTime.dwHighDateTime=0x1cacdea, ftLastWriteTime.dwLowDateTime=0xe84c60d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ShellUI.MST", cAlternateFileName="")) returned 1 [0059.203] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d6a0 | out: lpFindFileData=0x12d6a0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x131a1c00, ftCreationTime.dwHighDateTime=0x1cacdea, ftLastAccessTime.dwLowDateTime=0x131a1c00, ftLastAccessTime.dwHighDateTime=0x1cacdea, ftLastWriteTime.dwLowDateTime=0xe84c60d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ShellUI.MST", cAlternateFileName="")) returned 0 [0059.203] FindClose (in: hFindFile=0x1af3b6b0 | out: hFindFile=0x1af3b6b0) returned 1 [0059.203] SetErrorMode (uMode=0x0) returned 0x1 [0059.204] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\1033", nBufferLength=0x105, lpBuffer=0x12d3f0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\1033", lpFilePart=0x0) returned 0x43 [0059.204] SetErrorMode (uMode=0x1) returned 0x0 [0059.204] FindFirstFileW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\1033\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe8691090, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xe8691090, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe8691090, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1af3b6b0 [0059.234] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5a0 | out: lpFindFileData=0x12d5a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe8691090, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xe8691090, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe8691090, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0059.234] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5a0 | out: lpFindFileData=0x12d5a0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6a35700, ftCreationTime.dwHighDateTime=0x1cac9d7, ftLastAccessTime.dwLowDateTime=0x6a35700, ftLastAccessTime.dwHighDateTime=0x1cac9d7, ftLastWriteTime.dwLowDateTime=0xe8691090, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x1a588, dwReserved0=0x0, dwReserved1=0x0, cFileName="dwintl20.dll", cAlternateFileName="")) returned 1 [0059.234] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5a0 | out: lpFindFileData=0x12d5a0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6a35700, ftCreationTime.dwHighDateTime=0x1cac9d7, ftLastAccessTime.dwLowDateTime=0x6a35700, ftLastAccessTime.dwHighDateTime=0x1cac9d7, ftLastWriteTime.dwLowDateTime=0xe8691090, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x1a588, dwReserved0=0x0, dwReserved1=0x0, cFileName="dwintl20.dll", cAlternateFileName="")) returned 0 [0059.234] FindClose (in: hFindFile=0x1af3b6b0 | out: hFindFile=0x1af3b6b0) returned 1 [0059.235] SetErrorMode (uMode=0x0) returned 0x1 [0059.236] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\1033\\Decrypt Instructions.txt", nBufferLength=0x105, lpBuffer=0x12d2a0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\1033\\Decrypt Instructions.txt", lpFilePart=0x0) returned 0x5c [0059.236] SetErrorMode (uMode=0x1) returned 0x0 [0059.236] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\1033\\Decrypt Instructions.txt" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\1033\\decrypt instructions.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1e8 [0059.237] GetFileType (hFile=0x1e8) returned 0x1 [0059.237] SetErrorMode (uMode=0x0) returned 0x1 [0059.237] GetFileType (hFile=0x1e8) returned 0x1 [0059.237] WriteFile (in: hFile=0x1e8, lpBuffer=0x27b7938*, nNumberOfBytesToWrite=0x773, lpNumberOfBytesWritten=0x12d808, lpOverlapped=0x0 | out: lpBuffer=0x27b7938*, lpNumberOfBytesWritten=0x12d808*=0x773, lpOverlapped=0x0) returned 1 [0059.238] CloseHandle (hObject=0x1e8) returned 1 [0059.239] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\1033", nBufferLength=0x105, lpBuffer=0x12d490, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\1033", lpFilePart=0x0) returned 0x43 [0059.239] SetErrorMode (uMode=0x1) returned 0x0 [0059.239] FindFirstFileW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\1033\\*", lpFindFileData=0x12d630 | out: lpFindFileData=0x12d630*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe8691090, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x436228b0, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x436228b0, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1af3b6b0 [0059.239] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d640 | out: lpFindFileData=0x12d640*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe8691090, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x436228b0, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x436228b0, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0059.239] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d640 | out: lpFindFileData=0x12d640*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x436228b0, ftCreationTime.dwHighDateTime=0x1d5e786, ftLastAccessTime.dwLowDateTime=0x436228b0, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x436228b0, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x773, dwReserved0=0x0, dwReserved1=0x0, cFileName="Decrypt Instructions.txt", cAlternateFileName="DECRYP~1.TXT")) returned 1 [0059.239] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d640 | out: lpFindFileData=0x12d640*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6a35700, ftCreationTime.dwHighDateTime=0x1cac9d7, ftLastAccessTime.dwLowDateTime=0x6a35700, ftLastAccessTime.dwHighDateTime=0x1cac9d7, ftLastWriteTime.dwLowDateTime=0xe8691090, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x1a588, dwReserved0=0x0, dwReserved1=0x0, cFileName="dwintl20.dll", cAlternateFileName="")) returned 1 [0059.239] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d640 | out: lpFindFileData=0x12d640*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6a35700, ftCreationTime.dwHighDateTime=0x1cac9d7, ftLastAccessTime.dwLowDateTime=0x6a35700, ftLastAccessTime.dwHighDateTime=0x1cac9d7, ftLastWriteTime.dwLowDateTime=0xe8691090, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x1a588, dwReserved0=0x0, dwReserved1=0x0, cFileName="dwintl20.dll", cAlternateFileName="")) returned 0 [0059.240] FindClose (in: hFindFile=0x1af3b6b0 | out: hFindFile=0x1af3b6b0) returned 1 [0059.240] SetErrorMode (uMode=0x0) returned 0x1 [0059.240] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C", nBufferLength=0x105, lpBuffer=0x12d450, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C", lpFilePart=0x0) returned 0x3e [0059.240] SetErrorMode (uMode=0x1) returned 0x0 [0059.240] FindFirstFileW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\*", lpFindFileData=0x12d5f0 | out: lpFindFileData=0x12d5f0*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xfa13c510, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfc112b50, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfc112b50, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1af3b6b0 [0059.489] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d600 | out: lpFindFileData=0x12d600*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xfa13c510, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfc112b50, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfc112b50, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0059.489] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d600 | out: lpFindFileData=0x12d600*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfa2b92d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfc0c6890, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfc0c6890, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Access.en-us", cAlternateFileName="ACCESS~1.EN-")) returned 1 [0059.489] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d600 | out: lpFindFileData=0x12d600*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3f33d800, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3f33d800, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfa160f00, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xd4200, dwReserved0=0x0, dwReserved1=0x0, cFileName="AccessMUISet.msi", cAlternateFileName="ACCESS~1.MSI")) returned 1 [0059.489] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d600 | out: lpFindFileData=0x12d600*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4529b900, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x4529b900, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfa13c510, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x333, dwReserved0=0x0, dwReserved1=0x0, cFileName="AccessMUISet.xml", cAlternateFileName="ACCESS~1.XML")) returned 1 [0059.489] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d600 | out: lpFindFileData=0x12d600*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc111bb0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xa40, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1 [0059.490] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d600 | out: lpFindFileData=0x12d600*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc111bb0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xa40, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 0 [0059.490] FindClose (in: hFindFile=0x1af3b6b0 | out: hFindFile=0x1af3b6b0) returned 1 [0059.490] SetErrorMode (uMode=0x0) returned 0x1 [0059.491] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Decrypt Instructions.txt", nBufferLength=0x105, lpBuffer=0x12d300, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Decrypt Instructions.txt", lpFilePart=0x0) returned 0x57 [0059.491] SetErrorMode (uMode=0x1) returned 0x0 [0059.491] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Decrypt Instructions.txt" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\decrypt instructions.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1e8 [0059.493] GetFileType (hFile=0x1e8) returned 0x1 [0059.493] SetErrorMode (uMode=0x0) returned 0x1 [0059.493] GetFileType (hFile=0x1e8) returned 0x1 [0059.493] WriteFile (in: hFile=0x1e8, lpBuffer=0x27be3d0*, nNumberOfBytesToWrite=0x773, lpNumberOfBytesWritten=0x12d868, lpOverlapped=0x0 | out: lpBuffer=0x27be3d0*, lpNumberOfBytesWritten=0x12d868*=0x773, lpOverlapped=0x0) returned 1 [0059.494] CloseHandle (hObject=0x1e8) returned 1 [0059.494] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C", nBufferLength=0x105, lpBuffer=0x12d4f0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C", lpFilePart=0x0) returned 0x3e [0059.494] SetErrorMode (uMode=0x1) returned 0x0 [0059.495] FindFirstFileW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\*", lpFindFileData=0x12d690 | out: lpFindFileData=0x12d690*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xfa13c510, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x43883eb0, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x43883eb0, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1af3b6b0 [0059.495] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d6a0 | out: lpFindFileData=0x12d6a0*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xfa13c510, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x43883eb0, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x43883eb0, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0059.495] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d6a0 | out: lpFindFileData=0x12d6a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfa2b92d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfc0c6890, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfc0c6890, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Access.en-us", cAlternateFileName="ACCESS~1.EN-")) returned 1 [0059.495] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d6a0 | out: lpFindFileData=0x12d6a0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3f33d800, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3f33d800, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfa160f00, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xd4200, dwReserved0=0x0, dwReserved1=0x0, cFileName="AccessMUISet.msi", cAlternateFileName="ACCESS~1.MSI")) returned 1 [0059.495] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d6a0 | out: lpFindFileData=0x12d6a0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4529b900, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x4529b900, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfa13c510, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x333, dwReserved0=0x0, dwReserved1=0x0, cFileName="AccessMUISet.xml", cAlternateFileName="ACCESS~1.XML")) returned 1 [0059.495] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d6a0 | out: lpFindFileData=0x12d6a0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43883eb0, ftCreationTime.dwHighDateTime=0x1d5e786, ftLastAccessTime.dwLowDateTime=0x43883eb0, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x438aa010, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x773, dwReserved0=0x0, dwReserved1=0x0, cFileName="Decrypt Instructions.txt", cAlternateFileName="DECRYP~1.TXT")) returned 1 [0059.495] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d6a0 | out: lpFindFileData=0x12d6a0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc111bb0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xa40, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1 [0059.495] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d6a0 | out: lpFindFileData=0x12d6a0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc111bb0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xa40, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 0 [0059.495] FindClose (in: hFindFile=0x1af3b6b0 | out: hFindFile=0x1af3b6b0) returned 1 [0059.495] SetErrorMode (uMode=0x0) returned 0x1 [0059.495] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us", nBufferLength=0x105, lpBuffer=0x12d3f0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us", lpFilePart=0x0) returned 0x4b [0059.496] SetErrorMode (uMode=0x1) returned 0x0 [0059.496] FindFirstFileW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfa2b92d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfc0c6890, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfc0c6890, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1af3b6b0 [0060.275] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5a0 | out: lpFindFileData=0x12d5a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfa2b92d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfc0c6890, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfc0c6890, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0060.275] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5a0 | out: lpFindFileData=0x12d5a0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3e02ab00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3e02ab00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfa623330, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x266a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="AccessMUI.msi", cAlternateFileName="ACCESS~1.MSI")) returned 1 [0060.275] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5a0 | out: lpFindFileData=0x12d5a0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4529b900, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x4529b900, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfa5fe940, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x545, dwReserved0=0x0, dwReserved1=0x0, cFileName="AccessMUI.xml", cAlternateFileName="ACCESS~1.XML")) returned 1 [0060.276] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5a0 | out: lpFindFileData=0x12d5a0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3216e900, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3216e900, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfa64a430, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x1ab7e94, dwReserved0=0x0, dwReserved1=0x0, cFileName="AccLR.cab", cAlternateFileName="")) returned 1 [0060.276] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5a0 | out: lpFindFileData=0x12d5a0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x11e8ef00, ftCreationTime.dwHighDateTime=0x1cacdea, ftLastAccessTime.dwLowDateTime=0x11e8ef00, ftLastAccessTime.dwHighDateTime=0x1cacdea, ftLastWriteTime.dwLowDateTime=0xfc0c60c0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x91975, dwReserved0=0x0, dwReserved1=0x0, cFileName="branding.xml", cAlternateFileName="")) returned 1 [0060.276] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5a0 | out: lpFindFileData=0x12d5a0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x11e8ef00, ftCreationTime.dwHighDateTime=0x1cacdea, ftLastAccessTime.dwLowDateTime=0x11e8ef00, ftLastAccessTime.dwHighDateTime=0x1cacdea, ftLastWriteTime.dwLowDateTime=0xfc0c60c0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x91975, dwReserved0=0x0, dwReserved1=0x0, cFileName="branding.xml", cAlternateFileName="")) returned 0 [0060.276] FindClose (in: hFindFile=0x1af3b6b0 | out: hFindFile=0x1af3b6b0) returned 1 [0060.277] SetErrorMode (uMode=0x0) returned 0x1 [0060.282] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\Decrypt Instructions.txt", nBufferLength=0x105, lpBuffer=0x12d2a0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\Decrypt Instructions.txt", lpFilePart=0x0) returned 0x64 [0060.282] SetErrorMode (uMode=0x1) returned 0x0 [0060.282] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\Decrypt Instructions.txt" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\access.en-us\\decrypt instructions.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1e8 [0060.283] GetFileType (hFile=0x1e8) returned 0x1 [0060.283] SetErrorMode (uMode=0x0) returned 0x1 [0060.283] GetFileType (hFile=0x1e8) returned 0x1 [0060.284] WriteFile (in: hFile=0x1e8, lpBuffer=0x27c55e0*, nNumberOfBytesToWrite=0x773, lpNumberOfBytesWritten=0x12d808, lpOverlapped=0x0 | out: lpBuffer=0x27c55e0*, lpNumberOfBytesWritten=0x12d808*=0x773, lpOverlapped=0x0) returned 1 [0060.285] CloseHandle (hObject=0x1e8) returned 1 [0060.285] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us", nBufferLength=0x105, lpBuffer=0x12d490, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us", lpFilePart=0x0) returned 0x4b [0060.285] SetErrorMode (uMode=0x1) returned 0x0 [0060.285] FindFirstFileW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\*", lpFindFileData=0x12d630 | out: lpFindFileData=0x12d630*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfa2b92d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x4401a4d0, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x4401a4d0, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1af3b6b0 [0060.285] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d640 | out: lpFindFileData=0x12d640*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfa2b92d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x4401a4d0, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x4401a4d0, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0060.285] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d640 | out: lpFindFileData=0x12d640*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3e02ab00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3e02ab00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfa623330, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x266a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="AccessMUI.msi", cAlternateFileName="ACCESS~1.MSI")) returned 1 [0060.285] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d640 | out: lpFindFileData=0x12d640*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4529b900, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x4529b900, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfa5fe940, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x545, dwReserved0=0x0, dwReserved1=0x0, cFileName="AccessMUI.xml", cAlternateFileName="ACCESS~1.XML")) returned 1 [0060.285] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d640 | out: lpFindFileData=0x12d640*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3216e900, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3216e900, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfa64a430, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x1ab7e94, dwReserved0=0x0, dwReserved1=0x0, cFileName="AccLR.cab", cAlternateFileName="")) returned 1 [0060.286] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d640 | out: lpFindFileData=0x12d640*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x11e8ef00, ftCreationTime.dwHighDateTime=0x1cacdea, ftLastAccessTime.dwLowDateTime=0x11e8ef00, ftLastAccessTime.dwHighDateTime=0x1cacdea, ftLastWriteTime.dwLowDateTime=0xfc0c60c0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x91975, dwReserved0=0x0, dwReserved1=0x0, cFileName="branding.xml", cAlternateFileName="")) returned 1 [0060.286] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d640 | out: lpFindFileData=0x12d640*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4401a4d0, ftCreationTime.dwHighDateTime=0x1d5e786, ftLastAccessTime.dwLowDateTime=0x4401a4d0, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x4401a4d0, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x773, dwReserved0=0x0, dwReserved1=0x0, cFileName="Decrypt Instructions.txt", cAlternateFileName="DECRYP~1.TXT")) returned 1 [0060.286] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d640 | out: lpFindFileData=0x12d640*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4401a4d0, ftCreationTime.dwHighDateTime=0x1d5e786, ftLastAccessTime.dwLowDateTime=0x4401a4d0, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x4401a4d0, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x773, dwReserved0=0x0, dwReserved1=0x0, cFileName="Decrypt Instructions.txt", cAlternateFileName="DECRYP~1.TXT")) returned 0 [0060.286] FindClose (in: hFindFile=0x1af3b6b0 | out: hFindFile=0x1af3b6b0) returned 1 [0060.286] SetErrorMode (uMode=0x0) returned 0x1 [0060.286] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C", nBufferLength=0x105, lpBuffer=0x12d450, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C", lpFilePart=0x0) returned 0x3e [0060.286] SetErrorMode (uMode=0x1) returned 0x0 [0060.286] FindFirstFileW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\*", lpFindFileData=0x12d5f0 | out: lpFindFileData=0x12d5f0*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xfe09ced0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x18179b90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x18179b90, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1af3b6b0 [0060.819] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d600 | out: lpFindFileData=0x12d600*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xfe09ced0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x18179b90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x18179b90, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0060.819] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d600 | out: lpFindFileData=0x12d600*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x34ae1a00, ftCreationTime.dwHighDateTime=0x1cad01b, ftLastAccessTime.dwLowDateTime=0x34ae1a00, ftLastAccessTime.dwHighDateTime=0x1cad01b, ftLastWriteTime.dwLowDateTime=0xfe0c2860, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x1e6600, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office32WW.msi", cAlternateFileName="OFFICE~1.MSI")) returned 1 [0060.819] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d600 | out: lpFindFileData=0x12d600*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x940c2a00, ftCreationTime.dwHighDateTime=0x1cad01b, ftLastAccessTime.dwLowDateTime=0x940c2a00, ftLastAccessTime.dwHighDateTime=0x1cad01b, ftLastWriteTime.dwLowDateTime=0xfe09b760, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x10b2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office32WW.xml", cAlternateFileName="OFFICE~1.XML")) returned 1 [0060.819] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d600 | out: lpFindFileData=0x12d600*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xf885a000, ftCreationTime.dwHighDateTime=0x1cac4d7, ftLastAccessTime.dwLowDateTime=0xf885a000, ftLastAccessTime.dwHighDateTime=0x1cac4d7, ftLastWriteTime.dwLowDateTime=0x17c42c30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x2a968, dwReserved0=0x0, dwReserved1=0x0, cFileName="ose.exe", cAlternateFileName="")) returned 1 [0060.819] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d600 | out: lpFindFileData=0x12d600*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbd900f00, ftCreationTime.dwHighDateTime=0x1cac15b, ftLastAccessTime.dwLowDateTime=0xbd900f00, ftLastAccessTime.dwHighDateTime=0x1cac15b, ftLastWriteTime.dwLowDateTime=0x16854390, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x709768, dwReserved0=0x0, dwReserved1=0x0, cFileName="osetup.dll", cAlternateFileName="")) returned 1 [0060.819] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d600 | out: lpFindFileData=0x12d600*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x147e5b00, ftCreationTime.dwHighDateTime=0x1cad01b, ftLastAccessTime.dwLowDateTime=0x147e5b00, ftLastAccessTime.dwHighDateTime=0x1cad01b, ftLastWriteTime.dwLowDateTime=0xff654fc0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x228df5c, dwReserved0=0x0, dwReserved1=0x0, cFileName="OWOW32WW.cab", cAlternateFileName="")) returned 1 [0060.819] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d600 | out: lpFindFileData=0x12d600*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe3a02e00, ftCreationTime.dwHighDateTime=0x1cac5f7, ftLastAccessTime.dwLowDateTime=0xe3a02e00, ftLastAccessTime.dwHighDateTime=0x1cac5f7, ftLastWriteTime.dwLowDateTime=0x17e0dbf0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x165510, dwReserved0=0x0, dwReserved1=0x0, cFileName="PidGenX.dll", cAlternateFileName="")) returned 1 [0060.819] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d600 | out: lpFindFileData=0x12d600*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe06a9500, ftCreationTime.dwHighDateTime=0x1cac7e5, ftLastAccessTime.dwLowDateTime=0xe06a9500, ftLastAccessTime.dwHighDateTime=0x1cac7e5, ftLastWriteTime.dwLowDateTime=0x17c42c30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0xaec3a, dwReserved0=0x0, dwReserved1=0x0, cFileName="pkeyconfig-office.xrm-ms", cAlternateFileName="PKEYCO~1.XRM")) returned 1 [0060.820] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d600 | out: lpFindFileData=0x12d600*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbb2e2000, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbb2e2000, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0x170fe40, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x1a41c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ProPlusrWW.msi", cAlternateFileName="PROPLU~1.MSI")) returned 1 [0060.820] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d600 | out: lpFindFileData=0x12d600*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbd907a00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbd907a00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0x170fe40, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x41d4, dwReserved0=0x0, dwReserved1=0x0, cFileName="ProPlusrWW.xml", cAlternateFileName="PROPLU~1.XML")) returned 1 [0060.820] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d600 | out: lpFindFileData=0x12d600*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x262b2700, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x262b2700, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0x1ffd0c0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0xa97cbdb, dwReserved0=0x0, dwReserved1=0x0, cFileName="ProPrWW.cab", cAlternateFileName="")) returned 1 [0060.820] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d600 | out: lpFindFileData=0x12d600*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbf14900, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbf14900, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xc96ff40, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0xd49ee31, dwReserved0=0x0, dwReserved1=0x0, cFileName="ProPrWW2.cab", cAlternateFileName="")) returned 1 [0060.820] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d600 | out: lpFindFileData=0x12d600*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbec13c00, ftCreationTime.dwHighDateTime=0x1cac15b, ftLastAccessTime.dwLowDateTime=0xbec13c00, ftLastAccessTime.dwHighDateTime=0x1cac15b, ftLastWriteTime.dwLowDateTime=0x1682d290, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x150578, dwReserved0=0x0, dwReserved1=0x0, cFileName="setup.exe", cAlternateFileName="")) returned 1 [0060.820] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d600 | out: lpFindFileData=0x12d600*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbd907a00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbd907a00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0x18177c50, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x7976, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1 [0060.820] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d600 | out: lpFindFileData=0x12d600*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbd907a00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbd907a00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0x18177c50, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x7976, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 0 [0060.820] FindClose (in: hFindFile=0x1af3b6b0 | out: hFindFile=0x1af3b6b0) returned 1 [0060.821] SetErrorMode (uMode=0x0) returned 0x1 [0060.824] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Decrypt Instructions.txt", nBufferLength=0x105, lpBuffer=0x12d300, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Decrypt Instructions.txt", lpFilePart=0x0) returned 0x57 [0060.824] SetErrorMode (uMode=0x1) returned 0x0 [0060.824] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Decrypt Instructions.txt" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\decrypt instructions.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1e8 [0060.826] GetFileType (hFile=0x1e8) returned 0x1 [0060.826] SetErrorMode (uMode=0x0) returned 0x1 [0060.826] GetFileType (hFile=0x1e8) returned 0x1 [0060.826] WriteFile (in: hFile=0x1e8, lpBuffer=0x27cd1d8*, nNumberOfBytesToWrite=0x773, lpNumberOfBytesWritten=0x12d868, lpOverlapped=0x0 | out: lpBuffer=0x27cd1d8*, lpNumberOfBytesWritten=0x12d868*=0x773, lpOverlapped=0x0) returned 1 [0060.827] CloseHandle (hObject=0x1e8) returned 1 [0060.828] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C", nBufferLength=0x105, lpBuffer=0x12d4f0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C", lpFilePart=0x0) returned 0x3e [0060.828] SetErrorMode (uMode=0x1) returned 0x0 [0060.829] FindFirstFileW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\*", lpFindFileData=0x12d690 | out: lpFindFileData=0x12d690*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xfe09ced0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x4454f4f0, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x4454f4f0, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1af3b6b0 [0060.829] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d6a0 | out: lpFindFileData=0x12d6a0*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xfe09ced0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x4454f4f0, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x4454f4f0, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0060.829] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d6a0 | out: lpFindFileData=0x12d6a0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4454f4f0, ftCreationTime.dwHighDateTime=0x1d5e786, ftLastAccessTime.dwLowDateTime=0x4454f4f0, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x4454f4f0, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x773, dwReserved0=0x0, dwReserved1=0x0, cFileName="Decrypt Instructions.txt", cAlternateFileName="DECRYP~1.TXT")) returned 1 [0060.829] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d6a0 | out: lpFindFileData=0x12d6a0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x34ae1a00, ftCreationTime.dwHighDateTime=0x1cad01b, ftLastAccessTime.dwLowDateTime=0x34ae1a00, ftLastAccessTime.dwHighDateTime=0x1cad01b, ftLastWriteTime.dwLowDateTime=0xfe0c2860, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x1e6600, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office32WW.msi", cAlternateFileName="OFFICE~1.MSI")) returned 1 [0060.829] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d6a0 | out: lpFindFileData=0x12d6a0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x940c2a00, ftCreationTime.dwHighDateTime=0x1cad01b, ftLastAccessTime.dwLowDateTime=0x940c2a00, ftLastAccessTime.dwHighDateTime=0x1cad01b, ftLastWriteTime.dwLowDateTime=0xfe09b760, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x10b2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office32WW.xml", cAlternateFileName="OFFICE~1.XML")) returned 1 [0060.829] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d6a0 | out: lpFindFileData=0x12d6a0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xf885a000, ftCreationTime.dwHighDateTime=0x1cac4d7, ftLastAccessTime.dwLowDateTime=0xf885a000, ftLastAccessTime.dwHighDateTime=0x1cac4d7, ftLastWriteTime.dwLowDateTime=0x17c42c30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x2a968, dwReserved0=0x0, dwReserved1=0x0, cFileName="ose.exe", cAlternateFileName="")) returned 1 [0060.829] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d6a0 | out: lpFindFileData=0x12d6a0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbd900f00, ftCreationTime.dwHighDateTime=0x1cac15b, ftLastAccessTime.dwLowDateTime=0xbd900f00, ftLastAccessTime.dwHighDateTime=0x1cac15b, ftLastWriteTime.dwLowDateTime=0x16854390, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x709768, dwReserved0=0x0, dwReserved1=0x0, cFileName="osetup.dll", cAlternateFileName="")) returned 1 [0060.829] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d6a0 | out: lpFindFileData=0x12d6a0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x147e5b00, ftCreationTime.dwHighDateTime=0x1cad01b, ftLastAccessTime.dwLowDateTime=0x147e5b00, ftLastAccessTime.dwHighDateTime=0x1cad01b, ftLastWriteTime.dwLowDateTime=0xff654fc0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x228df5c, dwReserved0=0x0, dwReserved1=0x0, cFileName="OWOW32WW.cab", cAlternateFileName="")) returned 1 [0060.829] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d6a0 | out: lpFindFileData=0x12d6a0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe3a02e00, ftCreationTime.dwHighDateTime=0x1cac5f7, ftLastAccessTime.dwLowDateTime=0xe3a02e00, ftLastAccessTime.dwHighDateTime=0x1cac5f7, ftLastWriteTime.dwLowDateTime=0x17e0dbf0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x165510, dwReserved0=0x0, dwReserved1=0x0, cFileName="PidGenX.dll", cAlternateFileName="")) returned 1 [0060.829] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d6a0 | out: lpFindFileData=0x12d6a0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe06a9500, ftCreationTime.dwHighDateTime=0x1cac7e5, ftLastAccessTime.dwLowDateTime=0xe06a9500, ftLastAccessTime.dwHighDateTime=0x1cac7e5, ftLastWriteTime.dwLowDateTime=0x17c42c30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0xaec3a, dwReserved0=0x0, dwReserved1=0x0, cFileName="pkeyconfig-office.xrm-ms", cAlternateFileName="PKEYCO~1.XRM")) returned 1 [0060.829] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d6a0 | out: lpFindFileData=0x12d6a0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbb2e2000, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbb2e2000, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0x170fe40, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x1a41c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ProPlusrWW.msi", cAlternateFileName="PROPLU~1.MSI")) returned 1 [0060.830] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d6a0 | out: lpFindFileData=0x12d6a0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbd907a00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbd907a00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0x170fe40, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x41d4, dwReserved0=0x0, dwReserved1=0x0, cFileName="ProPlusrWW.xml", cAlternateFileName="PROPLU~1.XML")) returned 1 [0060.830] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d6a0 | out: lpFindFileData=0x12d6a0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x262b2700, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x262b2700, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0x1ffd0c0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0xa97cbdb, dwReserved0=0x0, dwReserved1=0x0, cFileName="ProPrWW.cab", cAlternateFileName="")) returned 1 [0060.830] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d6a0 | out: lpFindFileData=0x12d6a0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbf14900, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbf14900, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xc96ff40, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0xd49ee31, dwReserved0=0x0, dwReserved1=0x0, cFileName="ProPrWW2.cab", cAlternateFileName="")) returned 1 [0060.830] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d6a0 | out: lpFindFileData=0x12d6a0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbec13c00, ftCreationTime.dwHighDateTime=0x1cac15b, ftLastAccessTime.dwLowDateTime=0xbec13c00, ftLastAccessTime.dwHighDateTime=0x1cac15b, ftLastWriteTime.dwLowDateTime=0x1682d290, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x150578, dwReserved0=0x0, dwReserved1=0x0, cFileName="setup.exe", cAlternateFileName="")) returned 1 [0060.830] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d6a0 | out: lpFindFileData=0x12d6a0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbd907a00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbd907a00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0x18177c50, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x7976, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1 [0060.830] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d6a0 | out: lpFindFileData=0x12d6a0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbd907a00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbd907a00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0x18177c50, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x7976, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 0 [0060.830] FindClose (in: hFindFile=0x1af3b6b0 | out: hFindFile=0x1af3b6b0) returned 1 [0060.830] SetErrorMode (uMode=0x0) returned 0x1 [0060.830] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C", nBufferLength=0x105, lpBuffer=0x12d450, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C", lpFilePart=0x0) returned 0x3e [0060.830] SetErrorMode (uMode=0x1) returned 0x0 [0060.830] FindFirstFileW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\*", lpFindFileData=0x12d5f0 | out: lpFindFileData=0x12d5f0*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xa5cd3a40, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0xa8c22f80, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa8c22f80, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1af3b6b0 [0060.853] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d600 | out: lpFindFileData=0x12d600*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xa5cd3a40, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0xa8c22f80, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa8c22f80, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0060.853] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d600 | out: lpFindFileData=0x12d600*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x87078450, ftCreationTime.dwHighDateTime=0x1cb147f, ftLastAccessTime.dwLowDateTime=0x87078450, ftLastAccessTime.dwHighDateTime=0x1cb147f, ftLastWriteTime.dwLowDateTime=0xa5d1e590, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x1e6600, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office32WW.msi", cAlternateFileName="OFFICE~1.MSI")) returned 1 [0060.853] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d600 | out: lpFindFileData=0x12d600*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x87abdaa0, ftCreationTime.dwHighDateTime=0x1cb147f, ftLastAccessTime.dwLowDateTime=0x87abdaa0, ftLastAccessTime.dwHighDateTime=0x1cb147f, ftLastWriteTime.dwLowDateTime=0xa5cd2aa0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x10b2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office32WW.xml", cAlternateFileName="OFFICE~1.XML")) returned 1 [0060.853] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d600 | out: lpFindFileData=0x12d600*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xfe57f8e0, ftCreationTime.dwHighDateTime=0x1cbe1cb, ftLastAccessTime.dwLowDateTime=0xfe57f8e0, ftLastAccessTime.dwHighDateTime=0x1cbe1cb, ftLastWriteTime.dwLowDateTime=0xa8bafbc0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x2a968, dwReserved0=0x0, dwReserved1=0x0, cFileName="ose.exe", cAlternateFileName="")) returned 1 [0060.853] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d600 | out: lpFindFileData=0x12d600*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6644b620, ftCreationTime.dwHighDateTime=0x1cb04b2, ftLastAccessTime.dwLowDateTime=0x6644b620, ftLastAccessTime.dwHighDateTime=0x1cb04b2, ftLastWriteTime.dwLowDateTime=0xa81b8770, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x709768, dwReserved0=0x0, dwReserved1=0x0, cFileName="osetup.dll", cAlternateFileName="")) returned 1 [0060.853] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d600 | out: lpFindFileData=0x12d600*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8238e540, ftCreationTime.dwHighDateTime=0x1cb147f, ftLastAccessTime.dwLowDateTime=0x8238e540, ftLastAccessTime.dwHighDateTime=0x1cb147f, ftLastWriteTime.dwLowDateTime=0xa5ddcc70, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x228df5c, dwReserved0=0x0, dwReserved1=0x0, cFileName="OWOW32WW.cab", cAlternateFileName="")) returned 1 [0060.853] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d600 | out: lpFindFileData=0x12d600*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7bd91af0, ftCreationTime.dwHighDateTime=0x1cb07b2, ftLastAccessTime.dwLowDateTime=0x7bd91af0, ftLastAccessTime.dwHighDateTime=0x1cb07b2, ftLastWriteTime.dwLowDateTime=0xa8bafbc0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x165510, dwReserved0=0x0, dwReserved1=0x0, cFileName="PidGenX.dll", cAlternateFileName="")) returned 1 [0060.853] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d600 | out: lpFindFileData=0x12d600*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2a2397e0, ftCreationTime.dwHighDateTime=0x1cbe19a, ftLastAccessTime.dwLowDateTime=0x2a2397e0, ftLastAccessTime.dwHighDateTime=0x1cbe19a, ftLastWriteTime.dwLowDateTime=0xa8bafbc0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0xaec3a, dwReserved0=0x0, dwReserved1=0x0, cFileName="pkeyconfig-office.xrm-ms", cAlternateFileName="PKEYCO~1.XRM")) returned 1 [0060.853] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d600 | out: lpFindFileData=0x12d600*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7c1614f0, ftCreationTime.dwHighDateTime=0x1cb148c, ftLastAccessTime.dwLowDateTime=0x7c1614f0, ftLastAccessTime.dwHighDateTime=0x1cb148c, ftLastWriteTime.dwLowDateTime=0xa60fd8f0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0xa4c400, dwReserved0=0x0, dwReserved1=0x0, cFileName="PrjProrWW.msi", cAlternateFileName="PRJPRO~1.MSI")) returned 1 [0060.853] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d600 | out: lpFindFileData=0x12d600*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7cabec50, ftCreationTime.dwHighDateTime=0x1cb148c, ftLastAccessTime.dwLowDateTime=0x7cabec50, ftLastAccessTime.dwHighDateTime=0x1cb148c, ftLastWriteTime.dwLowDateTime=0xa60fd8f0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x1915, dwReserved0=0x0, dwReserved1=0x0, cFileName="PrjProrWW.xml", cAlternateFileName="PRJPRO~1.XML")) returned 1 [0060.853] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d600 | out: lpFindFileData=0x12d600*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6c87b0c0, ftCreationTime.dwHighDateTime=0x1cb148c, ftLastAccessTime.dwLowDateTime=0x6c87b0c0, ftLastAccessTime.dwHighDateTime=0x1cb148c, ftLastWriteTime.dwLowDateTime=0xa6b67930, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x9b6ba9f, dwReserved0=0x0, dwReserved1=0x0, cFileName="PrjPrrWW.cab", cAlternateFileName="")) returned 1 [0060.853] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d600 | out: lpFindFileData=0x12d600*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x69dde270, ftCreationTime.dwHighDateTime=0x1cb04b2, ftLastAccessTime.dwLowDateTime=0x69dde270, ftLastAccessTime.dwHighDateTime=0x1cb04b2, ftLastWriteTime.dwLowDateTime=0xa8191670, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x150578, dwReserved0=0x0, dwReserved1=0x0, cFileName="setup.exe", cAlternateFileName="")) returned 1 [0060.853] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d600 | out: lpFindFileData=0x12d600*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7ca00570, ftCreationTime.dwHighDateTime=0x1cb148c, ftLastAccessTime.dwLowDateTime=0x7ca00570, ftLastAccessTime.dwHighDateTime=0x1cb148c, ftLastWriteTime.dwLowDateTime=0xa8c227b0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x412b, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1 [0060.853] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d600 | out: lpFindFileData=0x12d600*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7ca00570, ftCreationTime.dwHighDateTime=0x1cb148c, ftLastAccessTime.dwLowDateTime=0x7ca00570, ftLastAccessTime.dwHighDateTime=0x1cb148c, ftLastWriteTime.dwLowDateTime=0xa8c227b0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x412b, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 0 [0060.854] FindClose (in: hFindFile=0x1af3b6b0 | out: hFindFile=0x1af3b6b0) returned 1 [0060.854] SetErrorMode (uMode=0x0) returned 0x1 [0060.857] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Decrypt Instructions.txt", nBufferLength=0x105, lpBuffer=0x12d300, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Decrypt Instructions.txt", lpFilePart=0x0) returned 0x57 [0060.857] SetErrorMode (uMode=0x1) returned 0x0 [0060.857] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Decrypt Instructions.txt" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\decrypt instructions.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1e8 [0060.858] GetFileType (hFile=0x1e8) returned 0x1 [0060.858] SetErrorMode (uMode=0x0) returned 0x1 [0060.858] GetFileType (hFile=0x1e8) returned 0x1 [0060.859] WriteFile (in: hFile=0x1e8, lpBuffer=0x27d4e00*, nNumberOfBytesToWrite=0x773, lpNumberOfBytesWritten=0x12d868, lpOverlapped=0x0 | out: lpBuffer=0x27d4e00*, lpNumberOfBytesWritten=0x12d868*=0x773, lpOverlapped=0x0) returned 1 [0060.860] CloseHandle (hObject=0x1e8) returned 1 [0060.860] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C", nBufferLength=0x105, lpBuffer=0x12d4f0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C", lpFilePart=0x0) returned 0x3e [0060.860] SetErrorMode (uMode=0x1) returned 0x0 [0060.860] FindFirstFileW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\*", lpFindFileData=0x12d690 | out: lpFindFileData=0x12d690*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xa5cd3a40, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0x4459b7b0, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x4459b7b0, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1af3b6b0 [0060.860] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d6a0 | out: lpFindFileData=0x12d6a0*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xa5cd3a40, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0x4459b7b0, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x4459b7b0, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0060.860] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d6a0 | out: lpFindFileData=0x12d6a0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4459b7b0, ftCreationTime.dwHighDateTime=0x1d5e786, ftLastAccessTime.dwLowDateTime=0x4459b7b0, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x4459b7b0, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x773, dwReserved0=0x0, dwReserved1=0x0, cFileName="Decrypt Instructions.txt", cAlternateFileName="DECRYP~1.TXT")) returned 1 [0060.861] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d6a0 | out: lpFindFileData=0x12d6a0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x87078450, ftCreationTime.dwHighDateTime=0x1cb147f, ftLastAccessTime.dwLowDateTime=0x87078450, ftLastAccessTime.dwHighDateTime=0x1cb147f, ftLastWriteTime.dwLowDateTime=0xa5d1e590, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x1e6600, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office32WW.msi", cAlternateFileName="OFFICE~1.MSI")) returned 1 [0060.861] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d6a0 | out: lpFindFileData=0x12d6a0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x87abdaa0, ftCreationTime.dwHighDateTime=0x1cb147f, ftLastAccessTime.dwLowDateTime=0x87abdaa0, ftLastAccessTime.dwHighDateTime=0x1cb147f, ftLastWriteTime.dwLowDateTime=0xa5cd2aa0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x10b2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office32WW.xml", cAlternateFileName="OFFICE~1.XML")) returned 1 [0060.861] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d6a0 | out: lpFindFileData=0x12d6a0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xfe57f8e0, ftCreationTime.dwHighDateTime=0x1cbe1cb, ftLastAccessTime.dwLowDateTime=0xfe57f8e0, ftLastAccessTime.dwHighDateTime=0x1cbe1cb, ftLastWriteTime.dwLowDateTime=0xa8bafbc0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x2a968, dwReserved0=0x0, dwReserved1=0x0, cFileName="ose.exe", cAlternateFileName="")) returned 1 [0060.861] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d6a0 | out: lpFindFileData=0x12d6a0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6644b620, ftCreationTime.dwHighDateTime=0x1cb04b2, ftLastAccessTime.dwLowDateTime=0x6644b620, ftLastAccessTime.dwHighDateTime=0x1cb04b2, ftLastWriteTime.dwLowDateTime=0xa81b8770, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x709768, dwReserved0=0x0, dwReserved1=0x0, cFileName="osetup.dll", cAlternateFileName="")) returned 1 [0060.861] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d6a0 | out: lpFindFileData=0x12d6a0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8238e540, ftCreationTime.dwHighDateTime=0x1cb147f, ftLastAccessTime.dwLowDateTime=0x8238e540, ftLastAccessTime.dwHighDateTime=0x1cb147f, ftLastWriteTime.dwLowDateTime=0xa5ddcc70, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x228df5c, dwReserved0=0x0, dwReserved1=0x0, cFileName="OWOW32WW.cab", cAlternateFileName="")) returned 1 [0060.861] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d6a0 | out: lpFindFileData=0x12d6a0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7bd91af0, ftCreationTime.dwHighDateTime=0x1cb07b2, ftLastAccessTime.dwLowDateTime=0x7bd91af0, ftLastAccessTime.dwHighDateTime=0x1cb07b2, ftLastWriteTime.dwLowDateTime=0xa8bafbc0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x165510, dwReserved0=0x0, dwReserved1=0x0, cFileName="PidGenX.dll", cAlternateFileName="")) returned 1 [0060.861] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d6a0 | out: lpFindFileData=0x12d6a0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2a2397e0, ftCreationTime.dwHighDateTime=0x1cbe19a, ftLastAccessTime.dwLowDateTime=0x2a2397e0, ftLastAccessTime.dwHighDateTime=0x1cbe19a, ftLastWriteTime.dwLowDateTime=0xa8bafbc0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0xaec3a, dwReserved0=0x0, dwReserved1=0x0, cFileName="pkeyconfig-office.xrm-ms", cAlternateFileName="PKEYCO~1.XRM")) returned 1 [0060.861] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d6a0 | out: lpFindFileData=0x12d6a0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7c1614f0, ftCreationTime.dwHighDateTime=0x1cb148c, ftLastAccessTime.dwLowDateTime=0x7c1614f0, ftLastAccessTime.dwHighDateTime=0x1cb148c, ftLastWriteTime.dwLowDateTime=0xa60fd8f0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0xa4c400, dwReserved0=0x0, dwReserved1=0x0, cFileName="PrjProrWW.msi", cAlternateFileName="PRJPRO~1.MSI")) returned 1 [0060.861] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d6a0 | out: lpFindFileData=0x12d6a0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7cabec50, ftCreationTime.dwHighDateTime=0x1cb148c, ftLastAccessTime.dwLowDateTime=0x7cabec50, ftLastAccessTime.dwHighDateTime=0x1cb148c, ftLastWriteTime.dwLowDateTime=0xa60fd8f0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x1915, dwReserved0=0x0, dwReserved1=0x0, cFileName="PrjProrWW.xml", cAlternateFileName="PRJPRO~1.XML")) returned 1 [0060.861] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d6a0 | out: lpFindFileData=0x12d6a0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6c87b0c0, ftCreationTime.dwHighDateTime=0x1cb148c, ftLastAccessTime.dwLowDateTime=0x6c87b0c0, ftLastAccessTime.dwHighDateTime=0x1cb148c, ftLastWriteTime.dwLowDateTime=0xa6b67930, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x9b6ba9f, dwReserved0=0x0, dwReserved1=0x0, cFileName="PrjPrrWW.cab", cAlternateFileName="")) returned 1 [0060.861] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d6a0 | out: lpFindFileData=0x12d6a0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x69dde270, ftCreationTime.dwHighDateTime=0x1cb04b2, ftLastAccessTime.dwLowDateTime=0x69dde270, ftLastAccessTime.dwHighDateTime=0x1cb04b2, ftLastWriteTime.dwLowDateTime=0xa8191670, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x150578, dwReserved0=0x0, dwReserved1=0x0, cFileName="setup.exe", cAlternateFileName="")) returned 1 [0060.861] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d6a0 | out: lpFindFileData=0x12d6a0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7ca00570, ftCreationTime.dwHighDateTime=0x1cb148c, ftLastAccessTime.dwLowDateTime=0x7ca00570, ftLastAccessTime.dwHighDateTime=0x1cb148c, ftLastWriteTime.dwLowDateTime=0xa8c227b0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x412b, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1 [0060.861] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d6a0 | out: lpFindFileData=0x12d6a0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7ca00570, ftCreationTime.dwHighDateTime=0x1cb148c, ftLastAccessTime.dwLowDateTime=0x7ca00570, ftLastAccessTime.dwHighDateTime=0x1cb148c, ftLastWriteTime.dwLowDateTime=0xa8c227b0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x412b, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 0 [0060.861] FindClose (in: hFindFile=0x1af3b6b0 | out: hFindFile=0x1af3b6b0) returned 1 [0060.862] SetErrorMode (uMode=0x0) returned 0x1 [0060.862] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C", nBufferLength=0x105, lpBuffer=0x12d450, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C", lpFilePart=0x0) returned 0x3e [0060.862] SetErrorMode (uMode=0x1) returned 0x0 [0060.862] FindFirstFileW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\*", lpFindFileData=0x12d5f0 | out: lpFindFileData=0x12d5f0*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0x46538340, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x4a6d41a0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x4a6d41a0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1af3b6b0 [0061.711] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d600 | out: lpFindFileData=0x12d600*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0x46538340, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x4a6d41a0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x4a6d41a0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0061.711] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d600 | out: lpFindFileData=0x12d600*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe5ed9630, ftCreationTime.dwHighDateTime=0x1cb12b3, ftLastAccessTime.dwLowDateTime=0xe5ed9630, ftLastAccessTime.dwHighDateTime=0x1cb12b3, ftLastWriteTime.dwLowDateTime=0x4655d500, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x1e6600, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office32WW.msi", cAlternateFileName="OFFICE~1.MSI")) returned 1 [0061.711] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d600 | out: lpFindFileData=0x12d600*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x16771fb0, ftCreationTime.dwHighDateTime=0x1cb12b4, ftLastAccessTime.dwLowDateTime=0x16771fb0, ftLastAccessTime.dwHighDateTime=0x1cb12b4, ftLastWriteTime.dwLowDateTime=0x46536400, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x10b2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office32WW.xml", cAlternateFileName="OFFICE~1.XML")) returned 1 [0061.711] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d600 | out: lpFindFileData=0x12d600*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xec54b6b0, ftCreationTime.dwHighDateTime=0x1cb04a9, ftLastAccessTime.dwLowDateTime=0xec54b6b0, ftLastAccessTime.dwHighDateTime=0x1cb04a9, ftLastWriteTime.dwLowDateTime=0x4a687710, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x2a968, dwReserved0=0x0, dwReserved1=0x0, cFileName="ose.exe", cAlternateFileName="")) returned 1 [0061.711] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d600 | out: lpFindFileData=0x12d600*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xde72fbf0, ftCreationTime.dwHighDateTime=0x1cb0d0b, ftLastAccessTime.dwLowDateTime=0xde72fbf0, ftLastAccessTime.dwHighDateTime=0x1cb0d0b, ftLastWriteTime.dwLowDateTime=0x49c902c0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x709768, dwReserved0=0x0, dwReserved1=0x0, cFileName="osetup.dll", cAlternateFileName="")) returned 1 [0061.711] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d600 | out: lpFindFileData=0x12d600*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xc9c380f0, ftCreationTime.dwHighDateTime=0x1cb12b3, ftLastAccessTime.dwLowDateTime=0xc9c380f0, ftLastAccessTime.dwHighDateTime=0x1cb12b3, ftLastWriteTime.dwLowDateTime=0x465d00f0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x228df5c, dwReserved0=0x0, dwReserved1=0x0, cFileName="OWOW32WW.cab", cAlternateFileName="")) returned 1 [0061.711] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d600 | out: lpFindFileData=0x12d600*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe7c66670, ftCreationTime.dwHighDateTime=0x1cb0ee5, ftLastAccessTime.dwLowDateTime=0xe7c66670, ftLastAccessTime.dwHighDateTime=0x1cb0ee5, ftLastWriteTime.dwLowDateTime=0x4a6ac100, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x165510, dwReserved0=0x0, dwReserved1=0x0, cFileName="PidGenX.dll", cAlternateFileName="")) returned 1 [0061.712] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d600 | out: lpFindFileData=0x12d600*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x95261510, ftCreationTime.dwHighDateTime=0x1cb048a, ftLastAccessTime.dwLowDateTime=0x95261510, ftLastAccessTime.dwHighDateTime=0x1cb048a, ftLastWriteTime.dwLowDateTime=0x4a6ac100, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0xaec3a, dwReserved0=0x0, dwReserved1=0x0, cFileName="pkeyconfig-office.xrm-ms", cAlternateFileName="PKEYCO~1.XRM")) returned 1 [0061.712] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d600 | out: lpFindFileData=0x12d600*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xeb7e7af0, ftCreationTime.dwHighDateTime=0x1cb04a9, ftLastAccessTime.dwLowDateTime=0xeb7e7af0, ftLastAccessTime.dwHighDateTime=0x1cb04a9, ftLastWriteTime.dwLowDateTime=0x49c691c0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x150578, dwReserved0=0x0, dwReserved1=0x0, cFileName="setup.exe", cAlternateFileName="")) returned 1 [0061.712] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d600 | out: lpFindFileData=0x12d600*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x80aa51d0, ftCreationTime.dwHighDateTime=0x1cb1486, ftLastAccessTime.dwLowDateTime=0x80aa51d0, ftLastAccessTime.dwHighDateTime=0x1cb1486, ftLastWriteTime.dwLowDateTime=0x4a6d3200, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x5061, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1 [0061.712] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d600 | out: lpFindFileData=0x12d600*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x749b0240, ftCreationTime.dwHighDateTime=0x1cb1486, ftLastAccessTime.dwLowDateTime=0x749b0240, ftLastAccessTime.dwHighDateTime=0x1cb1486, ftLastWriteTime.dwLowDateTime=0x46a46a30, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0xb9fa2f7, dwReserved0=0x0, dwReserved1=0x0, cFileName="VisiorWW.cab", cAlternateFileName="")) returned 1 [0061.712] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d600 | out: lpFindFileData=0x12d600*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x80711960, ftCreationTime.dwHighDateTime=0x1cb1486, ftLastAccessTime.dwLowDateTime=0x80711960, ftLastAccessTime.dwHighDateTime=0x1cb1486, ftLastWriteTime.dwLowDateTime=0x468ee660, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0xb80800, dwReserved0=0x0, dwReserved1=0x0, cFileName="VisiorWW.msi", cAlternateFileName="")) returned 1 [0061.712] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d600 | out: lpFindFileData=0x12d600*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x80b17dc0, ftCreationTime.dwHighDateTime=0x1cb1486, ftLastAccessTime.dwLowDateTime=0x80b17dc0, ftLastAccessTime.dwHighDateTime=0x1cb1486, ftLastWriteTime.dwLowDateTime=0x468a2b70, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x2213, dwReserved0=0x0, dwReserved1=0x0, cFileName="VisiorWW.xml", cAlternateFileName="")) returned 1 [0061.712] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d600 | out: lpFindFileData=0x12d600*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x80b17dc0, ftCreationTime.dwHighDateTime=0x1cb1486, ftLastAccessTime.dwLowDateTime=0x80b17dc0, ftLastAccessTime.dwHighDateTime=0x1cb1486, ftLastWriteTime.dwLowDateTime=0x468a2b70, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x2213, dwReserved0=0x0, dwReserved1=0x0, cFileName="VisiorWW.xml", cAlternateFileName="")) returned 0 [0061.712] FindClose (in: hFindFile=0x1af3b6b0 | out: hFindFile=0x1af3b6b0) returned 1 [0061.713] SetErrorMode (uMode=0x0) returned 0x1 [0061.716] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Decrypt Instructions.txt", nBufferLength=0x105, lpBuffer=0x12d300, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Decrypt Instructions.txt", lpFilePart=0x0) returned 0x57 [0061.716] SetErrorMode (uMode=0x1) returned 0x0 [0061.717] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Decrypt Instructions.txt" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\decrypt instructions.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1e8 [0061.719] GetFileType (hFile=0x1e8) returned 0x1 [0061.719] SetErrorMode (uMode=0x0) returned 0x1 [0061.719] GetFileType (hFile=0x1e8) returned 0x1 [0061.719] WriteFile (in: hFile=0x1e8, lpBuffer=0x27dc980*, nNumberOfBytesToWrite=0x773, lpNumberOfBytesWritten=0x12d868, lpOverlapped=0x0 | out: lpBuffer=0x27dc980*, lpNumberOfBytesWritten=0x12d868*=0x773, lpOverlapped=0x0) returned 1 [0061.721] CloseHandle (hObject=0x1e8) returned 1 [0061.721] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C", nBufferLength=0x105, lpBuffer=0x12d4f0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C", lpFilePart=0x0) returned 0x3e [0061.722] SetErrorMode (uMode=0x1) returned 0x0 [0061.722] FindFirstFileW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\*", lpFindFileData=0x12d690 | out: lpFindFileData=0x12d690*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0x46538340, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x44dca350, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x44dca350, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1af3b6b0 [0061.722] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d6a0 | out: lpFindFileData=0x12d6a0*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0x46538340, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x44dca350, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x44dca350, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0061.722] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d6a0 | out: lpFindFileData=0x12d6a0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x44dca350, ftCreationTime.dwHighDateTime=0x1d5e786, ftLastAccessTime.dwLowDateTime=0x44dca350, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x44dca350, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x773, dwReserved0=0x0, dwReserved1=0x0, cFileName="Decrypt Instructions.txt", cAlternateFileName="DECRYP~1.TXT")) returned 1 [0061.722] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d6a0 | out: lpFindFileData=0x12d6a0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe5ed9630, ftCreationTime.dwHighDateTime=0x1cb12b3, ftLastAccessTime.dwLowDateTime=0xe5ed9630, ftLastAccessTime.dwHighDateTime=0x1cb12b3, ftLastWriteTime.dwLowDateTime=0x4655d500, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x1e6600, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office32WW.msi", cAlternateFileName="OFFICE~1.MSI")) returned 1 [0061.722] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d6a0 | out: lpFindFileData=0x12d6a0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x16771fb0, ftCreationTime.dwHighDateTime=0x1cb12b4, ftLastAccessTime.dwLowDateTime=0x16771fb0, ftLastAccessTime.dwHighDateTime=0x1cb12b4, ftLastWriteTime.dwLowDateTime=0x46536400, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x10b2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office32WW.xml", cAlternateFileName="OFFICE~1.XML")) returned 1 [0061.722] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d6a0 | out: lpFindFileData=0x12d6a0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xec54b6b0, ftCreationTime.dwHighDateTime=0x1cb04a9, ftLastAccessTime.dwLowDateTime=0xec54b6b0, ftLastAccessTime.dwHighDateTime=0x1cb04a9, ftLastWriteTime.dwLowDateTime=0x4a687710, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x2a968, dwReserved0=0x0, dwReserved1=0x0, cFileName="ose.exe", cAlternateFileName="")) returned 1 [0061.722] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d6a0 | out: lpFindFileData=0x12d6a0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xde72fbf0, ftCreationTime.dwHighDateTime=0x1cb0d0b, ftLastAccessTime.dwLowDateTime=0xde72fbf0, ftLastAccessTime.dwHighDateTime=0x1cb0d0b, ftLastWriteTime.dwLowDateTime=0x49c902c0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x709768, dwReserved0=0x0, dwReserved1=0x0, cFileName="osetup.dll", cAlternateFileName="")) returned 1 [0061.722] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d6a0 | out: lpFindFileData=0x12d6a0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xc9c380f0, ftCreationTime.dwHighDateTime=0x1cb12b3, ftLastAccessTime.dwLowDateTime=0xc9c380f0, ftLastAccessTime.dwHighDateTime=0x1cb12b3, ftLastWriteTime.dwLowDateTime=0x465d00f0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x228df5c, dwReserved0=0x0, dwReserved1=0x0, cFileName="OWOW32WW.cab", cAlternateFileName="")) returned 1 [0061.722] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d6a0 | out: lpFindFileData=0x12d6a0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe7c66670, ftCreationTime.dwHighDateTime=0x1cb0ee5, ftLastAccessTime.dwLowDateTime=0xe7c66670, ftLastAccessTime.dwHighDateTime=0x1cb0ee5, ftLastWriteTime.dwLowDateTime=0x4a6ac100, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x165510, dwReserved0=0x0, dwReserved1=0x0, cFileName="PidGenX.dll", cAlternateFileName="")) returned 1 [0061.723] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d6a0 | out: lpFindFileData=0x12d6a0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x95261510, ftCreationTime.dwHighDateTime=0x1cb048a, ftLastAccessTime.dwLowDateTime=0x95261510, ftLastAccessTime.dwHighDateTime=0x1cb048a, ftLastWriteTime.dwLowDateTime=0x4a6ac100, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0xaec3a, dwReserved0=0x0, dwReserved1=0x0, cFileName="pkeyconfig-office.xrm-ms", cAlternateFileName="PKEYCO~1.XRM")) returned 1 [0061.723] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d6a0 | out: lpFindFileData=0x12d6a0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xeb7e7af0, ftCreationTime.dwHighDateTime=0x1cb04a9, ftLastAccessTime.dwLowDateTime=0xeb7e7af0, ftLastAccessTime.dwHighDateTime=0x1cb04a9, ftLastWriteTime.dwLowDateTime=0x49c691c0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x150578, dwReserved0=0x0, dwReserved1=0x0, cFileName="setup.exe", cAlternateFileName="")) returned 1 [0061.723] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d6a0 | out: lpFindFileData=0x12d6a0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x80aa51d0, ftCreationTime.dwHighDateTime=0x1cb1486, ftLastAccessTime.dwLowDateTime=0x80aa51d0, ftLastAccessTime.dwHighDateTime=0x1cb1486, ftLastWriteTime.dwLowDateTime=0x4a6d3200, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x5061, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1 [0061.723] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d6a0 | out: lpFindFileData=0x12d6a0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x749b0240, ftCreationTime.dwHighDateTime=0x1cb1486, ftLastAccessTime.dwLowDateTime=0x749b0240, ftLastAccessTime.dwHighDateTime=0x1cb1486, ftLastWriteTime.dwLowDateTime=0x46a46a30, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0xb9fa2f7, dwReserved0=0x0, dwReserved1=0x0, cFileName="VisiorWW.cab", cAlternateFileName="")) returned 1 [0061.723] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d6a0 | out: lpFindFileData=0x12d6a0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x80711960, ftCreationTime.dwHighDateTime=0x1cb1486, ftLastAccessTime.dwLowDateTime=0x80711960, ftLastAccessTime.dwHighDateTime=0x1cb1486, ftLastWriteTime.dwLowDateTime=0x468ee660, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0xb80800, dwReserved0=0x0, dwReserved1=0x0, cFileName="VisiorWW.msi", cAlternateFileName="")) returned 1 [0061.723] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d6a0 | out: lpFindFileData=0x12d6a0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x80b17dc0, ftCreationTime.dwHighDateTime=0x1cb1486, ftLastAccessTime.dwLowDateTime=0x80b17dc0, ftLastAccessTime.dwHighDateTime=0x1cb1486, ftLastWriteTime.dwLowDateTime=0x468a2b70, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x2213, dwReserved0=0x0, dwReserved1=0x0, cFileName="VisiorWW.xml", cAlternateFileName="")) returned 1 [0061.723] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d6a0 | out: lpFindFileData=0x12d6a0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x80b17dc0, ftCreationTime.dwHighDateTime=0x1cb1486, ftLastAccessTime.dwLowDateTime=0x80b17dc0, ftLastAccessTime.dwHighDateTime=0x1cb1486, ftLastWriteTime.dwLowDateTime=0x468a2b70, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x2213, dwReserved0=0x0, dwReserved1=0x0, cFileName="VisiorWW.xml", cAlternateFileName="")) returned 0 [0061.723] FindClose (in: hFindFile=0x1af3b6b0 | out: hFindFile=0x1af3b6b0) returned 1 [0061.723] SetErrorMode (uMode=0x0) returned 0x1 [0061.723] GetFullPathNameW (in: lpFileName="C:\\PerfLogs", nBufferLength=0x105, lpBuffer=0x12d510, lpFilePart=0x0 | out: lpBuffer="C:\\PerfLogs", lpFilePart=0x0) returned 0xb [0061.724] SetErrorMode (uMode=0x1) returned 0x0 [0062.453] FindFirstFileW (in: lpFileName="C:\\PerfLogs\\*", lpFindFileData=0x12d6b0 | out: lpFindFileData=0x12d6b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd72e458, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd72e458, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd72e458, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1af3b6b0 [0062.455] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d6c0 | out: lpFindFileData=0x12d6c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd72e458, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd72e458, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd72e458, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0062.456] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d6c0 | out: lpFindFileData=0x12d6c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd72e458, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd72e458, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xbbba4afc, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Admin", cAlternateFileName="")) returned 1 [0062.456] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d6c0 | out: lpFindFileData=0x12d6c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd72e458, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd72e458, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xbbba4afc, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Admin", cAlternateFileName="")) returned 0 [0062.457] FindClose (in: hFindFile=0x1af3b6b0 | out: hFindFile=0x1af3b6b0) returned 1 [0062.457] SetErrorMode (uMode=0x0) returned 0x1 [0062.459] GetFullPathNameW (in: lpFileName="C:\\PerfLogs\\Decrypt Instructions.txt", nBufferLength=0x105, lpBuffer=0x12d3c0, lpFilePart=0x0 | out: lpBuffer="C:\\PerfLogs\\Decrypt Instructions.txt", lpFilePart=0x0) returned 0x24 [0062.459] SetErrorMode (uMode=0x1) returned 0x0 [0062.459] CreateFileW (lpFileName="C:\\PerfLogs\\Decrypt Instructions.txt" (normalized: "c:\\perflogs\\decrypt instructions.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1e8 [0062.461] GetFileType (hFile=0x1e8) returned 0x1 [0062.461] SetErrorMode (uMode=0x0) returned 0x1 [0062.461] GetFileType (hFile=0x1e8) returned 0x1 [0062.461] WriteFile (in: hFile=0x1e8, lpBuffer=0x27e2b58*, nNumberOfBytesToWrite=0x773, lpNumberOfBytesWritten=0x12d928, lpOverlapped=0x0 | out: lpBuffer=0x27e2b58*, lpNumberOfBytesWritten=0x12d928*=0x773, lpOverlapped=0x0) returned 1 [0062.463] CloseHandle (hObject=0x1e8) returned 1 [0062.463] GetFullPathNameW (in: lpFileName="C:\\PerfLogs", nBufferLength=0x105, lpBuffer=0x12d5b0, lpFilePart=0x0 | out: lpBuffer="C:\\PerfLogs", lpFilePart=0x0) returned 0xb [0062.463] SetErrorMode (uMode=0x1) returned 0x0 [0062.463] FindFirstFileW (in: lpFileName="C:\\PerfLogs\\*", lpFindFileData=0x12d750 | out: lpFindFileData=0x12d750*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd72e458, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x454ee550, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x454ee550, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1af3b6b0 [0062.464] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d760 | out: lpFindFileData=0x12d760*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd72e458, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x454ee550, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x454ee550, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0062.464] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d760 | out: lpFindFileData=0x12d760*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd72e458, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd72e458, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xbbba4afc, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Admin", cAlternateFileName="")) returned 1 [0062.464] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d760 | out: lpFindFileData=0x12d760*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x454ee550, ftCreationTime.dwHighDateTime=0x1d5e786, ftLastAccessTime.dwLowDateTime=0x454ee550, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x454ee550, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x773, dwReserved0=0x0, dwReserved1=0x0, cFileName="Decrypt Instructions.txt", cAlternateFileName="DECRYP~1.TXT")) returned 1 [0062.464] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d760 | out: lpFindFileData=0x12d760*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x454ee550, ftCreationTime.dwHighDateTime=0x1d5e786, ftLastAccessTime.dwLowDateTime=0x454ee550, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x454ee550, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x773, dwReserved0=0x0, dwReserved1=0x0, cFileName="Decrypt Instructions.txt", cAlternateFileName="DECRYP~1.TXT")) returned 0 [0062.464] FindClose (in: hFindFile=0x1af3b6b0 | out: hFindFile=0x1af3b6b0) returned 1 [0062.464] SetErrorMode (uMode=0x0) returned 0x1 [0062.464] GetFullPathNameW (in: lpFileName="C:\\PerfLogs\\Admin", nBufferLength=0x105, lpBuffer=0x12d4b0, lpFilePart=0x0 | out: lpBuffer="C:\\PerfLogs\\Admin", lpFilePart=0x0) returned 0x11 [0062.465] SetErrorMode (uMode=0x1) returned 0x0 [0062.465] FindFirstFileW (in: lpFileName="C:\\PerfLogs\\Admin\\*", lpFindFileData=0x12d650 | out: lpFindFileData=0x12d650*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd72e458, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd72e458, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xbbba4afc, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1af3b6b0 [0062.465] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd72e458, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd72e458, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xbbba4afc, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0062.465] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd72e458, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd72e458, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xbbba4afc, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0062.465] FindClose (in: hFindFile=0x1af3b6b0 | out: hFindFile=0x1af3b6b0) returned 1 [0062.465] SetErrorMode (uMode=0x0) returned 0x1 [0062.466] GetFullPathNameW (in: lpFileName="C:\\PerfLogs\\Admin\\Decrypt Instructions.txt", nBufferLength=0x105, lpBuffer=0x12d360, lpFilePart=0x0 | out: lpBuffer="C:\\PerfLogs\\Admin\\Decrypt Instructions.txt", lpFilePart=0x0) returned 0x2a [0062.466] SetErrorMode (uMode=0x1) returned 0x0 [0062.466] CreateFileW (lpFileName="C:\\PerfLogs\\Admin\\Decrypt Instructions.txt" (normalized: "c:\\perflogs\\admin\\decrypt instructions.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1e8 [0062.466] GetFileType (hFile=0x1e8) returned 0x1 [0062.466] SetErrorMode (uMode=0x0) returned 0x1 [0062.467] GetFileType (hFile=0x1e8) returned 0x1 [0062.467] WriteFile (in: hFile=0x1e8, lpBuffer=0x27e8b58*, nNumberOfBytesToWrite=0x773, lpNumberOfBytesWritten=0x12d8c8, lpOverlapped=0x0 | out: lpBuffer=0x27e8b58*, lpNumberOfBytesWritten=0x12d8c8*=0x773, lpOverlapped=0x0) returned 1 [0062.468] CloseHandle (hObject=0x1e8) returned 1 [0062.468] GetFullPathNameW (in: lpFileName="C:\\PerfLogs\\Admin", nBufferLength=0x105, lpBuffer=0x12d550, lpFilePart=0x0 | out: lpBuffer="C:\\PerfLogs\\Admin", lpFilePart=0x0) returned 0x11 [0062.469] SetErrorMode (uMode=0x1) returned 0x0 [0062.469] FindFirstFileW (in: lpFileName="C:\\PerfLogs\\Admin\\*", lpFindFileData=0x12d6f0 | out: lpFindFileData=0x12d6f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd72e458, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x454ee550, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x454ee550, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1af3b6b0 [0062.469] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d700 | out: lpFindFileData=0x12d700*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd72e458, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x454ee550, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x454ee550, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0062.469] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d700 | out: lpFindFileData=0x12d700*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x454ee550, ftCreationTime.dwHighDateTime=0x1d5e786, ftLastAccessTime.dwLowDateTime=0x454ee550, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x454ee550, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x773, dwReserved0=0x0, dwReserved1=0x0, cFileName="Decrypt Instructions.txt", cAlternateFileName="DECRYP~1.TXT")) returned 1 [0062.469] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d700 | out: lpFindFileData=0x12d700*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x454ee550, ftCreationTime.dwHighDateTime=0x1d5e786, ftLastAccessTime.dwLowDateTime=0x454ee550, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x454ee550, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x773, dwReserved0=0x0, dwReserved1=0x0, cFileName="Decrypt Instructions.txt", cAlternateFileName="DECRYP~1.TXT")) returned 0 [0062.469] FindClose (in: hFindFile=0x1af3b6b0 | out: hFindFile=0x1af3b6b0) returned 1 [0062.469] SetErrorMode (uMode=0x0) returned 0x1 [0062.469] GetFullPathNameW (in: lpFileName="C:\\Program Files", nBufferLength=0x105, lpBuffer=0x12d510, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files", lpFilePart=0x0) returned 0x10 [0062.470] SetErrorMode (uMode=0x1) returned 0x0 [0062.470] FindFirstFileW (in: lpFileName="C:\\Program Files\\*", lpFindFileData=0x12d6b0 | out: lpFindFileData=0x12d6b0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfd72e458, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xa4566e30, ftLastAccessTime.dwHighDateTime=0x1d5c60a, ftLastWriteTime.dwLowDateTime=0xa4566e30, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1af3b6b0 [0062.470] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d6c0 | out: lpFindFileData=0x12d6c0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfd72e458, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xa4566e30, ftLastAccessTime.dwHighDateTime=0x1d5c60a, ftLastWriteTime.dwLowDateTime=0xa4566e30, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0062.470] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d6c0 | out: lpFindFileData=0x12d6c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7545b2, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xa05e0310, ftLastAccessTime.dwHighDateTime=0x1d5c60a, ftLastWriteTime.dwLowDateTime=0xa05e0310, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Common Files", cAlternateFileName="COMMON~1")) returned 1 [0062.470] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d6c0 | out: lpFindFileData=0x12d6c0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28ae853d, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x28ae853d, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x28ae853d, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0xae, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0062.470] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d6c0 | out: lpFindFileData=0x12d6c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x9f9d33b0, ftLastAccessTime.dwHighDateTime=0x1d5c60a, ftLastWriteTime.dwLowDateTime=0x9f9d33b0, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DVD Maker", cAlternateFileName="DVDMAK~1")) returned 1 [0062.470] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d6c0 | out: lpFindFileData=0x12d6c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd885082, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xa056def0, ftLastAccessTime.dwHighDateTime=0x1d5c60a, ftLastWriteTime.dwLowDateTime=0xa056def0, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Internet Explorer", cAlternateFileName="INTERN~1")) returned 1 [0062.470] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d6c0 | out: lpFindFileData=0x12d6c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa1d4a90, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa1d4a90, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfa1d4a90, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Analysis Services", cAlternateFileName="MICROS~2")) returned 1 [0062.470] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d6c0 | out: lpFindFileData=0x12d6c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee2ce510, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x9f9d33b0, ftLastAccessTime.dwHighDateTime=0x1d5c60a, ftLastWriteTime.dwLowDateTime=0x9f9d33b0, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Office", cAlternateFileName="MICROS~1")) returned 1 [0062.471] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d6c0 | out: lpFindFileData=0x12d6c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e54b70, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x9f9d33b0, ftLastAccessTime.dwHighDateTime=0x1d5c60a, ftLastWriteTime.dwLowDateTime=0x9f9d33b0, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft SQL Server Compact Edition", cAlternateFileName="MICROS~3")) returned 1 [0062.471] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d6c0 | out: lpFindFileData=0x12d6c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e7acd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x50e7acd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x50e7acd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Sync Framework", cAlternateFileName="MICROS~4")) returned 1 [0062.471] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d6c0 | out: lpFindFileData=0x12d6c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x594863b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x594863b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x594863b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Synchronization Services", cAlternateFileName="MID7C0~1")) returned 1 [0062.471] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d6c0 | out: lpFindFileData=0x12d6c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xa0547d90, ftLastAccessTime.dwHighDateTime=0x1d5c60a, ftLastWriteTime.dwLowDateTime=0xa0547d90, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSBuild", cAlternateFileName="")) returned 1 [0062.471] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d6c0 | out: lpFindFileData=0x12d6c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xa10704b0, ftLastAccessTime.dwHighDateTime=0x1d5c60a, ftLastWriteTime.dwLowDateTime=0xa10704b0, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reference Assemblies", cAlternateFileName="REFERE~1")) returned 1 [0062.471] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d6c0 | out: lpFindFileData=0x12d6c0*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x4232b3dd, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x4232b3dd, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x4232b3dd, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Uninstall Information", cAlternateFileName="UNINST~1")) returned 1 [0062.471] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d6c0 | out: lpFindFileData=0x12d6c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xa0594050, ftLastAccessTime.dwHighDateTime=0x1d5c60a, ftLastWriteTime.dwLowDateTime=0xa0594050, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Defender", cAlternateFileName="WINDOW~3")) returned 1 [0062.471] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d6c0 | out: lpFindFileData=0x12d6c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9e177d26, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xa10704b0, ftLastAccessTime.dwHighDateTime=0x1d5c60a, ftLastWriteTime.dwLowDateTime=0xa10704b0, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Journal", cAlternateFileName="WI0FCF~1")) returned 1 [0062.471] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d6c0 | out: lpFindFileData=0x12d6c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd885082, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xa05e0310, ftLastAccessTime.dwHighDateTime=0x1d5c60a, ftLastWriteTime.dwLowDateTime=0xa05e0310, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Mail", cAlternateFileName="WINDOW~1")) returned 1 [0062.471] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d6c0 | out: lpFindFileData=0x12d6c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xa056def0, ftLastAccessTime.dwHighDateTime=0x1d5c60a, ftLastWriteTime.dwLowDateTime=0xa056def0, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Media Player", cAlternateFileName="WI54FB~1")) returned 1 [0062.471] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d6c0 | out: lpFindFileData=0x12d6c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8ab1dc, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x9f9870f0, ftLastAccessTime.dwHighDateTime=0x1d5c60a, ftLastWriteTime.dwLowDateTime=0x9f9870f0, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows NT", cAlternateFileName="WINDOW~2")) returned 1 [0062.471] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d6c0 | out: lpFindFileData=0x12d6c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xa0594050, ftLastAccessTime.dwHighDateTime=0x1d5c60a, ftLastWriteTime.dwLowDateTime=0xa0594050, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Photo Viewer", cAlternateFileName="WINDOW~4")) returned 1 [0062.471] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d6c0 | out: lpFindFileData=0x12d6c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x987bf1ac, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x987bf1ac, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Portable Devices", cAlternateFileName="WIBFE5~1")) returned 1 [0062.472] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d6c0 | out: lpFindFileData=0x12d6c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xa05ba1b0, ftLastAccessTime.dwHighDateTime=0x1d5c60a, ftLastWriteTime.dwLowDateTime=0xa05ba1b0, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Sidebar", cAlternateFileName="WI4223~1")) returned 1 [0062.472] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d6c0 | out: lpFindFileData=0x12d6c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xa05ba1b0, ftLastAccessTime.dwHighDateTime=0x1d5c60a, ftLastWriteTime.dwLowDateTime=0xa05ba1b0, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Sidebar", cAlternateFileName="WI4223~1")) returned 0 [0062.472] FindClose (in: hFindFile=0x1af3b6b0 | out: hFindFile=0x1af3b6b0) returned 1 [0062.472] SetErrorMode (uMode=0x0) returned 0x1 [0062.474] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Decrypt Instructions.txt", nBufferLength=0x105, lpBuffer=0x12d3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Decrypt Instructions.txt", lpFilePart=0x0) returned 0x29 [0062.474] SetErrorMode (uMode=0x1) returned 0x0 [0062.474] CreateFileW (lpFileName="C:\\Program Files\\Decrypt Instructions.txt" (normalized: "c:\\program files\\decrypt instructions.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1e8 [0062.560] GetFileType (hFile=0x1e8) returned 0x1 [0062.560] SetErrorMode (uMode=0x0) returned 0x1 [0062.562] GetFileType (hFile=0x1e8) returned 0x1 [0062.572] WriteFile (in: hFile=0x1e8, lpBuffer=0x27ef4b8*, nNumberOfBytesToWrite=0x773, lpNumberOfBytesWritten=0x12d928, lpOverlapped=0x0 | out: lpBuffer=0x27ef4b8*, lpNumberOfBytesWritten=0x12d928*=0x773, lpOverlapped=0x0) returned 1 [0062.578] CloseHandle (hObject=0x1e8) returned 1 [0062.578] GetFullPathNameW (in: lpFileName="C:\\Program Files", nBufferLength=0x105, lpBuffer=0x12d5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files", lpFilePart=0x0) returned 0x10 [0062.578] SetErrorMode (uMode=0x1) returned 0x0 [0062.578] FindFirstFileW (in: lpFileName="C:\\Program Files\\*", lpFindFileData=0x12d750 | out: lpFindFileData=0x12d750*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfd72e458, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x455acc30, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x455acc30, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1af3b6b0 [0062.579] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d760 | out: lpFindFileData=0x12d760*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfd72e458, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x455acc30, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x455acc30, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0062.579] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d760 | out: lpFindFileData=0x12d760*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7545b2, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xa05e0310, ftLastAccessTime.dwHighDateTime=0x1d5c60a, ftLastWriteTime.dwLowDateTime=0xa05e0310, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Common Files", cAlternateFileName="COMMON~1")) returned 1 [0062.579] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d760 | out: lpFindFileData=0x12d760*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x455acc30, ftCreationTime.dwHighDateTime=0x1d5e786, ftLastAccessTime.dwLowDateTime=0x455acc30, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x455f8ef0, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x773, dwReserved0=0x0, dwReserved1=0x0, cFileName="Decrypt Instructions.txt", cAlternateFileName="DECRYP~1.TXT")) returned 1 [0062.579] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d760 | out: lpFindFileData=0x12d760*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28ae853d, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x28ae853d, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x28ae853d, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0xae, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0062.579] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d760 | out: lpFindFileData=0x12d760*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x9f9d33b0, ftLastAccessTime.dwHighDateTime=0x1d5c60a, ftLastWriteTime.dwLowDateTime=0x9f9d33b0, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DVD Maker", cAlternateFileName="DVDMAK~1")) returned 1 [0062.579] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d760 | out: lpFindFileData=0x12d760*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd885082, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xa056def0, ftLastAccessTime.dwHighDateTime=0x1d5c60a, ftLastWriteTime.dwLowDateTime=0xa056def0, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Internet Explorer", cAlternateFileName="INTERN~1")) returned 1 [0062.579] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d760 | out: lpFindFileData=0x12d760*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa1d4a90, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa1d4a90, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfa1d4a90, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Analysis Services", cAlternateFileName="MICROS~2")) returned 1 [0062.579] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d760 | out: lpFindFileData=0x12d760*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee2ce510, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x9f9d33b0, ftLastAccessTime.dwHighDateTime=0x1d5c60a, ftLastWriteTime.dwLowDateTime=0x9f9d33b0, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Office", cAlternateFileName="MICROS~1")) returned 1 [0062.579] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d760 | out: lpFindFileData=0x12d760*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e54b70, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x9f9d33b0, ftLastAccessTime.dwHighDateTime=0x1d5c60a, ftLastWriteTime.dwLowDateTime=0x9f9d33b0, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft SQL Server Compact Edition", cAlternateFileName="MICROS~3")) returned 1 [0062.579] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d760 | out: lpFindFileData=0x12d760*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e7acd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x50e7acd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x50e7acd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Sync Framework", cAlternateFileName="MICROS~4")) returned 1 [0062.579] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d760 | out: lpFindFileData=0x12d760*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x594863b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x594863b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x594863b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Synchronization Services", cAlternateFileName="MID7C0~1")) returned 1 [0062.580] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d760 | out: lpFindFileData=0x12d760*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xa0547d90, ftLastAccessTime.dwHighDateTime=0x1d5c60a, ftLastWriteTime.dwLowDateTime=0xa0547d90, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSBuild", cAlternateFileName="")) returned 1 [0062.580] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d760 | out: lpFindFileData=0x12d760*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xa10704b0, ftLastAccessTime.dwHighDateTime=0x1d5c60a, ftLastWriteTime.dwLowDateTime=0xa10704b0, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reference Assemblies", cAlternateFileName="REFERE~1")) returned 1 [0062.580] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d760 | out: lpFindFileData=0x12d760*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x4232b3dd, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x4232b3dd, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x4232b3dd, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Uninstall Information", cAlternateFileName="UNINST~1")) returned 1 [0062.580] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d760 | out: lpFindFileData=0x12d760*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xa0594050, ftLastAccessTime.dwHighDateTime=0x1d5c60a, ftLastWriteTime.dwLowDateTime=0xa0594050, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Defender", cAlternateFileName="WINDOW~3")) returned 1 [0062.580] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d760 | out: lpFindFileData=0x12d760*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9e177d26, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xa10704b0, ftLastAccessTime.dwHighDateTime=0x1d5c60a, ftLastWriteTime.dwLowDateTime=0xa10704b0, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Journal", cAlternateFileName="WI0FCF~1")) returned 1 [0062.580] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d760 | out: lpFindFileData=0x12d760*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd885082, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xa05e0310, ftLastAccessTime.dwHighDateTime=0x1d5c60a, ftLastWriteTime.dwLowDateTime=0xa05e0310, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Mail", cAlternateFileName="WINDOW~1")) returned 1 [0062.580] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d760 | out: lpFindFileData=0x12d760*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xa056def0, ftLastAccessTime.dwHighDateTime=0x1d5c60a, ftLastWriteTime.dwLowDateTime=0xa056def0, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Media Player", cAlternateFileName="WI54FB~1")) returned 1 [0062.580] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d760 | out: lpFindFileData=0x12d760*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8ab1dc, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x9f9870f0, ftLastAccessTime.dwHighDateTime=0x1d5c60a, ftLastWriteTime.dwLowDateTime=0x9f9870f0, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows NT", cAlternateFileName="WINDOW~2")) returned 1 [0062.580] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d760 | out: lpFindFileData=0x12d760*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xa0594050, ftLastAccessTime.dwHighDateTime=0x1d5c60a, ftLastWriteTime.dwLowDateTime=0xa0594050, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Photo Viewer", cAlternateFileName="WINDOW~4")) returned 1 [0062.580] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d760 | out: lpFindFileData=0x12d760*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x987bf1ac, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x987bf1ac, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Portable Devices", cAlternateFileName="WIBFE5~1")) returned 1 [0062.580] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d760 | out: lpFindFileData=0x12d760*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xa05ba1b0, ftLastAccessTime.dwHighDateTime=0x1d5c60a, ftLastWriteTime.dwLowDateTime=0xa05ba1b0, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Sidebar", cAlternateFileName="WI4223~1")) returned 1 [0062.580] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d760 | out: lpFindFileData=0x12d760*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xa05ba1b0, ftLastAccessTime.dwHighDateTime=0x1d5c60a, ftLastWriteTime.dwLowDateTime=0xa05ba1b0, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Sidebar", cAlternateFileName="WI4223~1")) returned 0 [0062.581] FindClose (in: hFindFile=0x1af3b6b0 | out: hFindFile=0x1af3b6b0) returned 1 [0062.581] SetErrorMode (uMode=0x0) returned 0x1 [0062.581] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files", nBufferLength=0x105, lpBuffer=0x12d4b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files", lpFilePart=0x0) returned 0x1d [0062.581] SetErrorMode (uMode=0x1) returned 0x0 [0062.581] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\*", lpFindFileData=0x12d650 | out: lpFindFileData=0x12d650*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7545b2, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xa05e0310, ftLastAccessTime.dwHighDateTime=0x1d5c60a, ftLastWriteTime.dwLowDateTime=0xa05e0310, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1af3b6b0 [0062.581] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7545b2, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xa05e0310, ftLastAccessTime.dwHighDateTime=0x1d5c60a, ftLastWriteTime.dwLowDateTime=0xa05e0310, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0062.582] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5ce39420, ftCreationTime.dwHighDateTime=0x1d5a831, ftLastAccessTime.dwLowDateTime=0xdaa971d0, ftLastAccessTime.dwHighDateTime=0x1d580c8, ftLastWriteTime.dwLowDateTime=0xdaa971d0, ftLastWriteTime.dwHighDateTime=0x1d580c8, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x0, dwReserved1=0x0, cFileName="accupos.exe", cAlternateFileName="")) returned 1 [0062.582] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x770c1e60, ftCreationTime.dwHighDateTime=0x1d560f3, ftLastAccessTime.dwLowDateTime=0x24e5ef10, ftLastAccessTime.dwHighDateTime=0x1d5419c, ftLastWriteTime.dwLowDateTime=0x24e5ef10, ftLastWriteTime.dwHighDateTime=0x1d5419c, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x0, dwReserved1=0x0, cFileName="bitkinex.exe", cAlternateFileName="")) returned 1 [0062.582] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x69da35f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x69dc9750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x69dc9750, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DESIGNER", cAlternateFileName="")) returned 1 [0062.582] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8201e3f0, ftCreationTime.dwHighDateTime=0x1d5893d, ftLastAccessTime.dwLowDateTime=0x2ff47b20, ftLastAccessTime.dwHighDateTime=0x1d58e35, ftLastWriteTime.dwLowDateTime=0x2ff47b20, ftLastWriteTime.dwHighDateTime=0x1d58e35, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x0, dwReserved1=0x0, cFileName="edcsvr.exe", cAlternateFileName="")) returned 1 [0062.582] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7545b2, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x81afcd40, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x81afcd40, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Shared", cAlternateFileName="MICROS~1")) returned 1 [0062.582] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd85ef28, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd85ef28, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd85ef28, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services", cAlternateFileName="")) returned 1 [0062.582] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd85ef28, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd85ef28, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd85ef28, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SpeechEngines", cAlternateFileName="SPEECH~1")) returned 1 [0062.582] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd85ef28, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xf53e90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf53e90, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="System", cAlternateFileName="")) returned 1 [0062.582] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd85ef28, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xf53e90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf53e90, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="System", cAlternateFileName="")) returned 0 [0062.582] FindClose (in: hFindFile=0x1af3b6b0 | out: hFindFile=0x1af3b6b0) returned 1 [0062.582] SetErrorMode (uMode=0x0) returned 0x1 [0062.583] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Decrypt Instructions.txt", nBufferLength=0x105, lpBuffer=0x12d360, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Decrypt Instructions.txt", lpFilePart=0x0) returned 0x36 [0062.584] SetErrorMode (uMode=0x1) returned 0x0 [0062.584] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Decrypt Instructions.txt" (normalized: "c:\\program files\\common files\\decrypt instructions.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1e8 [0062.584] GetFileType (hFile=0x1e8) returned 0x1 [0062.584] SetErrorMode (uMode=0x0) returned 0x1 [0062.584] GetFileType (hFile=0x1e8) returned 0x1 [0062.585] WriteFile (in: hFile=0x1e8, lpBuffer=0x27f7258*, nNumberOfBytesToWrite=0x773, lpNumberOfBytesWritten=0x12d8c8, lpOverlapped=0x0 | out: lpBuffer=0x27f7258*, lpNumberOfBytesWritten=0x12d8c8*=0x773, lpOverlapped=0x0) returned 1 [0062.586] CloseHandle (hObject=0x1e8) returned 1 [0062.586] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files", nBufferLength=0x105, lpBuffer=0x12d550, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files", lpFilePart=0x0) returned 0x1d [0062.586] SetErrorMode (uMode=0x1) returned 0x0 [0062.586] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\*", lpFindFileData=0x12d6f0 | out: lpFindFileData=0x12d6f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7545b2, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x4561f050, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x4561f050, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1af3b6b0 [0062.587] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d700 | out: lpFindFileData=0x12d700*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7545b2, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x4561f050, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x4561f050, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0062.587] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d700 | out: lpFindFileData=0x12d700*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5ce39420, ftCreationTime.dwHighDateTime=0x1d5a831, ftLastAccessTime.dwLowDateTime=0xdaa971d0, ftLastAccessTime.dwHighDateTime=0x1d580c8, ftLastWriteTime.dwLowDateTime=0xdaa971d0, ftLastWriteTime.dwHighDateTime=0x1d580c8, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x0, dwReserved1=0x0, cFileName="accupos.exe", cAlternateFileName="")) returned 1 [0062.587] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d700 | out: lpFindFileData=0x12d700*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x770c1e60, ftCreationTime.dwHighDateTime=0x1d560f3, ftLastAccessTime.dwLowDateTime=0x24e5ef10, ftLastAccessTime.dwHighDateTime=0x1d5419c, ftLastWriteTime.dwLowDateTime=0x24e5ef10, ftLastWriteTime.dwHighDateTime=0x1d5419c, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x0, dwReserved1=0x0, cFileName="bitkinex.exe", cAlternateFileName="")) returned 1 [0062.587] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d700 | out: lpFindFileData=0x12d700*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4561f050, ftCreationTime.dwHighDateTime=0x1d5e786, ftLastAccessTime.dwLowDateTime=0x4561f050, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x4561f050, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x773, dwReserved0=0x0, dwReserved1=0x0, cFileName="Decrypt Instructions.txt", cAlternateFileName="DECRYP~1.TXT")) returned 1 [0062.587] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d700 | out: lpFindFileData=0x12d700*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x69da35f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x69dc9750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x69dc9750, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DESIGNER", cAlternateFileName="")) returned 1 [0062.587] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d700 | out: lpFindFileData=0x12d700*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8201e3f0, ftCreationTime.dwHighDateTime=0x1d5893d, ftLastAccessTime.dwLowDateTime=0x2ff47b20, ftLastAccessTime.dwHighDateTime=0x1d58e35, ftLastWriteTime.dwLowDateTime=0x2ff47b20, ftLastWriteTime.dwHighDateTime=0x1d58e35, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x0, dwReserved1=0x0, cFileName="edcsvr.exe", cAlternateFileName="")) returned 1 [0062.587] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d700 | out: lpFindFileData=0x12d700*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7545b2, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x81afcd40, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x81afcd40, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Shared", cAlternateFileName="MICROS~1")) returned 1 [0062.587] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d700 | out: lpFindFileData=0x12d700*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd85ef28, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd85ef28, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd85ef28, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services", cAlternateFileName="")) returned 1 [0062.587] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d700 | out: lpFindFileData=0x12d700*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd85ef28, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd85ef28, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd85ef28, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SpeechEngines", cAlternateFileName="SPEECH~1")) returned 1 [0062.587] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d700 | out: lpFindFileData=0x12d700*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd85ef28, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xf53e90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf53e90, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="System", cAlternateFileName="")) returned 1 [0062.587] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d700 | out: lpFindFileData=0x12d700*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd85ef28, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xf53e90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf53e90, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="System", cAlternateFileName="")) returned 0 [0062.587] FindClose (in: hFindFile=0x1af3b6b0 | out: hFindFile=0x1af3b6b0) returned 1 [0062.588] SetErrorMode (uMode=0x0) returned 0x1 [0062.588] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\DESIGNER", nBufferLength=0x105, lpBuffer=0x12d450, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\DESIGNER", lpFilePart=0x0) returned 0x26 [0062.588] SetErrorMode (uMode=0x1) returned 0x0 [0062.588] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\DESIGNER\\*", lpFindFileData=0x12d5f0 | out: lpFindFileData=0x12d5f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x69da35f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x69dc9750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x69dc9750, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1af3b6b0 [0062.589] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d600 | out: lpFindFileData=0x12d600*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x69da35f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x69dc9750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x69dc9750, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0062.589] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d600 | out: lpFindFileData=0x12d600*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc6accc00, ftCreationTime.dwHighDateTime=0x1ca8d25, ftLastAccessTime.dwLowDateTime=0x69dc9750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc6accc00, ftLastWriteTime.dwHighDateTime=0x1ca8d25, nFileSizeHigh=0x0, nFileSizeLow=0x18340, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSADDNDR.DLL", cAlternateFileName="")) returned 1 [0062.589] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d600 | out: lpFindFileData=0x12d600*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc6accc00, ftCreationTime.dwHighDateTime=0x1ca8d25, ftLastAccessTime.dwLowDateTime=0x69dc9750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc6accc00, ftLastWriteTime.dwHighDateTime=0x1ca8d25, nFileSizeHigh=0x0, nFileSizeLow=0x18340, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSADDNDR.DLL", cAlternateFileName="")) returned 0 [0062.589] FindClose (in: hFindFile=0x1af3b6b0 | out: hFindFile=0x1af3b6b0) returned 1 [0062.589] SetErrorMode (uMode=0x0) returned 0x1 [0062.590] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\DESIGNER\\Decrypt Instructions.txt", nBufferLength=0x105, lpBuffer=0x12d300, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\DESIGNER\\Decrypt Instructions.txt", lpFilePart=0x0) returned 0x3f [0062.590] SetErrorMode (uMode=0x1) returned 0x0 [0062.590] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\DESIGNER\\Decrypt Instructions.txt" (normalized: "c:\\program files\\common files\\designer\\decrypt instructions.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1e8 [0062.590] GetFileType (hFile=0x1e8) returned 0x1 [0062.590] SetErrorMode (uMode=0x0) returned 0x1 [0062.590] GetFileType (hFile=0x1e8) returned 0x1 [0062.591] WriteFile (in: hFile=0x1e8, lpBuffer=0x27fdd40*, nNumberOfBytesToWrite=0x773, lpNumberOfBytesWritten=0x12d868, lpOverlapped=0x0 | out: lpBuffer=0x27fdd40*, lpNumberOfBytesWritten=0x12d868*=0x773, lpOverlapped=0x0) returned 1 [0062.592] CloseHandle (hObject=0x1e8) returned 1 [0062.592] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\DESIGNER", nBufferLength=0x105, lpBuffer=0x12d4f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\DESIGNER", lpFilePart=0x0) returned 0x26 [0062.592] SetErrorMode (uMode=0x1) returned 0x0 [0062.592] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\DESIGNER\\*", lpFindFileData=0x12d690 | out: lpFindFileData=0x12d690*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x69da35f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x4561f050, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x4561f050, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1af3b6b0 [0062.593] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d6a0 | out: lpFindFileData=0x12d6a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x69da35f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x4561f050, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x4561f050, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0062.593] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d6a0 | out: lpFindFileData=0x12d6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4561f050, ftCreationTime.dwHighDateTime=0x1d5e786, ftLastAccessTime.dwLowDateTime=0x4561f050, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x4561f050, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x773, dwReserved0=0x0, dwReserved1=0x0, cFileName="Decrypt Instructions.txt", cAlternateFileName="DECRYP~1.TXT")) returned 1 [0062.593] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d6a0 | out: lpFindFileData=0x12d6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc6accc00, ftCreationTime.dwHighDateTime=0x1ca8d25, ftLastAccessTime.dwLowDateTime=0x69dc9750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc6accc00, ftLastWriteTime.dwHighDateTime=0x1ca8d25, nFileSizeHigh=0x0, nFileSizeLow=0x18340, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSADDNDR.DLL", cAlternateFileName="")) returned 1 [0062.593] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d6a0 | out: lpFindFileData=0x12d6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc6accc00, ftCreationTime.dwHighDateTime=0x1ca8d25, ftLastAccessTime.dwLowDateTime=0x69dc9750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc6accc00, ftLastWriteTime.dwHighDateTime=0x1ca8d25, nFileSizeHigh=0x0, nFileSizeLow=0x18340, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSADDNDR.DLL", cAlternateFileName="")) returned 0 [0062.593] FindClose (in: hFindFile=0x1af3b6b0 | out: hFindFile=0x1af3b6b0) returned 1 [0062.593] SetErrorMode (uMode=0x0) returned 0x1 [0062.593] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared", nBufferLength=0x105, lpBuffer=0x12d450, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared", lpFilePart=0x0) returned 0x2e [0062.593] SetErrorMode (uMode=0x1) returned 0x0 [0062.594] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\*", lpFindFileData=0x12d5f0 | out: lpFindFileData=0x12d5f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7545b2, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x81afcd40, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x81afcd40, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1af3b6b0 [0062.594] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d600 | out: lpFindFileData=0x12d600*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7545b2, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x81afcd40, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x81afcd40, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0062.594] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d600 | out: lpFindFileData=0x12d600*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51e19d30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xdbe166c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xdbe166c0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DW", cAlternateFileName="")) returned 1 [0062.594] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d600 | out: lpFindFileData=0x12d600*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed38550, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeef015d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeef015d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="EQUATION", cAlternateFileName="")) returned 1 [0062.594] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d600 | out: lpFindFileData=0x12d600*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x58c7d970, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x58c7d970, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x58c7d970, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="EURO", cAlternateFileName="")) returned 1 [0062.594] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d600 | out: lpFindFileData=0x12d600*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5969b6f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xd9df3dc0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd9df3dc0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Filters", cAlternateFileName="")) returned 1 [0062.594] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d600 | out: lpFindFileData=0x12d600*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec79e70, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xc25b4860, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xc25b4860, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="GRPHFLT", cAlternateFileName="")) returned 1 [0062.594] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d600 | out: lpFindFileData=0x12d600*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee282250, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x61073d10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x61073d10, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Help", cAlternateFileName="")) returned 1 [0062.594] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d600 | out: lpFindFileData=0x12d600*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7545b2, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x9e0df36a, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9e0df36a, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ink", cAlternateFileName="")) returned 1 [0062.594] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d600 | out: lpFindFileData=0x12d600*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x69dc9750, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x69dc9750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x69dc9750, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSClientDataMgr", cAlternateFileName="MSCLIE~1")) returned 1 [0062.595] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d600 | out: lpFindFileData=0x12d600*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1eab37af, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSInfo", cAlternateFileName="")) returned 1 [0062.595] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d600 | out: lpFindFileData=0x12d600*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee282250, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xe5d93940, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xe5d93940, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="OFFICE14", cAlternateFileName="")) returned 1 [0062.595] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d600 | out: lpFindFileData=0x12d600*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e54b70, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6c23c830, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6c23c830, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="OfficeSoftwareProtectionPlatform", cAlternateFileName="OFFICE~1")) returned 1 [0062.595] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d600 | out: lpFindFileData=0x12d600*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5b0da70, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x69e61cd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x69e61cd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PROOF", cAlternateFileName="")) returned 1 [0062.595] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d600 | out: lpFindFileData=0x12d600*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed123f0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xd5807780, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd5807780, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Smart Tag", cAlternateFileName="SMARTT~1")) returned 1 [0062.595] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d600 | out: lpFindFileData=0x12d600*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeef4d890, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeef4d890, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeef4d890, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Source Engine", cAlternateFileName="SOURCE~1")) returned 1 [0062.595] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d600 | out: lpFindFileData=0x12d600*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd85ef28, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x9e177d26, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9e177d26, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Stationery", cAlternateFileName="STATIO~1")) returned 1 [0062.595] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d600 | out: lpFindFileData=0x12d600*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xcf4f23c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xcf4f23c0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="TextConv", cAlternateFileName="")) returned 1 [0062.595] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d600 | out: lpFindFileData=0x12d600*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x512f1610, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="THEMES14", cAlternateFileName="")) returned 1 [0062.595] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d600 | out: lpFindFileData=0x12d600*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x54a7f50, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x69dc9750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x69dc9750, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="TRANSLAT", cAlternateFileName="")) returned 1 [0062.595] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d600 | out: lpFindFileData=0x12d600*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1eab37af, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Triedit", cAlternateFileName="")) returned 1 [0062.595] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d600 | out: lpFindFileData=0x12d600*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeedaa970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeedaa970, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeedaa970, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="VBA", cAlternateFileName="")) returned 1 [0062.595] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d600 | out: lpFindFileData=0x12d600*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbd2c6940, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xd250e300, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xd250e300, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="VC", cAlternateFileName="")) returned 1 [0062.596] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d600 | out: lpFindFileData=0x12d600*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x803feff7, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x803feff7, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="VGX", cAlternateFileName="")) returned 1 [0062.596] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d600 | out: lpFindFileData=0x12d600*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81afcd40, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x81afcd40, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x81afcd40, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Visio Shared", cAlternateFileName="VISIOS~1")) returned 1 [0062.596] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d600 | out: lpFindFileData=0x12d600*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3a42070, ftCreationTime.dwHighDateTime=0x1d2dda2, ftLastAccessTime.dwLowDateTime=0xd6cdb800, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd6cdb800, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="VSTO", cAlternateFileName="")) returned 1 [0062.596] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d600 | out: lpFindFileData=0x12d600*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeeb5310, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x6a02ad50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6a02ad50, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Web Folders", cAlternateFileName="WEBFOL~1")) returned 1 [0062.596] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d600 | out: lpFindFileData=0x12d600*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeedaa970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeedaa970, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeedaa970, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Web Server Extensions", cAlternateFileName="WEBSER~1")) returned 1 [0062.596] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d600 | out: lpFindFileData=0x12d600*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeedaa970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeedaa970, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeedaa970, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Web Server Extensions", cAlternateFileName="WEBSER~1")) returned 0 [0062.596] FindClose (in: hFindFile=0x1af3b6b0 | out: hFindFile=0x1af3b6b0) returned 1 [0062.596] SetErrorMode (uMode=0x0) returned 0x1 [0062.596] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Decrypt Instructions.txt", nBufferLength=0x105, lpBuffer=0x12d300, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\Decrypt Instructions.txt", lpFilePart=0x0) returned 0x47 [0062.597] SetErrorMode (uMode=0x1) returned 0x0 [0062.597] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Decrypt Instructions.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\decrypt instructions.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1e8 [0062.597] GetFileType (hFile=0x1e8) returned 0x1 [0063.058] SetErrorMode (uMode=0x0) returned 0x1 [0063.061] GetFileType (hFile=0x1e8) returned 0x1 [0063.063] WriteFile (in: hFile=0x1e8, lpBuffer=0x2804388*, nNumberOfBytesToWrite=0x773, lpNumberOfBytesWritten=0x12d868, lpOverlapped=0x0 | out: lpBuffer=0x2804388*, lpNumberOfBytesWritten=0x12d868*=0x773, lpOverlapped=0x0) returned 1 [0063.074] CloseHandle (hObject=0x1e8) returned 1 [0063.074] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared", nBufferLength=0x105, lpBuffer=0x12d4f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared", lpFilePart=0x0) returned 0x2e [0063.074] SetErrorMode (uMode=0x1) returned 0x0 [0063.074] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\*", lpFindFileData=0x12d690 | out: lpFindFileData=0x12d690*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7545b2, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x4561f050, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x4561f050, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1af3b6b0 [0063.074] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d6a0 | out: lpFindFileData=0x12d6a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7545b2, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x4561f050, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x4561f050, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0063.075] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d6a0 | out: lpFindFileData=0x12d6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4561f050, ftCreationTime.dwHighDateTime=0x1d5e786, ftLastAccessTime.dwLowDateTime=0x4561f050, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x45abbaf0, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x773, dwReserved0=0x0, dwReserved1=0x0, cFileName="Decrypt Instructions.txt", cAlternateFileName="DECRYP~1.TXT")) returned 1 [0063.075] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d6a0 | out: lpFindFileData=0x12d6a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51e19d30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xdbe166c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xdbe166c0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DW", cAlternateFileName="")) returned 1 [0063.075] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d6a0 | out: lpFindFileData=0x12d6a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed38550, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeef015d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeef015d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="EQUATION", cAlternateFileName="")) returned 1 [0063.075] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d6a0 | out: lpFindFileData=0x12d6a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x58c7d970, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x58c7d970, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x58c7d970, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="EURO", cAlternateFileName="")) returned 1 [0063.075] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d6a0 | out: lpFindFileData=0x12d6a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5969b6f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xd9df3dc0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd9df3dc0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Filters", cAlternateFileName="")) returned 1 [0063.075] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d6a0 | out: lpFindFileData=0x12d6a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec79e70, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xc25b4860, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xc25b4860, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="GRPHFLT", cAlternateFileName="")) returned 1 [0063.075] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d6a0 | out: lpFindFileData=0x12d6a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee282250, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x61073d10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x61073d10, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Help", cAlternateFileName="")) returned 1 [0063.075] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d6a0 | out: lpFindFileData=0x12d6a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7545b2, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x9e0df36a, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9e0df36a, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ink", cAlternateFileName="")) returned 1 [0063.075] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d6a0 | out: lpFindFileData=0x12d6a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x69dc9750, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x69dc9750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x69dc9750, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSClientDataMgr", cAlternateFileName="MSCLIE~1")) returned 1 [0063.075] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d6a0 | out: lpFindFileData=0x12d6a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1eab37af, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSInfo", cAlternateFileName="")) returned 1 [0063.075] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d6a0 | out: lpFindFileData=0x12d6a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee282250, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xe5d93940, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xe5d93940, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="OFFICE14", cAlternateFileName="")) returned 1 [0063.075] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d6a0 | out: lpFindFileData=0x12d6a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e54b70, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6c23c830, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6c23c830, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="OfficeSoftwareProtectionPlatform", cAlternateFileName="OFFICE~1")) returned 1 [0063.075] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d6a0 | out: lpFindFileData=0x12d6a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5b0da70, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x69e61cd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x69e61cd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PROOF", cAlternateFileName="")) returned 1 [0063.075] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d6a0 | out: lpFindFileData=0x12d6a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed123f0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xd5807780, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd5807780, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Smart Tag", cAlternateFileName="SMARTT~1")) returned 1 [0063.075] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d6a0 | out: lpFindFileData=0x12d6a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeef4d890, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeef4d890, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeef4d890, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Source Engine", cAlternateFileName="SOURCE~1")) returned 1 [0063.075] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d6a0 | out: lpFindFileData=0x12d6a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd85ef28, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x9e177d26, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9e177d26, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Stationery", cAlternateFileName="STATIO~1")) returned 1 [0063.076] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d6a0 | out: lpFindFileData=0x12d6a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xcf4f23c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xcf4f23c0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="TextConv", cAlternateFileName="")) returned 1 [0063.076] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d6a0 | out: lpFindFileData=0x12d6a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x512f1610, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="THEMES14", cAlternateFileName="")) returned 1 [0063.076] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d6a0 | out: lpFindFileData=0x12d6a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x54a7f50, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x69dc9750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x69dc9750, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="TRANSLAT", cAlternateFileName="")) returned 1 [0063.076] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d6a0 | out: lpFindFileData=0x12d6a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1eab37af, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Triedit", cAlternateFileName="")) returned 1 [0063.076] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d6a0 | out: lpFindFileData=0x12d6a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeedaa970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeedaa970, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeedaa970, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="VBA", cAlternateFileName="")) returned 1 [0063.076] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d6a0 | out: lpFindFileData=0x12d6a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbd2c6940, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xd250e300, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xd250e300, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="VC", cAlternateFileName="")) returned 1 [0063.076] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d6a0 | out: lpFindFileData=0x12d6a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x803feff7, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x803feff7, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="VGX", cAlternateFileName="")) returned 1 [0063.076] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d6a0 | out: lpFindFileData=0x12d6a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81afcd40, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x81afcd40, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x81afcd40, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Visio Shared", cAlternateFileName="VISIOS~1")) returned 1 [0063.076] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d6a0 | out: lpFindFileData=0x12d6a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3a42070, ftCreationTime.dwHighDateTime=0x1d2dda2, ftLastAccessTime.dwLowDateTime=0xd6cdb800, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd6cdb800, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="VSTO", cAlternateFileName="")) returned 1 [0063.076] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d6a0 | out: lpFindFileData=0x12d6a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeeb5310, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x6a02ad50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6a02ad50, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Web Folders", cAlternateFileName="WEBFOL~1")) returned 1 [0063.076] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d6a0 | out: lpFindFileData=0x12d6a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeedaa970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeedaa970, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeedaa970, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Web Server Extensions", cAlternateFileName="WEBSER~1")) returned 1 [0063.076] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d6a0 | out: lpFindFileData=0x12d6a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeedaa970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeedaa970, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeedaa970, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Web Server Extensions", cAlternateFileName="WEBSER~1")) returned 0 [0063.076] FindClose (in: hFindFile=0x1af3b6b0 | out: hFindFile=0x1af3b6b0) returned 1 [0063.076] SetErrorMode (uMode=0x0) returned 0x1 [0063.077] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\DW", nBufferLength=0x105, lpBuffer=0x12d3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\DW", lpFilePart=0x0) returned 0x31 [0063.077] SetErrorMode (uMode=0x1) returned 0x0 [0063.077] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\DW\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51e19d30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xdbe166c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xdbe166c0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1af3b6b0 [0063.080] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5a0 | out: lpFindFileData=0x12d5a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51e19d30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xdbe166c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xdbe166c0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0063.080] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5a0 | out: lpFindFileData=0x12d5a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4a0ba500, ftCreationTime.dwHighDateTime=0x1c982ad, ftLastAccessTime.dwLowDateTime=0x6086b2d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x4a0ba500, ftLastWriteTime.dwHighDateTime=0x1c982ad, nFileSizeHigh=0x0, nFileSizeLow=0x14e760, dwReserved0=0x0, dwReserved1=0x0, cFileName="DBGHELP.DLL", cAlternateFileName="")) returned 1 [0063.080] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5a0 | out: lpFindFileData=0x12d5a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f8f7000, ftCreationTime.dwHighDateTime=0x1cba06d, ftLastAccessTime.dwLowDateTime=0xdb9ec040, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x2f8f7000, ftLastWriteTime.dwHighDateTime=0x1cba06d, nFileSizeHigh=0x0, nFileSizeLow=0xf2b88, dwReserved0=0x0, dwReserved1=0x0, cFileName="DW20.EXE", cAlternateFileName="")) returned 1 [0063.080] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5a0 | out: lpFindFileData=0x12d5a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e5e4300, ftCreationTime.dwHighDateTime=0x1cba06d, ftLastAccessTime.dwLowDateTime=0xdbe62980, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x2e5e4300, ftLastWriteTime.dwHighDateTime=0x1cba06d, nFileSizeHigh=0x0, nFileSizeLow=0x99ba0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DWTRIG20.EXE", cAlternateFileName="")) returned 1 [0063.080] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5a0 | out: lpFindFileData=0x12d5a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e5e4300, ftCreationTime.dwHighDateTime=0x1cba06d, ftLastAccessTime.dwLowDateTime=0xdbe62980, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x2e5e4300, ftLastWriteTime.dwHighDateTime=0x1cba06d, nFileSizeHigh=0x0, nFileSizeLow=0x99ba0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DWTRIG20.EXE", cAlternateFileName="")) returned 0 [0063.080] FindClose (in: hFindFile=0x1af3b6b0 | out: hFindFile=0x1af3b6b0) returned 1 [0063.080] SetErrorMode (uMode=0x0) returned 0x1 [0063.081] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\DW\\Decrypt Instructions.txt", nBufferLength=0x105, lpBuffer=0x12d2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\DW\\Decrypt Instructions.txt", lpFilePart=0x0) returned 0x4a [0063.081] SetErrorMode (uMode=0x1) returned 0x0 [0063.081] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\DW\\Decrypt Instructions.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\dw\\decrypt instructions.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1e8 [0063.102] GetFileType (hFile=0x1e8) returned 0x1 [0063.102] SetErrorMode (uMode=0x0) returned 0x1 [0063.102] GetFileType (hFile=0x1e8) returned 0x1 [0063.102] WriteFile (in: hFile=0x1e8, lpBuffer=0x280cad0*, nNumberOfBytesToWrite=0x773, lpNumberOfBytesWritten=0x12d808, lpOverlapped=0x0 | out: lpBuffer=0x280cad0*, lpNumberOfBytesWritten=0x12d808*=0x773, lpOverlapped=0x0) returned 1 [0063.103] CloseHandle (hObject=0x1e8) returned 1 [0063.103] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\DW", nBufferLength=0x105, lpBuffer=0x12d490, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\DW", lpFilePart=0x0) returned 0x31 [0063.103] SetErrorMode (uMode=0x1) returned 0x0 [0063.103] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\DW\\*", lpFindFileData=0x12d630 | out: lpFindFileData=0x12d630*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51e19d30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x45b07db0, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x45b07db0, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1af3b6b0 [0063.104] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d640 | out: lpFindFileData=0x12d640*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51e19d30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x45b07db0, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x45b07db0, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0063.104] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d640 | out: lpFindFileData=0x12d640*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4a0ba500, ftCreationTime.dwHighDateTime=0x1c982ad, ftLastAccessTime.dwLowDateTime=0x6086b2d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x4a0ba500, ftLastWriteTime.dwHighDateTime=0x1c982ad, nFileSizeHigh=0x0, nFileSizeLow=0x14e760, dwReserved0=0x0, dwReserved1=0x0, cFileName="DBGHELP.DLL", cAlternateFileName="")) returned 1 [0063.104] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d640 | out: lpFindFileData=0x12d640*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x45b07db0, ftCreationTime.dwHighDateTime=0x1d5e786, ftLastAccessTime.dwLowDateTime=0x45b07db0, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x45b07db0, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x773, dwReserved0=0x0, dwReserved1=0x0, cFileName="Decrypt Instructions.txt", cAlternateFileName="DECRYP~1.TXT")) returned 1 [0063.104] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d640 | out: lpFindFileData=0x12d640*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f8f7000, ftCreationTime.dwHighDateTime=0x1cba06d, ftLastAccessTime.dwLowDateTime=0xdb9ec040, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x2f8f7000, ftLastWriteTime.dwHighDateTime=0x1cba06d, nFileSizeHigh=0x0, nFileSizeLow=0xf2b88, dwReserved0=0x0, dwReserved1=0x0, cFileName="DW20.EXE", cAlternateFileName="")) returned 1 [0063.104] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d640 | out: lpFindFileData=0x12d640*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e5e4300, ftCreationTime.dwHighDateTime=0x1cba06d, ftLastAccessTime.dwLowDateTime=0xdbe62980, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x2e5e4300, ftLastWriteTime.dwHighDateTime=0x1cba06d, nFileSizeHigh=0x0, nFileSizeLow=0x99ba0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DWTRIG20.EXE", cAlternateFileName="")) returned 1 [0063.104] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d640 | out: lpFindFileData=0x12d640*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e5e4300, ftCreationTime.dwHighDateTime=0x1cba06d, ftLastAccessTime.dwLowDateTime=0xdbe62980, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x2e5e4300, ftLastWriteTime.dwHighDateTime=0x1cba06d, nFileSizeHigh=0x0, nFileSizeLow=0x99ba0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DWTRIG20.EXE", cAlternateFileName="")) returned 0 [0063.104] FindClose (in: hFindFile=0x1af3b6b0 | out: hFindFile=0x1af3b6b0) returned 1 [0063.104] SetErrorMode (uMode=0x0) returned 0x1 [0063.104] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION", nBufferLength=0x105, lpBuffer=0x12d3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION", lpFilePart=0x0) returned 0x37 [0063.104] SetErrorMode (uMode=0x1) returned 0x0 [0063.104] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed38550, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeef015d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeef015d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1af3b6b0 [0063.105] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5a0 | out: lpFindFileData=0x12d5a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed38550, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeef015d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeef015d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0063.105] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5a0 | out: lpFindFileData=0x12d5a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed38550, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeed38550, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeed38550, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 1 [0063.105] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5a0 | out: lpFindFileData=0x12d5a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5d107e00, ftCreationTime.dwHighDateTime=0x1bb541c, ftLastAccessTime.dwLowDateTime=0xeed5e6b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x5d107e00, ftLastWriteTime.dwHighDateTime=0x1bb541c, nFileSizeHigh=0x0, nFileSizeLow=0x9fd, dwReserved0=0x0, dwReserved1=0x0, cFileName="EQNEDT32.CNT", cAlternateFileName="")) returned 1 [0063.105] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5a0 | out: lpFindFileData=0x12d5a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28305200, ftCreationTime.dwHighDateTime=0x1c2f1c2, ftLastAccessTime.dwLowDateTime=0xeed5e6b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x28305200, ftLastWriteTime.dwHighDateTime=0x1c2f1c2, nFileSizeHigh=0x0, nFileSizeLow=0x84a48, dwReserved0=0x0, dwReserved1=0x0, cFileName="EQNEDT32.EXE", cAlternateFileName="")) returned 1 [0063.105] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5a0 | out: lpFindFileData=0x12d5a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3acd3b00, ftCreationTime.dwHighDateTime=0x1c6cca0, ftLastAccessTime.dwLowDateTime=0xeed5e6b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x3acd3b00, ftLastWriteTime.dwHighDateTime=0x1c6cca0, nFileSizeHigh=0x0, nFileSizeLow=0x236, dwReserved0=0x0, dwReserved1=0x0, cFileName="eqnedt32.exe.manifest", cAlternateFileName="EQNEDT~1.MAN")) returned 1 [0063.105] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5a0 | out: lpFindFileData=0x12d5a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3bd0200, ftCreationTime.dwHighDateTime=0x1be1298, ftLastAccessTime.dwLowDateTime=0xeed5e6b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x3bd0200, ftLastWriteTime.dwHighDateTime=0x1be1298, nFileSizeHigh=0x0, nFileSizeLow=0x2b0b7, dwReserved0=0x0, dwReserved1=0x0, cFileName="EQNEDT32.HLP", cAlternateFileName="")) returned 1 [0063.105] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5a0 | out: lpFindFileData=0x12d5a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x95fd7600, ftCreationTime.dwHighDateTime=0x1bc9dc7, ftLastAccessTime.dwLowDateTime=0xeef015d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x95fd7600, ftLastWriteTime.dwHighDateTime=0x1bc9dc7, nFileSizeHigh=0x0, nFileSizeLow=0x1de8, dwReserved0=0x0, dwReserved1=0x0, cFileName="MTEXTRA.TTF", cAlternateFileName="")) returned 1 [0063.105] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5a0 | out: lpFindFileData=0x12d5a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x95fd7600, ftCreationTime.dwHighDateTime=0x1bc9dc7, ftLastAccessTime.dwLowDateTime=0xeef015d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x95fd7600, ftLastWriteTime.dwHighDateTime=0x1bc9dc7, nFileSizeHigh=0x0, nFileSizeLow=0x1de8, dwReserved0=0x0, dwReserved1=0x0, cFileName="MTEXTRA.TTF", cAlternateFileName="")) returned 0 [0063.105] FindClose (in: hFindFile=0x1af3b6b0 | out: hFindFile=0x1af3b6b0) returned 1 [0063.105] SetErrorMode (uMode=0x0) returned 0x1 [0063.106] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\Decrypt Instructions.txt", nBufferLength=0x105, lpBuffer=0x12d2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\Decrypt Instructions.txt", lpFilePart=0x0) returned 0x50 [0063.106] SetErrorMode (uMode=0x1) returned 0x0 [0063.107] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\Decrypt Instructions.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\equation\\decrypt instructions.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1e8 [0063.144] GetFileType (hFile=0x1e8) returned 0x1 [0063.144] SetErrorMode (uMode=0x0) returned 0x1 [0063.144] GetFileType (hFile=0x1e8) returned 0x1 [0063.144] WriteFile (in: hFile=0x1e8, lpBuffer=0x28136b8*, nNumberOfBytesToWrite=0x773, lpNumberOfBytesWritten=0x12d808, lpOverlapped=0x0 | out: lpBuffer=0x28136b8*, lpNumberOfBytesWritten=0x12d808*=0x773, lpOverlapped=0x0) returned 1 [0063.145] CloseHandle (hObject=0x1e8) returned 1 [0063.146] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION", nBufferLength=0x105, lpBuffer=0x12d490, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION", lpFilePart=0x0) returned 0x37 [0063.146] SetErrorMode (uMode=0x1) returned 0x0 [0063.146] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\*", lpFindFileData=0x12d630 | out: lpFindFileData=0x12d630*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed38550, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x45b07db0, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x45b07db0, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1af3b6b0 [0063.146] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d640 | out: lpFindFileData=0x12d640*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed38550, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x45b07db0, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x45b07db0, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0063.146] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d640 | out: lpFindFileData=0x12d640*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed38550, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeed38550, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeed38550, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 1 [0063.146] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d640 | out: lpFindFileData=0x12d640*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x45b07db0, ftCreationTime.dwHighDateTime=0x1d5e786, ftLastAccessTime.dwLowDateTime=0x45b07db0, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x45b7a1d0, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x773, dwReserved0=0x0, dwReserved1=0x0, cFileName="Decrypt Instructions.txt", cAlternateFileName="DECRYP~1.TXT")) returned 1 [0063.146] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d640 | out: lpFindFileData=0x12d640*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5d107e00, ftCreationTime.dwHighDateTime=0x1bb541c, ftLastAccessTime.dwLowDateTime=0xeed5e6b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x5d107e00, ftLastWriteTime.dwHighDateTime=0x1bb541c, nFileSizeHigh=0x0, nFileSizeLow=0x9fd, dwReserved0=0x0, dwReserved1=0x0, cFileName="EQNEDT32.CNT", cAlternateFileName="")) returned 1 [0063.146] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d640 | out: lpFindFileData=0x12d640*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28305200, ftCreationTime.dwHighDateTime=0x1c2f1c2, ftLastAccessTime.dwLowDateTime=0xeed5e6b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x28305200, ftLastWriteTime.dwHighDateTime=0x1c2f1c2, nFileSizeHigh=0x0, nFileSizeLow=0x84a48, dwReserved0=0x0, dwReserved1=0x0, cFileName="EQNEDT32.EXE", cAlternateFileName="")) returned 1 [0063.147] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d640 | out: lpFindFileData=0x12d640*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3acd3b00, ftCreationTime.dwHighDateTime=0x1c6cca0, ftLastAccessTime.dwLowDateTime=0xeed5e6b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x3acd3b00, ftLastWriteTime.dwHighDateTime=0x1c6cca0, nFileSizeHigh=0x0, nFileSizeLow=0x236, dwReserved0=0x0, dwReserved1=0x0, cFileName="eqnedt32.exe.manifest", cAlternateFileName="EQNEDT~1.MAN")) returned 1 [0063.147] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d640 | out: lpFindFileData=0x12d640*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3bd0200, ftCreationTime.dwHighDateTime=0x1be1298, ftLastAccessTime.dwLowDateTime=0xeed5e6b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x3bd0200, ftLastWriteTime.dwHighDateTime=0x1be1298, nFileSizeHigh=0x0, nFileSizeLow=0x2b0b7, dwReserved0=0x0, dwReserved1=0x0, cFileName="EQNEDT32.HLP", cAlternateFileName="")) returned 1 [0063.147] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d640 | out: lpFindFileData=0x12d640*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x95fd7600, ftCreationTime.dwHighDateTime=0x1bc9dc7, ftLastAccessTime.dwLowDateTime=0xeef015d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x95fd7600, ftLastWriteTime.dwHighDateTime=0x1bc9dc7, nFileSizeHigh=0x0, nFileSizeLow=0x1de8, dwReserved0=0x0, dwReserved1=0x0, cFileName="MTEXTRA.TTF", cAlternateFileName="")) returned 1 [0063.147] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d640 | out: lpFindFileData=0x12d640*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x95fd7600, ftCreationTime.dwHighDateTime=0x1bc9dc7, ftLastAccessTime.dwLowDateTime=0xeef015d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x95fd7600, ftLastWriteTime.dwHighDateTime=0x1bc9dc7, nFileSizeHigh=0x0, nFileSizeLow=0x1de8, dwReserved0=0x0, dwReserved1=0x0, cFileName="MTEXTRA.TTF", cAlternateFileName="")) returned 0 [0063.147] FindClose (in: hFindFile=0x1af3b6b0 | out: hFindFile=0x1af3b6b0) returned 1 [0063.147] SetErrorMode (uMode=0x0) returned 0x1 [0063.147] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\1033", nBufferLength=0x105, lpBuffer=0x12d390, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\1033", lpFilePart=0x0) returned 0x3c [0063.147] SetErrorMode (uMode=0x1) returned 0x0 [0063.147] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\1033\\*", lpFindFileData=0x12d530 | out: lpFindFileData=0x12d530*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed38550, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeed38550, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeed38550, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1af3b6b0 [0063.207] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed38550, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeed38550, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeed38550, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0063.207] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x723f8e00, ftCreationTime.dwHighDateTime=0x1c2e156, ftLastAccessTime.dwLowDateTime=0xeed38550, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x723f8e00, ftLastWriteTime.dwHighDateTime=0x1c2e156, nFileSizeHigh=0x0, nFileSizeLow=0xfa60, dwReserved0=0x0, dwReserved1=0x0, cFileName="EEINTL.DLL", cAlternateFileName="")) returned 1 [0063.207] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x723f8e00, ftCreationTime.dwHighDateTime=0x1c2e156, ftLastAccessTime.dwLowDateTime=0xeed38550, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x723f8e00, ftLastWriteTime.dwHighDateTime=0x1c2e156, nFileSizeHigh=0x0, nFileSizeLow=0xfa60, dwReserved0=0x0, dwReserved1=0x0, cFileName="EEINTL.DLL", cAlternateFileName="")) returned 0 [0063.207] FindClose (in: hFindFile=0x1af3b6b0 | out: hFindFile=0x1af3b6b0) returned 1 [0063.207] SetErrorMode (uMode=0x0) returned 0x1 [0063.208] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\1033\\Decrypt Instructions.txt", nBufferLength=0x105, lpBuffer=0x12d240, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\1033\\Decrypt Instructions.txt", lpFilePart=0x0) returned 0x55 [0063.208] SetErrorMode (uMode=0x1) returned 0x0 [0063.208] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\1033\\Decrypt Instructions.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\equation\\1033\\decrypt instructions.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1e8 [0063.209] GetFileType (hFile=0x1e8) returned 0x1 [0063.209] SetErrorMode (uMode=0x0) returned 0x1 [0063.209] GetFileType (hFile=0x1e8) returned 0x1 [0063.209] WriteFile (in: hFile=0x1e8, lpBuffer=0x281a1c0*, nNumberOfBytesToWrite=0x773, lpNumberOfBytesWritten=0x12d7a8, lpOverlapped=0x0 | out: lpBuffer=0x281a1c0*, lpNumberOfBytesWritten=0x12d7a8*=0x773, lpOverlapped=0x0) returned 1 [0063.210] CloseHandle (hObject=0x1e8) returned 1 [0063.210] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\1033", nBufferLength=0x105, lpBuffer=0x12d430, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\1033", lpFilePart=0x0) returned 0x3c [0063.211] SetErrorMode (uMode=0x1) returned 0x0 [0063.211] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\1033\\*", lpFindFileData=0x12d5d0 | out: lpFindFileData=0x12d5d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed38550, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x45c12750, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x45c12750, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1af3b6b0 [0063.211] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed38550, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x45c12750, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x45c12750, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0063.211] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x45c12750, ftCreationTime.dwHighDateTime=0x1d5e786, ftLastAccessTime.dwLowDateTime=0x45c12750, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x45c12750, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x773, dwReserved0=0x0, dwReserved1=0x0, cFileName="Decrypt Instructions.txt", cAlternateFileName="DECRYP~1.TXT")) returned 1 [0063.211] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x723f8e00, ftCreationTime.dwHighDateTime=0x1c2e156, ftLastAccessTime.dwLowDateTime=0xeed38550, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x723f8e00, ftLastWriteTime.dwHighDateTime=0x1c2e156, nFileSizeHigh=0x0, nFileSizeLow=0xfa60, dwReserved0=0x0, dwReserved1=0x0, cFileName="EEINTL.DLL", cAlternateFileName="")) returned 1 [0063.211] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x723f8e00, ftCreationTime.dwHighDateTime=0x1c2e156, ftLastAccessTime.dwLowDateTime=0xeed38550, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x723f8e00, ftLastWriteTime.dwHighDateTime=0x1c2e156, nFileSizeHigh=0x0, nFileSizeLow=0xfa60, dwReserved0=0x0, dwReserved1=0x0, cFileName="EEINTL.DLL", cAlternateFileName="")) returned 0 [0063.211] FindClose (in: hFindFile=0x1af3b6b0 | out: hFindFile=0x1af3b6b0) returned 1 [0063.211] SetErrorMode (uMode=0x0) returned 0x1 [0063.212] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\EURO", nBufferLength=0x105, lpBuffer=0x12d3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\EURO", lpFilePart=0x0) returned 0x33 [0063.212] SetErrorMode (uMode=0x1) returned 0x0 [0063.212] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\EURO\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x58c7d970, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x58c7d970, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x58c7d970, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1af3b6b0 [0063.255] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5a0 | out: lpFindFileData=0x12d5a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x58c7d970, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x58c7d970, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x58c7d970, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0063.255] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5a0 | out: lpFindFileData=0x12d5a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6b4ffc00, ftCreationTime.dwHighDateTime=0x1cac1f6, ftLastAccessTime.dwLowDateTime=0x58c7d970, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6b4ffc00, ftLastWriteTime.dwHighDateTime=0x1cac1f6, nFileSizeHigh=0x0, nFileSizeLow=0x7980, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOEURO.DLL", cAlternateFileName="")) returned 1 [0063.255] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5a0 | out: lpFindFileData=0x12d5a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6b4ffc00, ftCreationTime.dwHighDateTime=0x1cac1f6, ftLastAccessTime.dwLowDateTime=0x58c7d970, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6b4ffc00, ftLastWriteTime.dwHighDateTime=0x1cac1f6, nFileSizeHigh=0x0, nFileSizeLow=0x7980, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOEURO.DLL", cAlternateFileName="")) returned 0 [0063.255] FindClose (in: hFindFile=0x1af3b6b0 | out: hFindFile=0x1af3b6b0) returned 1 [0063.255] SetErrorMode (uMode=0x0) returned 0x1 [0063.256] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\EURO\\Decrypt Instructions.txt", nBufferLength=0x105, lpBuffer=0x12d2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\EURO\\Decrypt Instructions.txt", lpFilePart=0x0) returned 0x4c [0063.256] SetErrorMode (uMode=0x1) returned 0x0 [0063.256] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\EURO\\Decrypt Instructions.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\euro\\decrypt instructions.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1e8 [0063.300] GetFileType (hFile=0x1e8) returned 0x1 [0063.300] SetErrorMode (uMode=0x0) returned 0x1 [0063.300] GetFileType (hFile=0x1e8) returned 0x1 [0063.300] WriteFile (in: hFile=0x1e8, lpBuffer=0x2820728*, nNumberOfBytesToWrite=0x773, lpNumberOfBytesWritten=0x12d808, lpOverlapped=0x0 | out: lpBuffer=0x2820728*, lpNumberOfBytesWritten=0x12d808*=0x773, lpOverlapped=0x0) returned 1 [0063.302] CloseHandle (hObject=0x1e8) returned 1 [0063.302] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\EURO", nBufferLength=0x105, lpBuffer=0x12d490, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\EURO", lpFilePart=0x0) returned 0x33 [0063.302] SetErrorMode (uMode=0x1) returned 0x0 [0063.303] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\EURO\\*", lpFindFileData=0x12d630 | out: lpFindFileData=0x12d630*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x58c7d970, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x45cf6f90, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x45cf6f90, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1af3b6b0 [0063.303] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d640 | out: lpFindFileData=0x12d640*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x58c7d970, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x45cf6f90, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x45cf6f90, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0063.303] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d640 | out: lpFindFileData=0x12d640*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x45cf6f90, ftCreationTime.dwHighDateTime=0x1d5e786, ftLastAccessTime.dwLowDateTime=0x45cf6f90, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x45cf6f90, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x773, dwReserved0=0x0, dwReserved1=0x0, cFileName="Decrypt Instructions.txt", cAlternateFileName="DECRYP~1.TXT")) returned 1 [0063.303] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d640 | out: lpFindFileData=0x12d640*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6b4ffc00, ftCreationTime.dwHighDateTime=0x1cac1f6, ftLastAccessTime.dwLowDateTime=0x58c7d970, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6b4ffc00, ftLastWriteTime.dwHighDateTime=0x1cac1f6, nFileSizeHigh=0x0, nFileSizeLow=0x7980, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOEURO.DLL", cAlternateFileName="")) returned 1 [0063.303] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d640 | out: lpFindFileData=0x12d640*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6b4ffc00, ftCreationTime.dwHighDateTime=0x1cac1f6, ftLastAccessTime.dwLowDateTime=0x58c7d970, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6b4ffc00, ftLastWriteTime.dwHighDateTime=0x1cac1f6, nFileSizeHigh=0x0, nFileSizeLow=0x7980, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOEURO.DLL", cAlternateFileName="")) returned 0 [0063.303] FindClose (in: hFindFile=0x1af3b6b0 | out: hFindFile=0x1af3b6b0) returned 1 [0063.303] SetErrorMode (uMode=0x0) returned 0x1 [0063.303] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Filters", nBufferLength=0x105, lpBuffer=0x12d3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\Filters", lpFilePart=0x0) returned 0x36 [0063.304] SetErrorMode (uMode=0x1) returned 0x0 [0063.304] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Filters\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5969b6f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xd9df3dc0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd9df3dc0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1af3b6b0 [0063.311] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5a0 | out: lpFindFileData=0x12d5a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5969b6f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xd9df3dc0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd9df3dc0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0063.311] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5a0 | out: lpFindFileData=0x12d5a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e922100, ftCreationTime.dwHighDateTime=0x1caafc8, ftLastAccessTime.dwLowDateTime=0x69e61cd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x4e922100, ftLastWriteTime.dwHighDateTime=0x1caafc8, nFileSizeHigh=0x0, nFileSizeLow=0x9770, dwReserved0=0x0, dwReserved1=0x0, cFileName="msgfilt.dll", cAlternateFileName="")) returned 1 [0063.311] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5a0 | out: lpFindFileData=0x12d5a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e922100, ftCreationTime.dwHighDateTime=0x1caafc8, ftLastAccessTime.dwLowDateTime=0x6b29d7d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x4e922100, ftLastWriteTime.dwHighDateTime=0x1caafc8, nFileSizeHigh=0x0, nFileSizeLow=0x140790, dwReserved0=0x0, dwReserved1=0x0, cFileName="odffilt.dll", cAlternateFileName="")) returned 1 [0063.311] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5a0 | out: lpFindFileData=0x12d5a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e922100, ftCreationTime.dwHighDateTime=0x1caafc8, ftLastAccessTime.dwLowDateTime=0x596c1850, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x4e922100, ftLastWriteTime.dwHighDateTime=0x1caafc8, nFileSizeHigh=0x0, nFileSizeLow=0x16af90, dwReserved0=0x0, dwReserved1=0x0, cFileName="offfiltx.dll", cAlternateFileName="")) returned 1 [0063.311] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5a0 | out: lpFindFileData=0x12d5a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x46d35b00, ftCreationTime.dwHighDateTime=0x1cba077, ftLastAccessTime.dwLowDateTime=0xd9e40080, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x46d35b00, ftLastWriteTime.dwHighDateTime=0x1cba077, nFileSizeHigh=0x0, nFileSizeLow=0x206b78, dwReserved0=0x0, dwReserved1=0x0, cFileName="VISFILT.DLL", cAlternateFileName="")) returned 1 [0063.311] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5a0 | out: lpFindFileData=0x12d5a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x46d35b00, ftCreationTime.dwHighDateTime=0x1cba077, ftLastAccessTime.dwLowDateTime=0xd9e40080, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x46d35b00, ftLastWriteTime.dwHighDateTime=0x1cba077, nFileSizeHigh=0x0, nFileSizeLow=0x206b78, dwReserved0=0x0, dwReserved1=0x0, cFileName="VISFILT.DLL", cAlternateFileName="")) returned 0 [0063.312] FindClose (in: hFindFile=0x1af3b6b0 | out: hFindFile=0x1af3b6b0) returned 1 [0063.312] SetErrorMode (uMode=0x0) returned 0x1 [0063.313] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Filters\\Decrypt Instructions.txt", nBufferLength=0x105, lpBuffer=0x12d2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\Filters\\Decrypt Instructions.txt", lpFilePart=0x0) returned 0x4f [0063.313] SetErrorMode (uMode=0x1) returned 0x0 [0063.313] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Filters\\Decrypt Instructions.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\filters\\decrypt instructions.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1e8 [0063.313] GetFileType (hFile=0x1e8) returned 0x1 [0063.313] SetErrorMode (uMode=0x0) returned 0x1 [0063.313] GetFileType (hFile=0x1e8) returned 0x1 [0063.313] WriteFile (in: hFile=0x1e8, lpBuffer=0x2827088*, nNumberOfBytesToWrite=0x773, lpNumberOfBytesWritten=0x12d808, lpOverlapped=0x0 | out: lpBuffer=0x2827088*, lpNumberOfBytesWritten=0x12d808*=0x773, lpOverlapped=0x0) returned 1 [0063.314] CloseHandle (hObject=0x1e8) returned 1 [0063.315] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Filters", nBufferLength=0x105, lpBuffer=0x12d490, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\Filters", lpFilePart=0x0) returned 0x36 [0063.315] SetErrorMode (uMode=0x1) returned 0x0 [0063.315] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Filters\\*", lpFindFileData=0x12d630 | out: lpFindFileData=0x12d630*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5969b6f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x45cf6f90, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x45cf6f90, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1af3b6b0 [0063.315] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d640 | out: lpFindFileData=0x12d640*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5969b6f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x45cf6f90, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x45cf6f90, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0063.315] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d640 | out: lpFindFileData=0x12d640*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x45cf6f90, ftCreationTime.dwHighDateTime=0x1d5e786, ftLastAccessTime.dwLowDateTime=0x45cf6f90, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x45cf6f90, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x773, dwReserved0=0x0, dwReserved1=0x0, cFileName="Decrypt Instructions.txt", cAlternateFileName="DECRYP~1.TXT")) returned 1 [0063.315] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d640 | out: lpFindFileData=0x12d640*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e922100, ftCreationTime.dwHighDateTime=0x1caafc8, ftLastAccessTime.dwLowDateTime=0x69e61cd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x4e922100, ftLastWriteTime.dwHighDateTime=0x1caafc8, nFileSizeHigh=0x0, nFileSizeLow=0x9770, dwReserved0=0x0, dwReserved1=0x0, cFileName="msgfilt.dll", cAlternateFileName="")) returned 1 [0063.315] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d640 | out: lpFindFileData=0x12d640*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e922100, ftCreationTime.dwHighDateTime=0x1caafc8, ftLastAccessTime.dwLowDateTime=0x6b29d7d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x4e922100, ftLastWriteTime.dwHighDateTime=0x1caafc8, nFileSizeHigh=0x0, nFileSizeLow=0x140790, dwReserved0=0x0, dwReserved1=0x0, cFileName="odffilt.dll", cAlternateFileName="")) returned 1 [0063.315] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d640 | out: lpFindFileData=0x12d640*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e922100, ftCreationTime.dwHighDateTime=0x1caafc8, ftLastAccessTime.dwLowDateTime=0x596c1850, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x4e922100, ftLastWriteTime.dwHighDateTime=0x1caafc8, nFileSizeHigh=0x0, nFileSizeLow=0x16af90, dwReserved0=0x0, dwReserved1=0x0, cFileName="offfiltx.dll", cAlternateFileName="")) returned 1 [0063.315] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d640 | out: lpFindFileData=0x12d640*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x46d35b00, ftCreationTime.dwHighDateTime=0x1cba077, ftLastAccessTime.dwLowDateTime=0xd9e40080, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x46d35b00, ftLastWriteTime.dwHighDateTime=0x1cba077, nFileSizeHigh=0x0, nFileSizeLow=0x206b78, dwReserved0=0x0, dwReserved1=0x0, cFileName="VISFILT.DLL", cAlternateFileName="")) returned 1 [0063.316] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d640 | out: lpFindFileData=0x12d640*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x46d35b00, ftCreationTime.dwHighDateTime=0x1cba077, ftLastAccessTime.dwLowDateTime=0xd9e40080, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x46d35b00, ftLastWriteTime.dwHighDateTime=0x1cba077, nFileSizeHigh=0x0, nFileSizeLow=0x206b78, dwReserved0=0x0, dwReserved1=0x0, cFileName="VISFILT.DLL", cAlternateFileName="")) returned 0 [0063.316] FindClose (in: hFindFile=0x1af3b6b0 | out: hFindFile=0x1af3b6b0) returned 1 [0063.316] SetErrorMode (uMode=0x0) returned 0x1 [0063.316] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT", nBufferLength=0x105, lpBuffer=0x12d3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT", lpFilePart=0x0) returned 0x36 [0063.316] SetErrorMode (uMode=0x1) returned 0x0 [0063.316] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec79e70, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xc25b4860, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xc25b4860, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1af3b6b0 [0063.824] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5a0 | out: lpFindFileData=0x12d5a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec79e70, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xc25b4860, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xc25b4860, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0063.824] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5a0 | out: lpFindFileData=0x12d5a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x916cf600, ftCreationTime.dwHighDateTime=0x1bcabec, ftLastAccessTime.dwLowDateTime=0xeec79e70, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x916cf600, ftLastWriteTime.dwHighDateTime=0x1bcabec, nFileSizeHigh=0x0, nFileSizeLow=0x1a9b, dwReserved0=0x0, dwReserved1=0x0, cFileName="CGMIMP32.CFG", cAlternateFileName="")) returned 1 [0063.824] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5a0 | out: lpFindFileData=0x12d5a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfda4ec00, ftCreationTime.dwHighDateTime=0x1cba021, ftLastAccessTime.dwLowDateTime=0xc22488c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xfda4ec00, ftLastWriteTime.dwHighDateTime=0x1cba021, nFileSizeHigh=0x0, nFileSizeLow=0x4f160, dwReserved0=0x0, dwReserved1=0x0, cFileName="CGMIMP32.FLT", cAlternateFileName="")) returned 1 [0063.824] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5a0 | out: lpFindFileData=0x12d5a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x916cf600, ftCreationTime.dwHighDateTime=0x1bcabec, ftLastAccessTime.dwLowDateTime=0xeec79e70, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x916cf600, ftLastWriteTime.dwHighDateTime=0x1bcabec, nFileSizeHigh=0x0, nFileSizeLow=0x93f6e, dwReserved0=0x0, dwReserved1=0x0, cFileName="CGMIMP32.FNT", cAlternateFileName="")) returned 1 [0063.824] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5a0 | out: lpFindFileData=0x12d5a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe8a19600, ftCreationTime.dwHighDateTime=0x1caa4ff, ftLastAccessTime.dwLowDateTime=0xeed5e6b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe8a19600, ftLastWriteTime.dwHighDateTime=0x1caa4ff, nFileSizeHigh=0x0, nFileSizeLow=0xadf90, dwReserved0=0x0, dwReserved1=0x0, cFileName="EPSIMP32.FLT", cAlternateFileName="")) returned 1 [0063.824] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5a0 | out: lpFindFileData=0x12d5a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe8a19600, ftCreationTime.dwHighDateTime=0x1caa4ff, ftLastAccessTime.dwLowDateTime=0xeedd0ad0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe8a19600, ftLastWriteTime.dwHighDateTime=0x1caa4ff, nFileSizeHigh=0x0, nFileSizeLow=0x4e380, dwReserved0=0x0, dwReserved1=0x0, cFileName="GIFIMP32.FLT", cAlternateFileName="")) returned 1 [0063.825] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5a0 | out: lpFindFileData=0x12d5a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe8a19600, ftCreationTime.dwHighDateTime=0x1caa4ff, ftLastAccessTime.dwLowDateTime=0xeee1cd90, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe8a19600, ftLastWriteTime.dwHighDateTime=0x1caa4ff, nFileSizeHigh=0x0, nFileSizeLow=0x3ad80, dwReserved0=0x0, dwReserved1=0x0, cFileName="JPEGIM32.FLT", cAlternateFileName="")) returned 1 [0063.825] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5a0 | out: lpFindFileData=0x12d5a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x916cf600, ftCreationTime.dwHighDateTime=0x1bcabec, ftLastAccessTime.dwLowDateTime=0xeee42ef0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x916cf600, ftLastWriteTime.dwHighDateTime=0x1bcabec, nFileSizeHigh=0x0, nFileSizeLow=0x774, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.CGM", cAlternateFileName="")) returned 1 [0064.084] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5a0 | out: lpFindFileData=0x12d5a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x916cf600, ftCreationTime.dwHighDateTime=0x1bcabec, ftLastAccessTime.dwLowDateTime=0xeee42ef0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x916cf600, ftLastWriteTime.dwHighDateTime=0x1bcabec, nFileSizeHigh=0x0, nFileSizeLow=0x3adb, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.EPS", cAlternateFileName="")) returned 1 [0064.084] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5a0 | out: lpFindFileData=0x12d5a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x916cf600, ftCreationTime.dwHighDateTime=0x1bcabec, ftLastAccessTime.dwLowDateTime=0xeee42ef0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x916cf600, ftLastWriteTime.dwHighDateTime=0x1bcabec, nFileSizeHigh=0x0, nFileSizeLow=0x42d, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.GIF", cAlternateFileName="")) returned 1 [0064.084] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5a0 | out: lpFindFileData=0x12d5a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x916cf600, ftCreationTime.dwHighDateTime=0x1bcabec, ftLastAccessTime.dwLowDateTime=0xeee42ef0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x916cf600, ftLastWriteTime.dwHighDateTime=0x1bcabec, nFileSizeHigh=0x0, nFileSizeLow=0x425, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.JPG", cAlternateFileName="")) returned 1 [0064.084] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5a0 | out: lpFindFileData=0x12d5a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x916cf600, ftCreationTime.dwHighDateTime=0x1bcabec, ftLastAccessTime.dwLowDateTime=0xeee42ef0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x916cf600, ftLastWriteTime.dwHighDateTime=0x1bcabec, nFileSizeHigh=0x0, nFileSizeLow=0x692, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.PNG", cAlternateFileName="")) returned 1 [0064.084] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5a0 | out: lpFindFileData=0x12d5a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x916cf600, ftCreationTime.dwHighDateTime=0x1bcabec, ftLastAccessTime.dwLowDateTime=0xeee42ef0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x916cf600, ftLastWriteTime.dwHighDateTime=0x1bcabec, nFileSizeHigh=0x0, nFileSizeLow=0x566, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.WPG", cAlternateFileName="")) returned 1 [0064.084] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5a0 | out: lpFindFileData=0x12d5a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe8a19600, ftCreationTime.dwHighDateTime=0x1caa4ff, ftLastAccessTime.dwLowDateTime=0xeefe5e10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe8a19600, ftLastWriteTime.dwHighDateTime=0x1caa4ff, nFileSizeHigh=0x0, nFileSizeLow=0x11d78, dwReserved0=0x0, dwReserved1=0x0, cFileName="PICTIM32.FLT", cAlternateFileName="")) returned 1 [0064.084] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5a0 | out: lpFindFileData=0x12d5a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe8a19600, ftCreationTime.dwHighDateTime=0x1caa4ff, ftLastAccessTime.dwLowDateTime=0xeefe5e10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe8a19600, ftLastWriteTime.dwHighDateTime=0x1caa4ff, nFileSizeHigh=0x0, nFileSizeLow=0x49f80, dwReserved0=0x0, dwReserved1=0x0, cFileName="PNG32.FLT", cAlternateFileName="")) returned 1 [0064.084] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5a0 | out: lpFindFileData=0x12d5a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd53d4900, ftCreationTime.dwHighDateTime=0x1cb7002, ftLastAccessTime.dwLowDateTime=0xc25b4860, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd53d4900, ftLastWriteTime.dwHighDateTime=0x1cb7002, nFileSizeHigh=0x0, nFileSizeLow=0x44780, dwReserved0=0x0, dwReserved1=0x0, cFileName="WPGIMP32.FLT", cAlternateFileName="")) returned 1 [0064.084] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5a0 | out: lpFindFileData=0x12d5a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd53d4900, ftCreationTime.dwHighDateTime=0x1cb7002, ftLastAccessTime.dwLowDateTime=0xc25b4860, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd53d4900, ftLastWriteTime.dwHighDateTime=0x1cb7002, nFileSizeHigh=0x0, nFileSizeLow=0x44780, dwReserved0=0x0, dwReserved1=0x0, cFileName="WPGIMP32.FLT", cAlternateFileName="")) returned 0 [0064.085] FindClose (in: hFindFile=0x1af3b6b0 | out: hFindFile=0x1af3b6b0) returned 1 [0064.085] SetErrorMode (uMode=0x0) returned 0x1 [0064.086] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\CGMIMP32.CFG", nBufferLength=0x105, lpBuffer=0x12d600, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\CGMIMP32.CFG", lpFilePart=0x0) returned 0x43 [0064.086] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\CGMIMP32.CFG", nBufferLength=0x105, lpBuffer=0x12d5f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\CGMIMP32.CFG", lpFilePart=0x0) returned 0x43 [0064.086] SetErrorMode (uMode=0x1) returned 0x0 [0064.086] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\CGMIMP32.CFG" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt\\cgmimp32.cfg"), fInfoLevelId=0x0, lpFileInformation=0x12d870 | out: lpFileInformation=0x12d870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x916cf600, ftCreationTime.dwHighDateTime=0x1bcabec, ftLastAccessTime.dwLowDateTime=0xeec79e70, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x916cf600, ftLastWriteTime.dwHighDateTime=0x1bcabec, nFileSizeHigh=0x0, nFileSizeLow=0x1a9b)) returned 1 [0064.087] SetErrorMode (uMode=0x0) returned 0x1 [0064.088] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\CGMIMP32.CFG", nBufferLength=0x105, lpBuffer=0x12d2c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\CGMIMP32.CFG", lpFilePart=0x0) returned 0x43 [0064.088] SetErrorMode (uMode=0x1) returned 0x0 [0064.088] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\CGMIMP32.CFG" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt\\cgmimp32.cfg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1e8 [0064.088] GetFileType (hFile=0x1e8) returned 0x1 [0064.089] SetErrorMode (uMode=0x0) returned 0x1 [0064.089] GetFileType (hFile=0x1e8) returned 0x1 [0064.089] GetFileSize (in: hFile=0x1e8, lpFileSizeHigh=0x12d928 | out: lpFileSizeHigh=0x12d928*=0x0) returned 0x1a9b [0064.089] ReadFile (in: hFile=0x1e8, lpBuffer=0x282b7a0, nNumberOfBytesToRead=0x1a9b, lpNumberOfBytesRead=0x12d808, lpOverlapped=0x0 | out: lpBuffer=0x282b7a0*, lpNumberOfBytesRead=0x12d808*=0x1a9b, lpOverlapped=0x0) returned 1 [0064.140] CloseHandle (hObject=0x1e8) returned 1 [0064.304] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\CGMIMP32.CFG", nBufferLength=0x105, lpBuffer=0x12d2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\CGMIMP32.CFG", lpFilePart=0x0) returned 0x43 [0064.304] SetErrorMode (uMode=0x1) returned 0x0 [0064.304] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\CGMIMP32.CFG" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt\\cgmimp32.cfg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1e8 [0064.305] GetFileType (hFile=0x1e8) returned 0x1 [0064.305] SetErrorMode (uMode=0x0) returned 0x1 [0064.305] GetFileType (hFile=0x1e8) returned 0x1 [0064.305] WriteFile (in: hFile=0x1e8, lpBuffer=0x2716190*, nNumberOfBytesToWrite=0x1aa0, lpNumberOfBytesWritten=0x12d888, lpOverlapped=0x0 | out: lpBuffer=0x2716190*, lpNumberOfBytesWritten=0x12d888*=0x1aa0, lpOverlapped=0x0) returned 1 [0064.308] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\CGMIMP32.CFG", nBufferLength=0x105, lpBuffer=0x12d560, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\CGMIMP32.CFG", lpFilePart=0x0) returned 0x43 [0064.308] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\CGMIMP32.CFG.encryptedS", nBufferLength=0x105, lpBuffer=0x12d560, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\CGMIMP32.CFG.encryptedS", lpFilePart=0x0) returned 0x4e [0064.308] SetErrorMode (uMode=0x1) returned 0x0 [0064.308] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\CGMIMP32.CFG" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt\\cgmimp32.cfg"), fInfoLevelId=0x0, lpFileInformation=0x12d7b0 | out: lpFileInformation=0x12d7b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x916cf600, ftCreationTime.dwHighDateTime=0x1bcabec, ftLastAccessTime.dwLowDateTime=0xeec79e70, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x4667c790, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x1aa0)) returned 1 [0064.308] SetErrorMode (uMode=0x0) returned 0x1 [0064.310] MoveFileW (lpExistingFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\CGMIMP32.CFG" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt\\cgmimp32.cfg"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\CGMIMP32.CFG.encryptedS" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt\\cgmimp32.cfg.encrypteds")) returned 1 [0064.312] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.EPS", nBufferLength=0x105, lpBuffer=0x12d600, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.EPS", lpFilePart=0x0) returned 0x3d [0064.312] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.EPS", nBufferLength=0x105, lpBuffer=0x12d5f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.EPS", lpFilePart=0x0) returned 0x3d [0064.312] SetErrorMode (uMode=0x1) returned 0x0 [0064.313] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.EPS" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt\\ms.eps"), fInfoLevelId=0x0, lpFileInformation=0x12d870 | out: lpFileInformation=0x12d870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x916cf600, ftCreationTime.dwHighDateTime=0x1bcabec, ftLastAccessTime.dwLowDateTime=0xeee42ef0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x916cf600, ftLastWriteTime.dwHighDateTime=0x1bcabec, nFileSizeHigh=0x0, nFileSizeLow=0x3adb)) returned 1 [0064.316] SetErrorMode (uMode=0x0) returned 0x1 [0064.316] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.EPS", nBufferLength=0x105, lpBuffer=0x12d2c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.EPS", lpFilePart=0x0) returned 0x3d [0064.316] SetErrorMode (uMode=0x1) returned 0x0 [0064.316] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.EPS" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt\\ms.eps"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1e8 [0064.316] GetFileType (hFile=0x1e8) returned 0x1 [0064.316] SetErrorMode (uMode=0x0) returned 0x1 [0064.316] GetFileType (hFile=0x1e8) returned 0x1 [0064.316] GetFileSize (in: hFile=0x1e8, lpFileSizeHigh=0x12d928 | out: lpFileSizeHigh=0x12d928*=0x0) returned 0x3adb [0064.316] ReadFile (in: hFile=0x1e8, lpBuffer=0x2719190, nNumberOfBytesToRead=0x3adb, lpNumberOfBytesRead=0x12d808, lpOverlapped=0x0 | out: lpBuffer=0x2719190*, lpNumberOfBytesRead=0x12d808*=0x3adb, lpOverlapped=0x0) returned 1 [0064.333] CloseHandle (hObject=0x1e8) returned 1 [0064.379] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.EPS", nBufferLength=0x105, lpBuffer=0x12d2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.EPS", lpFilePart=0x0) returned 0x3d [0064.379] SetErrorMode (uMode=0x1) returned 0x0 [0064.379] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.EPS" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt\\ms.eps"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1e8 [0064.385] GetFileType (hFile=0x1e8) returned 0x1 [0064.385] SetErrorMode (uMode=0x0) returned 0x1 [0064.385] GetFileType (hFile=0x1e8) returned 0x1 [0064.385] WriteFile (in: hFile=0x1e8, lpBuffer=0x280b608*, nNumberOfBytesToWrite=0x3ae0, lpNumberOfBytesWritten=0x12d888, lpOverlapped=0x0 | out: lpBuffer=0x280b608*, lpNumberOfBytesWritten=0x12d888*=0x3ae0, lpOverlapped=0x0) returned 1 [0064.387] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.EPS", nBufferLength=0x105, lpBuffer=0x12d560, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.EPS", lpFilePart=0x0) returned 0x3d [0064.387] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.EPS.encryptedS", nBufferLength=0x105, lpBuffer=0x12d560, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.EPS.encryptedS", lpFilePart=0x0) returned 0x48 [0064.387] SetErrorMode (uMode=0x1) returned 0x0 [0064.387] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.EPS" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt\\ms.eps"), fInfoLevelId=0x0, lpFileInformation=0x12d7b0 | out: lpFileInformation=0x12d7b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x916cf600, ftCreationTime.dwHighDateTime=0x1bcabec, ftLastAccessTime.dwLowDateTime=0xeee42ef0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x4673ae70, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x3ae0)) returned 1 [0064.388] SetErrorMode (uMode=0x0) returned 0x1 [0064.388] MoveFileW (lpExistingFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.EPS" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt\\ms.eps"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.EPS.encryptedS" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt\\ms.eps.encrypteds")) returned 1 [0064.392] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.JPG", nBufferLength=0x105, lpBuffer=0x12d600, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.JPG", lpFilePart=0x0) returned 0x3d [0064.392] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.JPG", nBufferLength=0x105, lpBuffer=0x12d5f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.JPG", lpFilePart=0x0) returned 0x3d [0064.392] SetErrorMode (uMode=0x1) returned 0x0 [0064.392] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.JPG" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt\\ms.jpg"), fInfoLevelId=0x0, lpFileInformation=0x12d870 | out: lpFileInformation=0x12d870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x916cf600, ftCreationTime.dwHighDateTime=0x1bcabec, ftLastAccessTime.dwLowDateTime=0xeee42ef0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x916cf600, ftLastWriteTime.dwHighDateTime=0x1bcabec, nFileSizeHigh=0x0, nFileSizeLow=0x425)) returned 1 [0064.393] SetErrorMode (uMode=0x0) returned 0x1 [0064.393] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.JPG", nBufferLength=0x105, lpBuffer=0x12d2c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.JPG", lpFilePart=0x0) returned 0x3d [0064.394] SetErrorMode (uMode=0x1) returned 0x0 [0064.394] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.JPG" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt\\ms.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1e8 [0064.394] GetFileType (hFile=0x1e8) returned 0x1 [0064.394] SetErrorMode (uMode=0x0) returned 0x1 [0064.394] GetFileType (hFile=0x1e8) returned 0x1 [0064.394] GetFileSize (in: hFile=0x1e8, lpFileSizeHigh=0x12d928 | out: lpFileSizeHigh=0x12d928*=0x0) returned 0x425 [0064.394] ReadFile (in: hFile=0x1e8, lpBuffer=0x2810848, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12d808, lpOverlapped=0x0 | out: lpBuffer=0x2810848*, lpNumberOfBytesRead=0x12d808*=0x425, lpOverlapped=0x0) returned 1 [0064.567] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.JPG", nBufferLength=0x105, lpBuffer=0x12d2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.JPG", lpFilePart=0x0) returned 0x3d [0064.567] SetErrorMode (uMode=0x1) returned 0x0 [0064.567] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.JPG" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt\\ms.jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1e8 [0064.568] GetFileType (hFile=0x1e8) returned 0x1 [0064.568] SetErrorMode (uMode=0x0) returned 0x1 [0064.568] GetFileType (hFile=0x1e8) returned 0x1 [0064.568] WriteFile (in: hFile=0x1e8, lpBuffer=0x26f6a78*, nNumberOfBytesToWrite=0x430, lpNumberOfBytesWritten=0x12d7a8, lpOverlapped=0x0 | out: lpBuffer=0x26f6a78*, lpNumberOfBytesWritten=0x12d7a8*=0x430, lpOverlapped=0x0) returned 1 [0064.569] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.JPG", nBufferLength=0x105, lpBuffer=0x12d560, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.JPG", lpFilePart=0x0) returned 0x3d [0064.569] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.JPG.encryptedS", nBufferLength=0x105, lpBuffer=0x12d560, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.JPG.encryptedS", lpFilePart=0x0) returned 0x48 [0064.569] SetErrorMode (uMode=0x1) returned 0x0 [0064.570] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.JPG" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt\\ms.jpg"), fInfoLevelId=0x0, lpFileInformation=0x12d7b0 | out: lpFileInformation=0x12d7b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x916cf600, ftCreationTime.dwHighDateTime=0x1bcabec, ftLastAccessTime.dwLowDateTime=0xeee42ef0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x46903ef0, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x430)) returned 1 [0064.570] SetErrorMode (uMode=0x0) returned 0x1 [0064.570] MoveFileW (lpExistingFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.JPG" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt\\ms.jpg"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.JPG.encryptedS" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt\\ms.jpg.encrypteds")) returned 1 [0064.571] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.PNG", nBufferLength=0x105, lpBuffer=0x12d600, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.PNG", lpFilePart=0x0) returned 0x3d [0064.571] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.PNG", nBufferLength=0x105, lpBuffer=0x12d5f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.PNG", lpFilePart=0x0) returned 0x3d [0064.571] SetErrorMode (uMode=0x1) returned 0x0 [0064.571] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt\\ms.png"), fInfoLevelId=0x0, lpFileInformation=0x12d870 | out: lpFileInformation=0x12d870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x916cf600, ftCreationTime.dwHighDateTime=0x1bcabec, ftLastAccessTime.dwLowDateTime=0xeee42ef0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x916cf600, ftLastWriteTime.dwHighDateTime=0x1bcabec, nFileSizeHigh=0x0, nFileSizeLow=0x692)) returned 1 [0064.572] SetErrorMode (uMode=0x0) returned 0x1 [0064.572] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.PNG", nBufferLength=0x105, lpBuffer=0x12d2c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.PNG", lpFilePart=0x0) returned 0x3d [0064.572] SetErrorMode (uMode=0x1) returned 0x0 [0064.572] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt\\ms.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1e8 [0064.572] GetFileType (hFile=0x1e8) returned 0x1 [0064.572] SetErrorMode (uMode=0x0) returned 0x1 [0064.572] GetFileType (hFile=0x1e8) returned 0x1 [0064.572] GetFileSize (in: hFile=0x1e8, lpFileSizeHigh=0x12d928 | out: lpFileSizeHigh=0x12d928*=0x0) returned 0x692 [0064.572] ReadFile (in: hFile=0x1e8, lpBuffer=0x26f90c0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12d808, lpOverlapped=0x0 | out: lpBuffer=0x26f90c0*, lpNumberOfBytesRead=0x12d808*=0x692, lpOverlapped=0x0) returned 1 [0064.662] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.PNG", nBufferLength=0x105, lpBuffer=0x12d2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.PNG", lpFilePart=0x0) returned 0x3d [0064.662] SetErrorMode (uMode=0x1) returned 0x0 [0064.662] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt\\ms.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1e8 [0064.663] GetFileType (hFile=0x1e8) returned 0x1 [0064.663] SetErrorMode (uMode=0x0) returned 0x1 [0064.663] GetFileType (hFile=0x1e8) returned 0x1 [0064.663] WriteFile (in: hFile=0x1e8, lpBuffer=0x27dc350*, nNumberOfBytesToWrite=0x6a0, lpNumberOfBytesWritten=0x12d7a8, lpOverlapped=0x0 | out: lpBuffer=0x27dc350*, lpNumberOfBytesWritten=0x12d7a8*=0x6a0, lpOverlapped=0x0) returned 1 [0064.664] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.PNG", nBufferLength=0x105, lpBuffer=0x12d560, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.PNG", lpFilePart=0x0) returned 0x3d [0064.664] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.PNG.encryptedS", nBufferLength=0x105, lpBuffer=0x12d560, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.PNG.encryptedS", lpFilePart=0x0) returned 0x48 [0064.664] SetErrorMode (uMode=0x1) returned 0x0 [0064.664] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt\\ms.png"), fInfoLevelId=0x0, lpFileInformation=0x12d7b0 | out: lpFileInformation=0x12d7b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x916cf600, ftCreationTime.dwHighDateTime=0x1bcabec, ftLastAccessTime.dwLowDateTime=0xeee42ef0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x469e8730, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x6a0)) returned 1 [0064.664] SetErrorMode (uMode=0x0) returned 0x1 [0064.665] MoveFileW (lpExistingFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt\\ms.png"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.PNG.encryptedS" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt\\ms.png.encrypteds")) returned 1 [0064.666] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\Decrypt Instructions.txt", nBufferLength=0x105, lpBuffer=0x12d2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\Decrypt Instructions.txt", lpFilePart=0x0) returned 0x4f [0064.666] SetErrorMode (uMode=0x1) returned 0x0 [0064.666] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\Decrypt Instructions.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt\\decrypt instructions.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1e8 [0064.667] GetFileType (hFile=0x1e8) returned 0x1 [0064.667] SetErrorMode (uMode=0x0) returned 0x1 [0064.667] GetFileType (hFile=0x1e8) returned 0x1 [0064.667] WriteFile (in: hFile=0x1e8, lpBuffer=0x27e1280*, nNumberOfBytesToWrite=0x773, lpNumberOfBytesWritten=0x12d808, lpOverlapped=0x0 | out: lpBuffer=0x27e1280*, lpNumberOfBytesWritten=0x12d808*=0x773, lpOverlapped=0x0) returned 1 [0064.668] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT", nBufferLength=0x105, lpBuffer=0x12d490, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT", lpFilePart=0x0) returned 0x36 [0064.669] SetErrorMode (uMode=0x1) returned 0x0 [0064.669] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\*", lpFindFileData=0x12d630 | out: lpFindFileData=0x12d630*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec79e70, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x469e8730, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x469e8730, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1af3b6b0 [0064.669] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d640 | out: lpFindFileData=0x12d640*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec79e70, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x469e8730, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x469e8730, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0064.669] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d640 | out: lpFindFileData=0x12d640*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x916cf600, ftCreationTime.dwHighDateTime=0x1bcabec, ftLastAccessTime.dwLowDateTime=0xeec79e70, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x4667c790, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x1aa0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CGMIMP32.CFG.encryptedS", cAlternateFileName="CGMIMP~1.ENC")) returned 1 [0064.669] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d640 | out: lpFindFileData=0x12d640*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfda4ec00, ftCreationTime.dwHighDateTime=0x1cba021, ftLastAccessTime.dwLowDateTime=0xc22488c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xfda4ec00, ftLastWriteTime.dwHighDateTime=0x1cba021, nFileSizeHigh=0x0, nFileSizeLow=0x4f160, dwReserved0=0x0, dwReserved1=0x0, cFileName="CGMIMP32.FLT", cAlternateFileName="")) returned 1 [0064.670] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d640 | out: lpFindFileData=0x12d640*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x916cf600, ftCreationTime.dwHighDateTime=0x1bcabec, ftLastAccessTime.dwLowDateTime=0xeec79e70, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x916cf600, ftLastWriteTime.dwHighDateTime=0x1bcabec, nFileSizeHigh=0x0, nFileSizeLow=0x93f6e, dwReserved0=0x0, dwReserved1=0x0, cFileName="CGMIMP32.FNT", cAlternateFileName="")) returned 1 [0064.670] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d640 | out: lpFindFileData=0x12d640*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x469e8730, ftCreationTime.dwHighDateTime=0x1d5e786, ftLastAccessTime.dwLowDateTime=0x469e8730, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x469e8730, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x773, dwReserved0=0x0, dwReserved1=0x0, cFileName="Decrypt Instructions.txt", cAlternateFileName="DECRYP~1.TXT")) returned 1 [0064.670] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d640 | out: lpFindFileData=0x12d640*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe8a19600, ftCreationTime.dwHighDateTime=0x1caa4ff, ftLastAccessTime.dwLowDateTime=0xeed5e6b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe8a19600, ftLastWriteTime.dwHighDateTime=0x1caa4ff, nFileSizeHigh=0x0, nFileSizeLow=0xadf90, dwReserved0=0x0, dwReserved1=0x0, cFileName="EPSIMP32.FLT", cAlternateFileName="")) returned 1 [0064.670] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d640 | out: lpFindFileData=0x12d640*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe8a19600, ftCreationTime.dwHighDateTime=0x1caa4ff, ftLastAccessTime.dwLowDateTime=0xeedd0ad0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe8a19600, ftLastWriteTime.dwHighDateTime=0x1caa4ff, nFileSizeHigh=0x0, nFileSizeLow=0x4e380, dwReserved0=0x0, dwReserved1=0x0, cFileName="GIFIMP32.FLT", cAlternateFileName="")) returned 1 [0064.670] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d640 | out: lpFindFileData=0x12d640*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe8a19600, ftCreationTime.dwHighDateTime=0x1caa4ff, ftLastAccessTime.dwLowDateTime=0xeee1cd90, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe8a19600, ftLastWriteTime.dwHighDateTime=0x1caa4ff, nFileSizeHigh=0x0, nFileSizeLow=0x3ad80, dwReserved0=0x0, dwReserved1=0x0, cFileName="JPEGIM32.FLT", cAlternateFileName="")) returned 1 [0064.670] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d640 | out: lpFindFileData=0x12d640*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x916cf600, ftCreationTime.dwHighDateTime=0x1bcabec, ftLastAccessTime.dwLowDateTime=0xeee42ef0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x916cf600, ftLastWriteTime.dwHighDateTime=0x1bcabec, nFileSizeHigh=0x0, nFileSizeLow=0x774, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.CGM", cAlternateFileName="")) returned 1 [0064.670] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d640 | out: lpFindFileData=0x12d640*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x916cf600, ftCreationTime.dwHighDateTime=0x1bcabec, ftLastAccessTime.dwLowDateTime=0xeee42ef0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x4673ae70, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x3ae0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.EPS.encryptedS", cAlternateFileName="MSEPS~1.ENC")) returned 1 [0064.670] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d640 | out: lpFindFileData=0x12d640*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x916cf600, ftCreationTime.dwHighDateTime=0x1bcabec, ftLastAccessTime.dwLowDateTime=0xeee42ef0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x916cf600, ftLastWriteTime.dwHighDateTime=0x1bcabec, nFileSizeHigh=0x0, nFileSizeLow=0x42d, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.GIF", cAlternateFileName="")) returned 1 [0064.670] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d640 | out: lpFindFileData=0x12d640*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x916cf600, ftCreationTime.dwHighDateTime=0x1bcabec, ftLastAccessTime.dwLowDateTime=0xeee42ef0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x46903ef0, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x430, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.JPG.encryptedS", cAlternateFileName="MSJPG~1.ENC")) returned 1 [0064.670] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d640 | out: lpFindFileData=0x12d640*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x916cf600, ftCreationTime.dwHighDateTime=0x1bcabec, ftLastAccessTime.dwLowDateTime=0xeee42ef0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x469e8730, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x6a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.PNG.encryptedS", cAlternateFileName="MSPNG~1.ENC")) returned 1 [0064.670] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d640 | out: lpFindFileData=0x12d640*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x916cf600, ftCreationTime.dwHighDateTime=0x1bcabec, ftLastAccessTime.dwLowDateTime=0xeee42ef0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x916cf600, ftLastWriteTime.dwHighDateTime=0x1bcabec, nFileSizeHigh=0x0, nFileSizeLow=0x566, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.WPG", cAlternateFileName="")) returned 1 [0064.670] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d640 | out: lpFindFileData=0x12d640*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe8a19600, ftCreationTime.dwHighDateTime=0x1caa4ff, ftLastAccessTime.dwLowDateTime=0xeefe5e10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe8a19600, ftLastWriteTime.dwHighDateTime=0x1caa4ff, nFileSizeHigh=0x0, nFileSizeLow=0x11d78, dwReserved0=0x0, dwReserved1=0x0, cFileName="PICTIM32.FLT", cAlternateFileName="")) returned 1 [0064.670] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d640 | out: lpFindFileData=0x12d640*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe8a19600, ftCreationTime.dwHighDateTime=0x1caa4ff, ftLastAccessTime.dwLowDateTime=0xeefe5e10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe8a19600, ftLastWriteTime.dwHighDateTime=0x1caa4ff, nFileSizeHigh=0x0, nFileSizeLow=0x49f80, dwReserved0=0x0, dwReserved1=0x0, cFileName="PNG32.FLT", cAlternateFileName="")) returned 1 [0064.670] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d640 | out: lpFindFileData=0x12d640*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd53d4900, ftCreationTime.dwHighDateTime=0x1cb7002, ftLastAccessTime.dwLowDateTime=0xc25b4860, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd53d4900, ftLastWriteTime.dwHighDateTime=0x1cb7002, nFileSizeHigh=0x0, nFileSizeLow=0x44780, dwReserved0=0x0, dwReserved1=0x0, cFileName="WPGIMP32.FLT", cAlternateFileName="")) returned 1 [0064.670] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d640 | out: lpFindFileData=0x12d640*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd53d4900, ftCreationTime.dwHighDateTime=0x1cb7002, ftLastAccessTime.dwLowDateTime=0xc25b4860, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd53d4900, ftLastWriteTime.dwHighDateTime=0x1cb7002, nFileSizeHigh=0x0, nFileSizeLow=0x44780, dwReserved0=0x0, dwReserved1=0x0, cFileName="WPGIMP32.FLT", cAlternateFileName="")) returned 0 [0064.671] FindClose (in: hFindFile=0x1af3b6b0 | out: hFindFile=0x1af3b6b0) returned 1 [0064.671] SetErrorMode (uMode=0x0) returned 0x1 [0064.671] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Help", nBufferLength=0x105, lpBuffer=0x12d3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\Help", lpFilePart=0x0) returned 0x33 [0064.671] SetErrorMode (uMode=0x1) returned 0x0 [0064.671] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Help\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee282250, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x61073d10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x61073d10, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1af3b6b0 [0064.672] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5a0 | out: lpFindFileData=0x12d5a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee282250, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x61073d10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x61073d10, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0064.672] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5a0 | out: lpFindFileData=0x12d5a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe777f900, ftCreationTime.dwHighDateTime=0x1c8bc89, ftLastAccessTime.dwLowDateTime=0x60d54030, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe777f900, ftLastWriteTime.dwHighDateTime=0x1c8bc89, nFileSizeHigh=0x0, nFileSizeLow=0x133200, dwReserved0=0x0, dwReserved1=0x0, cFileName="hxds.dll", cAlternateFileName="")) returned 1 [0064.672] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5a0 | out: lpFindFileData=0x12d5a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe3e47200, ftCreationTime.dwHighDateTime=0x1c8bc89, ftLastAccessTime.dwLowDateTime=0x522dc930, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe3e47200, ftLastWriteTime.dwHighDateTime=0x1c8bc89, nFileSizeHigh=0x0, nFileSizeLow=0x1bf200, dwReserved0=0x0, dwReserved1=0x0, cFileName="ITIRCL55.DLL", cAlternateFileName="")) returned 1 [0064.672] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5a0 | out: lpFindFileData=0x12d5a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe777f900, ftCreationTime.dwHighDateTime=0x1c8bc89, ftLastAccessTime.dwLowDateTime=0x616b36d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe777f900, ftLastWriteTime.dwHighDateTime=0x1c8bc89, nFileSizeHigh=0x0, nFileSizeLow=0x69000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msitss55.dll", cAlternateFileName="")) returned 1 [0064.672] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5a0 | out: lpFindFileData=0x12d5a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe777f900, ftCreationTime.dwHighDateTime=0x1c8bc89, ftLastAccessTime.dwLowDateTime=0x616b36d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe777f900, ftLastWriteTime.dwHighDateTime=0x1c8bc89, nFileSizeHigh=0x0, nFileSizeLow=0x69000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msitss55.dll", cAlternateFileName="")) returned 0 [0064.672] FindClose (in: hFindFile=0x1af3b6b0 | out: hFindFile=0x1af3b6b0) returned 1 [0064.672] SetErrorMode (uMode=0x0) returned 0x1 [0064.673] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Help\\Decrypt Instructions.txt", nBufferLength=0x105, lpBuffer=0x12d2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\Help\\Decrypt Instructions.txt", lpFilePart=0x0) returned 0x4c [0064.673] SetErrorMode (uMode=0x1) returned 0x0 [0064.673] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Help\\Decrypt Instructions.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\help\\decrypt instructions.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1e8 [0064.673] GetFileType (hFile=0x1e8) returned 0x1 [0064.674] SetErrorMode (uMode=0x0) returned 0x1 [0064.674] GetFileType (hFile=0x1e8) returned 0x1 [0064.674] WriteFile (in: hFile=0x1e8, lpBuffer=0x27e7e58*, nNumberOfBytesToWrite=0x773, lpNumberOfBytesWritten=0x12d808, lpOverlapped=0x0 | out: lpBuffer=0x27e7e58*, lpNumberOfBytesWritten=0x12d808*=0x773, lpOverlapped=0x0) returned 1 [0064.676] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Help", nBufferLength=0x105, lpBuffer=0x12d490, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\Help", lpFilePart=0x0) returned 0x33 [0064.676] SetErrorMode (uMode=0x1) returned 0x0 [0064.676] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Help\\*", lpFindFileData=0x12d630 | out: lpFindFileData=0x12d630*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee282250, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x46a0e890, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x46a0e890, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1af3b6b0 [0064.676] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d640 | out: lpFindFileData=0x12d640*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee282250, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x46a0e890, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x46a0e890, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0064.676] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d640 | out: lpFindFileData=0x12d640*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x46a0e890, ftCreationTime.dwHighDateTime=0x1d5e786, ftLastAccessTime.dwLowDateTime=0x46a0e890, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x46a0e890, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x773, dwReserved0=0x0, dwReserved1=0x0, cFileName="Decrypt Instructions.txt", cAlternateFileName="DECRYP~1.TXT")) returned 1 [0064.676] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d640 | out: lpFindFileData=0x12d640*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe777f900, ftCreationTime.dwHighDateTime=0x1c8bc89, ftLastAccessTime.dwLowDateTime=0x60d54030, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe777f900, ftLastWriteTime.dwHighDateTime=0x1c8bc89, nFileSizeHigh=0x0, nFileSizeLow=0x133200, dwReserved0=0x0, dwReserved1=0x0, cFileName="hxds.dll", cAlternateFileName="")) returned 1 [0064.676] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d640 | out: lpFindFileData=0x12d640*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe3e47200, ftCreationTime.dwHighDateTime=0x1c8bc89, ftLastAccessTime.dwLowDateTime=0x522dc930, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe3e47200, ftLastWriteTime.dwHighDateTime=0x1c8bc89, nFileSizeHigh=0x0, nFileSizeLow=0x1bf200, dwReserved0=0x0, dwReserved1=0x0, cFileName="ITIRCL55.DLL", cAlternateFileName="")) returned 1 [0064.676] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d640 | out: lpFindFileData=0x12d640*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe777f900, ftCreationTime.dwHighDateTime=0x1c8bc89, ftLastAccessTime.dwLowDateTime=0x616b36d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe777f900, ftLastWriteTime.dwHighDateTime=0x1c8bc89, nFileSizeHigh=0x0, nFileSizeLow=0x69000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msitss55.dll", cAlternateFileName="")) returned 1 [0064.676] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d640 | out: lpFindFileData=0x12d640*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe777f900, ftCreationTime.dwHighDateTime=0x1c8bc89, ftLastAccessTime.dwLowDateTime=0x616b36d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe777f900, ftLastWriteTime.dwHighDateTime=0x1c8bc89, nFileSizeHigh=0x0, nFileSizeLow=0x69000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msitss55.dll", cAlternateFileName="")) returned 0 [0064.677] FindClose (in: hFindFile=0x1af3b6b0 | out: hFindFile=0x1af3b6b0) returned 1 [0064.677] SetErrorMode (uMode=0x0) returned 0x1 [0064.677] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink", nBufferLength=0x105, lpBuffer=0x12d3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\ink", lpFilePart=0x0) returned 0x32 [0064.677] SetErrorMode (uMode=0x1) returned 0x0 [0064.677] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7545b2, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x9e0df36a, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9e0df36a, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1af3b6b0 [0064.677] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5a0 | out: lpFindFileData=0x12d5a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7545b2, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x9e0df36a, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9e0df36a, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0064.677] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5a0 | out: lpFindFileData=0x12d5a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c2bbccc, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0x6c2bbccc, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x90daefa5, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc1486, dwReserved0=0x0, dwReserved1=0x0, cFileName="Alphabet.xml", cAlternateFileName="")) returned 1 [0064.677] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5a0 | out: lpFindFileData=0x12d5a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7545b2, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7545b2, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7545b2, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ar-SA", cAlternateFileName="")) returned 1 [0064.677] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5a0 | out: lpFindFileData=0x12d5a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7545b2, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7545b2, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7545b2, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg-BG", cAlternateFileName="")) returned 1 [0064.677] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5a0 | out: lpFindFileData=0x12d5a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90daefa5, ftCreationTime.dwHighDateTime=0x1c9ea0f, ftLastAccessTime.dwLowDateTime=0x90daefa5, ftLastAccessTime.dwHighDateTime=0x1c9ea0f, ftLastWriteTime.dwLowDateTime=0x90daefa5, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x69a5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Content.xml", cAlternateFileName="")) returned 1 [0064.678] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5a0 | out: lpFindFileData=0x12d5a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c92176b, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0x6c92176b, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0xdd6ec0f0, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x2f200, dwReserved0=0x0, dwReserved1=0x0, cFileName="ConvertInkStore.exe", cAlternateFileName="")) returned 1 [0064.678] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5a0 | out: lpFindFileData=0x12d5a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7545b2, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd77a70c, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd77a70c, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="cs-CZ", cAlternateFileName="")) returned 1 [0064.678] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5a0 | out: lpFindFileData=0x12d5a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd77a70c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd77a70c, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd77a70c, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="da-DK", cAlternateFileName="")) returned 1 [0064.678] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5a0 | out: lpFindFileData=0x12d5a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd77a70c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd77a70c, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd77a70c, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="de-DE", cAlternateFileName="")) returned 1 [0064.678] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5a0 | out: lpFindFileData=0x12d5a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd77a70c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd77a70c, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd77a70c, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="el-GR", cAlternateFileName="")) returned 1 [0064.678] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5a0 | out: lpFindFileData=0x12d5a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd77a70c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x9e0df36a, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9e0df36a, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0064.678] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5a0 | out: lpFindFileData=0x12d5a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd77a70c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd77a70c, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd77a70c, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="es-ES", cAlternateFileName="")) returned 1 [0064.678] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5a0 | out: lpFindFileData=0x12d5a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd77a70c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd77a70c, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd77a70c, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="et-EE", cAlternateFileName="")) returned 1 [0064.678] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5a0 | out: lpFindFileData=0x12d5a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd77a70c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7a0866, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7a0866, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fi-FI", cAlternateFileName="")) returned 1 [0064.678] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5a0 | out: lpFindFileData=0x12d5a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x92f4e4a1, ftCreationTime.dwHighDateTime=0x1c9ea0f, ftLastAccessTime.dwLowDateTime=0x92f4e4a1, ftLastAccessTime.dwHighDateTime=0x1c9ea0f, ftLastWriteTime.dwLowDateTime=0x92f9a75d, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x186b84, dwReserved0=0x0, dwReserved1=0x0, cFileName="FlickAnimation.avi", cAlternateFileName="")) returned 1 [0064.678] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5a0 | out: lpFindFileData=0x12d5a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5c53a9c4, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0x5c53a9c4, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0xe29c9700, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0xe2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="FlickLearningWizard.exe", cAlternateFileName="")) returned 1 [0064.678] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5a0 | out: lpFindFileData=0x12d5a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7a0866, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x98159680, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x98159680, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr-FR", cAlternateFileName="")) returned 1 [0064.678] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5a0 | out: lpFindFileData=0x12d5a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7a0866, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7ecb1a, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7ecb1a, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fsdefinitions", cAlternateFileName="FSDEFI~1")) returned 1 [0064.678] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5a0 | out: lpFindFileData=0x12d5a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7ecb1a, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7ecb1a, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7ecb1a, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="he-IL", cAlternateFileName="")) returned 1 [0064.678] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5a0 | out: lpFindFileData=0x12d5a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7ecb1a, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7ecb1a, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7ecb1a, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hr-HR", cAlternateFileName="")) returned 1 [0064.679] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5a0 | out: lpFindFileData=0x12d5a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7ecb1a, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7ecb1a, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7ecb1a, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hu-HU", cAlternateFileName="")) returned 1 [0064.679] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5a0 | out: lpFindFileData=0x12d5a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2ece8572, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x2ece8572, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x2ea60e45, ftLastWriteTime.dwHighDateTime=0x1ca03fa, nFileSizeHigh=0x0, nFileSizeLow=0xb620, dwReserved0=0x0, dwReserved1=0x0, cFileName="hwrcommonlm.dat", cAlternateFileName="")) returned 1 [0064.679] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5a0 | out: lpFindFileData=0x12d5a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9e0df36a, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaabda5f8, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9e0df36a, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HWRCustomization", cAlternateFileName="HWRCUS~1")) returned 1 [0064.679] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5a0 | out: lpFindFileData=0x12d5a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f7eaa54, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x2f7eaa54, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x2f301d57, ftLastWriteTime.dwHighDateTime=0x1ca03fa, nFileSizeHigh=0x0, nFileSizeLow=0xb6710, dwReserved0=0x0, dwReserved1=0x0, cFileName="hwrenalm.dat", cAlternateFileName="")) returned 1 [0064.679] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5a0 | out: lpFindFileData=0x12d5a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33535c00, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x33535c00, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x332fa78d, ftLastWriteTime.dwHighDateTime=0x1ca03fa, nFileSizeHigh=0x0, nFileSizeLow=0xc7240, dwReserved0=0x0, dwReserved1=0x0, cFileName="hwrenclm.dat", cAlternateFileName="")) returned 1 [0064.679] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5a0 | out: lpFindFileData=0x12d5a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x32bd661d, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x32bd661d, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x32a7f9d8, ftLastWriteTime.dwHighDateTime=0x1ca03fa, nFileSizeHigh=0x0, nFileSizeLow=0x10ca50, dwReserved0=0x0, dwReserved1=0x0, cFileName="hwrlatinlm.dat", cAlternateFileName="")) returned 1 [0064.679] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5a0 | out: lpFindFileData=0x12d5a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d94dbb3, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x3d94dbb3, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x3c28ab1e, ftLastWriteTime.dwHighDateTime=0x1ca03fa, nFileSizeHigh=0x0, nFileSizeLow=0x2e99a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hwruklm.dat", cAlternateFileName="")) returned 1 [0064.679] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5a0 | out: lpFindFileData=0x12d5a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3da5853e, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x3da5853e, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x3d7f6f6e, ftLastWriteTime.dwHighDateTime=0x1ca03fa, nFileSizeHigh=0x0, nFileSizeLow=0x21ff00, dwReserved0=0x0, dwReserved1=0x0, cFileName="hwruksh.dat", cAlternateFileName="")) returned 1 [0064.679] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5a0 | out: lpFindFileData=0x12d5a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3db89026, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x3db89026, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x3d3cc942, ftLastWriteTime.dwHighDateTime=0x1ca03fa, nFileSizeHigh=0x0, nFileSizeLow=0x30c330, dwReserved0=0x0, dwReserved1=0x0, cFileName="hwrusalm.dat", cAlternateFileName="")) returned 1 [0064.679] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5a0 | out: lpFindFileData=0x12d5a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3dbfb43d, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x3dbfb43d, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x3da7e69b, ftLastWriteTime.dwHighDateTime=0x1ca03fa, nFileSizeHigh=0x0, nFileSizeLow=0x3ee0d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hwrusash.dat", cAlternateFileName="")) returned 1 [0064.679] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5a0 | out: lpFindFileData=0x12d5a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4c4bfb78, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0x4c4bfb78, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x298e8420, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x56400, dwReserved0=0x0, dwReserved1=0x0, cFileName="InkDiv.dll", cAlternateFileName="")) returned 1 [0064.679] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5a0 | out: lpFindFileData=0x12d5a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c412911, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0x6c412911, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x29a8c2e0, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x201800, dwReserved0=0x0, dwReserved1=0x0, cFileName="InkObj.dll", cAlternateFileName="")) returned 1 [0064.679] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5a0 | out: lpFindFileData=0x12d5a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5eab8150, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0x5eab8150, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0xe4490e80, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x61000, dwReserved0=0x0, dwReserved1=0x0, cFileName="InkWatson.exe", cAlternateFileName="")) returned 1 [0064.679] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5a0 | out: lpFindFileData=0x12d5a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7700d105, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0x7700d105, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0xe45c2150, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x5da00, dwReserved0=0x0, dwReserved1=0x0, cFileName="InputPersonalization.exe", cAlternateFileName="")) returned 1 [0064.679] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5a0 | out: lpFindFileData=0x12d5a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x91865215, ftCreationTime.dwHighDateTime=0x1c9ea0f, ftLastAccessTime.dwLowDateTime=0x91865215, ftLastAccessTime.dwHighDateTime=0x1c9ea0f, ftLastWriteTime.dwLowDateTime=0x91865215, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xa20, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipscat.xml", cAlternateFileName="")) returned 1 [0064.680] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5a0 | out: lpFindFileData=0x12d5a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27bfdab7, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x27bfdab7, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x91865215, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x99e, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipschs.xml", cAlternateFileName="")) returned 1 [0064.680] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5a0 | out: lpFindFileData=0x12d5a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27c23c14, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x27c23c14, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x91865215, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x984, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipscht.xml", cAlternateFileName="")) returned 1 [0064.680] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5a0 | out: lpFindFileData=0x12d5a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27c23c14, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x27c23c14, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x91865215, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x9fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipscsy.xml", cAlternateFileName="")) returned 1 [0064.680] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5a0 | out: lpFindFileData=0x12d5a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27c49d71, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x27c49d71, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x91865215, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x9d2, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipsdan.xml", cAlternateFileName="")) returned 1 [0064.680] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5a0 | out: lpFindFileData=0x12d5a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27c49d71, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x27c49d71, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x91865215, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xa38, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipsdeu.xml", cAlternateFileName="")) returned 1 [0064.680] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5a0 | out: lpFindFileData=0x12d5a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27c6fece, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x27c6fece, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x91865215, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xa12, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipsen.xml", cAlternateFileName="")) returned 1 [0064.680] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5a0 | out: lpFindFileData=0x12d5a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27cbc188, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x27cbc188, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x91865215, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xbd0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipsesp.xml", cAlternateFileName="")) returned 1 [0064.680] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5a0 | out: lpFindFileData=0x12d5a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x58cd8515, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0x58cd8515, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x5ca35e50, ftLastWriteTime.dwHighDateTime=0x1ca0422, nFileSizeHigh=0x0, nFileSizeLow=0x800, dwReserved0=0x0, dwReserved1=0x0, cFileName="IPSEventLogMsg.dll", cAlternateFileName="")) returned 1 [0064.680] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5a0 | out: lpFindFileData=0x12d5a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27c9602b, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x27c9602b, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x91865215, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xa62, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipsfin.xml", cAlternateFileName="")) returned 1 [0064.680] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5a0 | out: lpFindFileData=0x12d5a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27cbc188, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x27cbc188, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x91865215, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xa44, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipsfra.xml", cAlternateFileName="")) returned 1 [0064.680] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5a0 | out: lpFindFileData=0x12d5a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27ce22e5, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x27ce22e5, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x91865215, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xa5c, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipshrv.xml", cAlternateFileName="")) returned 1 [0064.680] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5a0 | out: lpFindFileData=0x12d5a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27ce22e5, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x27ce22e5, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x91865215, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x9de, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipsita.xml", cAlternateFileName="")) returned 1 [0064.680] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5a0 | out: lpFindFileData=0x12d5a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27d08442, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x27d08442, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x9188b373, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x9da, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipsjpn.xml", cAlternateFileName="")) returned 1 [0064.681] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5a0 | out: lpFindFileData=0x12d5a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27d2e59f, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x27d2e59f, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x918b14d1, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xa08, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipskor.xml", cAlternateFileName="")) returned 1 [0064.681] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5a0 | out: lpFindFileData=0x12d5a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5dc49d13, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0x5dc49d13, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x2a1fc7a0, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0xa000, dwReserved0=0x0, dwReserved1=0x0, cFileName="IpsMigrationPlugin.dll", cAlternateFileName="")) returned 1 [0064.681] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5a0 | out: lpFindFileData=0x12d5a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27d2e59f, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x27d2e59f, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x918b14d1, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xa42, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipsnld.xml", cAlternateFileName="")) returned 1 [0064.681] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5a0 | out: lpFindFileData=0x12d5a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27d2e59f, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x27d2e59f, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x918b14d1, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xa14, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipsnor.xml", cAlternateFileName="")) returned 1 [0064.681] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5a0 | out: lpFindFileData=0x12d5a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27d546fc, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x27d546fc, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x918b14d1, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xa28, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipsplk.xml", cAlternateFileName="")) returned 1 [0064.681] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5a0 | out: lpFindFileData=0x12d5a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x63de1b63, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0x63de1b63, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x2a991650, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x17200, dwReserved0=0x0, dwReserved1=0x0, cFileName="IpsPlugin.dll", cAlternateFileName="")) returned 1 [0064.681] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5a0 | out: lpFindFileData=0x12d5a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27d546fc, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x27d546fc, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x918b14d1, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x8c6, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipsptb.xml", cAlternateFileName="")) returned 1 [0064.681] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5a0 | out: lpFindFileData=0x12d5a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27d7a859, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x27d7a859, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x918b14d1, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x8c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipsptg.xml", cAlternateFileName="")) returned 1 [0064.681] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5a0 | out: lpFindFileData=0x12d5a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27d7a859, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x27d7a859, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x918b14d1, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xa54, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipsrom.xml", cAlternateFileName="")) returned 1 [0064.681] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5a0 | out: lpFindFileData=0x12d5a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27da09b6, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x27da09b6, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x918b14d1, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x9ee, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipsrus.xml", cAlternateFileName="")) returned 1 [0064.681] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5a0 | out: lpFindFileData=0x12d5a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27da09b6, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x27da09b6, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x918b14d1, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xa08, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipssrb.xml", cAlternateFileName="")) returned 1 [0064.681] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5a0 | out: lpFindFileData=0x12d5a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27dc6b13, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x27dc6b13, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x918b14d1, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xa24, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipssrl.xml", cAlternateFileName="")) returned 1 [0064.681] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5a0 | out: lpFindFileData=0x12d5a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27decc70, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x27decc70, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x918b14d1, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x9d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipssve.xml", cAlternateFileName="")) returned 1 [0064.681] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5a0 | out: lpFindFileData=0x12d5a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7ecb1a, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7ecb1a, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7ecb1a, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="it-IT", cAlternateFileName="")) returned 1 [0064.681] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5a0 | out: lpFindFileData=0x12d5a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7ecb1a, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd812c74, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd812c74, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ja-JP", cAlternateFileName="")) returned 1 [0064.682] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5a0 | out: lpFindFileData=0x12d5a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8b45ecf9, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0x8b45ecf9, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x2b0dd120, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x14de00, dwReserved0=0x0, dwReserved1=0x0, cFileName="journal.dll", cAlternateFileName="")) returned 1 [0064.682] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5a0 | out: lpFindFileData=0x12d5a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7ecb1a, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd812c74, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd812c74, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ko-KR", cAlternateFileName="")) returned 1 [0064.682] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5a0 | out: lpFindFileData=0x12d5a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd812c74, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd812c74, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd812c74, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="lt-LT", cAlternateFileName="")) returned 1 [0064.682] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5a0 | out: lpFindFileData=0x12d5a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd812c74, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd812c74, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd812c74, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="lv-LV", cAlternateFileName="")) returned 1 [0064.682] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5a0 | out: lpFindFileData=0x12d5a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x69e22d6e, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0x69e22d6e, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x3188e7b0, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x1a0200, dwReserved0=0x0, dwReserved1=0x0, cFileName="micaut.dll", cAlternateFileName="")) returned 1 [0064.682] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5a0 | out: lpFindFileData=0x12d5a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x472c5956, ftCreationTime.dwHighDateTime=0x1ca040e, ftLastAccessTime.dwLowDateTime=0xa4945a00, ftLastAccessTime.dwHighDateTime=0x1ca0424, ftLastWriteTime.dwLowDateTime=0x9fcc4285, ftLastWriteTime.dwHighDateTime=0x1ca0425, nFileSizeHigh=0x0, nFileSizeLow=0x7c000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Ink.dll", cAlternateFileName="")) returned 1 [0064.682] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5a0 | out: lpFindFileData=0x12d5a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa12394d3, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xa12394d3, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xa125f634, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x179c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="mip.exe", cAlternateFileName="")) returned 1 [0064.682] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5a0 | out: lpFindFileData=0x12d5a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5ad46e47, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0x5ad46e47, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x344e2230, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x609c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="mraut.dll", cAlternateFileName="")) returned 1 [0064.682] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5a0 | out: lpFindFileData=0x12d5a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x66c00201, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0x66c00201, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x34eb4c90, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0xc200, dwReserved0=0x0, dwReserved1=0x0, cFileName="mshwgst.dll", cAlternateFileName="")) returned 1 [0064.682] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5a0 | out: lpFindFileData=0x12d5a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x901e133e, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0x901e133e, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x353c2bb0, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x105a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="mshwLatin.dll", cAlternateFileName="")) returned 1 [0064.682] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5a0 | out: lpFindFileData=0x12d5a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd812c74, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd812c74, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd812c74, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nb-NO", cAlternateFileName="")) returned 1 [0064.682] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5a0 | out: lpFindFileData=0x12d5a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd812c74, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd812c74, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd812c74, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nl-NL", cAlternateFileName="")) returned 1 [0064.682] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5a0 | out: lpFindFileData=0x12d5a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd812c74, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd812c74, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd812c74, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pl-PL", cAlternateFileName="")) returned 1 [0064.682] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5a0 | out: lpFindFileData=0x12d5a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd812c74, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd812c74, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd812c74, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt-BR", cAlternateFileName="")) returned 1 [0064.682] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5a0 | out: lpFindFileData=0x12d5a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd812c74, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd812c74, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd812c74, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt-PT", cAlternateFileName="")) returned 1 [0064.683] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5a0 | out: lpFindFileData=0x12d5a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd812c74, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd812c74, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd812c74, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ro-RO", cAlternateFileName="")) returned 1 [0064.683] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5a0 | out: lpFindFileData=0x12d5a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42a795bf, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0x42a795bf, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x43f1e320, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x29800, dwReserved0=0x0, dwReserved1=0x0, cFileName="rtscom.dll", cAlternateFileName="")) returned 1 [0064.683] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5a0 | out: lpFindFileData=0x12d5a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd812c74, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd838dce, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd838dce, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ru-RU", cAlternateFileName="")) returned 1 [0064.683] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5a0 | out: lpFindFileData=0x12d5a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a593198, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0x6a593198, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0xf44c0670, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0xa9c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ShapeCollector.exe", cAlternateFileName="")) returned 1 [0064.683] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5a0 | out: lpFindFileData=0x12d5a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd838dce, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd838dce, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sk-SK", cAlternateFileName="")) returned 1 [0064.683] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5a0 | out: lpFindFileData=0x12d5a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd838dce, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd838dce, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sl-SI", cAlternateFileName="")) returned 1 [0064.683] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5a0 | out: lpFindFileData=0x12d5a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd838dce, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd838dce, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sr-Latn-CS", cAlternateFileName="SR-LAT~1")) returned 1 [0064.683] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5a0 | out: lpFindFileData=0x12d5a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd838dce, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd838dce, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sv-SE", cAlternateFileName="")) returned 1 [0064.683] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5a0 | out: lpFindFileData=0x12d5a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x56ef1310, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0x56ef1310, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x449d3e50, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x9e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="TabIpsps.dll", cAlternateFileName="")) returned 1 [0064.683] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5a0 | out: lpFindFileData=0x12d5a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8bf05363, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8bf05363, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8bf05363, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x6d600, dwReserved0=0x0, dwReserved1=0x0, cFileName="tabskb.dll", cAlternateFileName="")) returned 1 [0064.683] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5a0 | out: lpFindFileData=0x12d5a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x45c03bb8, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0x45c03bb8, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0xf8825d20, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x36c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="TabTip.exe", cAlternateFileName="")) returned 1 [0064.683] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5a0 | out: lpFindFileData=0x12d5a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd838dce, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd838dce, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="th-TH", cAlternateFileName="")) returned 1 [0064.683] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5a0 | out: lpFindFileData=0x12d5a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41bbeec8, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0x41bbeec8, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x44c363f0, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x1b000, dwReserved0=0x0, dwReserved1=0x0, cFileName="TipBand.dll", cAlternateFileName="")) returned 1 [0064.683] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5a0 | out: lpFindFileData=0x12d5a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5d6a2945, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0x5d6a2945, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x18975da0, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x85000, dwReserved0=0x0, dwReserved1=0x0, cFileName="TipRes.dll", cAlternateFileName="")) returned 1 [0064.683] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5a0 | out: lpFindFileData=0x12d5a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d7038f2, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0x3d7038f2, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x18975da0, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x3000, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll", cAlternateFileName="")) returned 1 [0064.683] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5a0 | out: lpFindFileData=0x12d5a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa125f634, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xa125f634, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xa1285794, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x130600, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipskins.dll", cAlternateFileName="")) returned 1 [0064.684] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5a0 | out: lpFindFileData=0x12d5a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa1213373, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xa1213373, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xa12394d3, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x7ae00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tiptsf.dll", cAlternateFileName="")) returned 1 [0064.684] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5a0 | out: lpFindFileData=0x12d5a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3dda83b, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb3dda83b, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb3dda83b, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x18c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tpcps.dll", cAlternateFileName="")) returned 1 [0064.684] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5a0 | out: lpFindFileData=0x12d5a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x980e725f, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x980e725f, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="tr-TR", cAlternateFileName="")) returned 1 [0064.684] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5a0 | out: lpFindFileData=0x12d5a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd838dce, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd838dce, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="uk-UA", cAlternateFileName="")) returned 1 [0064.684] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5a0 | out: lpFindFileData=0x12d5a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x98074e3f, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x98074e3f, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-CN", cAlternateFileName="")) returned 1 [0064.684] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5a0 | out: lpFindFileData=0x12d5a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd838dce, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd838dce, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-TW", cAlternateFileName="")) returned 1 [0064.684] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5a0 | out: lpFindFileData=0x12d5a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd838dce, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd838dce, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-TW", cAlternateFileName="")) returned 0 [0064.684] FindClose (in: hFindFile=0x1af3b6b0 | out: hFindFile=0x1af3b6b0) returned 1 [0064.684] SetErrorMode (uMode=0x0) returned 0x1 [0064.685] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\FlickAnimation.avi", nBufferLength=0x105, lpBuffer=0x12d600, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\FlickAnimation.avi", lpFilePart=0x0) returned 0x45 [0064.685] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\FlickAnimation.avi", nBufferLength=0x105, lpBuffer=0x12d5f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\FlickAnimation.avi", lpFilePart=0x0) returned 0x45 [0064.685] SetErrorMode (uMode=0x1) returned 0x0 [0064.685] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\FlickAnimation.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\flickanimation.avi"), fInfoLevelId=0x0, lpFileInformation=0x12d870 | out: lpFileInformation=0x12d870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x92f4e4a1, ftCreationTime.dwHighDateTime=0x1c9ea0f, ftLastAccessTime.dwLowDateTime=0x92f4e4a1, ftLastAccessTime.dwHighDateTime=0x1c9ea0f, ftLastWriteTime.dwLowDateTime=0x92f9a75d, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x186b84)) returned 1 [0064.685] SetErrorMode (uMode=0x0) returned 0x1 [0064.685] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\FlickAnimation.avi", nBufferLength=0x105, lpBuffer=0x12d2c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\FlickAnimation.avi", lpFilePart=0x0) returned 0x45 [0064.686] SetErrorMode (uMode=0x1) returned 0x0 [0064.686] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\FlickAnimation.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\flickanimation.avi"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1e8 [0064.686] GetFileType (hFile=0x1e8) returned 0x1 [0064.686] SetErrorMode (uMode=0x0) returned 0x1 [0064.686] GetFileType (hFile=0x1e8) returned 0x1 [0064.686] GetFileSize (in: hFile=0x1e8, lpFileSizeHigh=0x12d928 | out: lpFileSizeHigh=0x12d928*=0x0) returned 0x186b84 [0064.690] ReadFile (in: hFile=0x1e8, lpBuffer=0x12681ff8, nNumberOfBytesToRead=0x186b84, lpNumberOfBytesRead=0x12d808, lpOverlapped=0x0 | out: lpBuffer=0x12681ff8*, lpNumberOfBytesRead=0x12d808*=0x186b84, lpOverlapped=0x0) returned 1 [0069.969] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\FlickAnimation.avi", nBufferLength=0x105, lpBuffer=0x12d2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\FlickAnimation.avi", lpFilePart=0x0) returned 0x45 [0069.969] SetErrorMode (uMode=0x1) returned 0x0 [0069.969] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\FlickAnimation.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\flickanimation.avi"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0069.984] SetErrorMode (uMode=0x0) returned 0x1 [0069.996] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\Decrypt Instructions.txt", nBufferLength=0x105, lpBuffer=0x12d2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\Decrypt Instructions.txt", lpFilePart=0x0) returned 0x4b [0069.996] SetErrorMode (uMode=0x1) returned 0x0 [0069.996] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\Decrypt Instructions.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\decrypt instructions.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1e8 [0070.018] GetFileType (hFile=0x1e8) returned 0x1 [0070.019] SetErrorMode (uMode=0x0) returned 0x1 [0070.019] GetFileType (hFile=0x1e8) returned 0x1 [0070.019] WriteFile (in: hFile=0x1e8, lpBuffer=0x26d8c70*, nNumberOfBytesToWrite=0x773, lpNumberOfBytesWritten=0x12d808, lpOverlapped=0x0 | out: lpBuffer=0x26d8c70*, lpNumberOfBytesWritten=0x12d808*=0x773, lpOverlapped=0x0) returned 1 [0070.020] CloseHandle (hObject=0x1e8) returned 1 [0070.021] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink", nBufferLength=0x105, lpBuffer=0x12d490, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\ink", lpFilePart=0x0) returned 0x32 [0070.021] SetErrorMode (uMode=0x1) returned 0x0 [0070.022] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\*", lpFindFileData=0x12d630 | out: lpFindFileData=0x12d630*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7545b2, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x49cefed0, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x49cefed0, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1af3b6b0 [0070.022] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d640 | out: lpFindFileData=0x12d640*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7545b2, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x49cefed0, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x49cefed0, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0070.022] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d640 | out: lpFindFileData=0x12d640*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c2bbccc, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0x6c2bbccc, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x90daefa5, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc1486, dwReserved0=0x0, dwReserved1=0x0, cFileName="Alphabet.xml", cAlternateFileName="")) returned 1 [0070.022] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d640 | out: lpFindFileData=0x12d640*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7545b2, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7545b2, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7545b2, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ar-SA", cAlternateFileName="")) returned 1 [0070.022] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d640 | out: lpFindFileData=0x12d640*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7545b2, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7545b2, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7545b2, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg-BG", cAlternateFileName="")) returned 1 [0070.022] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d640 | out: lpFindFileData=0x12d640*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90daefa5, ftCreationTime.dwHighDateTime=0x1c9ea0f, ftLastAccessTime.dwLowDateTime=0x90daefa5, ftLastAccessTime.dwHighDateTime=0x1c9ea0f, ftLastWriteTime.dwLowDateTime=0x90daefa5, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x69a5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Content.xml", cAlternateFileName="")) returned 1 [0070.022] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d640 | out: lpFindFileData=0x12d640*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c92176b, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0x6c92176b, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0xdd6ec0f0, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x2f200, dwReserved0=0x0, dwReserved1=0x0, cFileName="ConvertInkStore.exe", cAlternateFileName="")) returned 1 [0070.023] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d640 | out: lpFindFileData=0x12d640*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7545b2, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd77a70c, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd77a70c, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="cs-CZ", cAlternateFileName="")) returned 1 [0070.023] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d640 | out: lpFindFileData=0x12d640*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd77a70c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd77a70c, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd77a70c, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="da-DK", cAlternateFileName="")) returned 1 [0070.023] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d640 | out: lpFindFileData=0x12d640*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd77a70c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd77a70c, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd77a70c, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="de-DE", cAlternateFileName="")) returned 1 [0070.023] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d640 | out: lpFindFileData=0x12d640*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x49cefed0, ftCreationTime.dwHighDateTime=0x1d5e786, ftLastAccessTime.dwLowDateTime=0x49cefed0, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x49cefed0, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x773, dwReserved0=0x0, dwReserved1=0x0, cFileName="Decrypt Instructions.txt", cAlternateFileName="DECRYP~1.TXT")) returned 1 [0070.023] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d640 | out: lpFindFileData=0x12d640*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd77a70c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd77a70c, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd77a70c, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="el-GR", cAlternateFileName="")) returned 1 [0070.023] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d640 | out: lpFindFileData=0x12d640*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd77a70c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x9e0df36a, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9e0df36a, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0070.023] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d640 | out: lpFindFileData=0x12d640*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd77a70c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd77a70c, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd77a70c, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="es-ES", cAlternateFileName="")) returned 1 [0070.023] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d640 | out: lpFindFileData=0x12d640*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd77a70c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd77a70c, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd77a70c, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="et-EE", cAlternateFileName="")) returned 1 [0070.023] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d640 | out: lpFindFileData=0x12d640*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd77a70c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7a0866, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7a0866, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fi-FI", cAlternateFileName="")) returned 1 [0070.024] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d640 | out: lpFindFileData=0x12d640*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x92f4e4a1, ftCreationTime.dwHighDateTime=0x1c9ea0f, ftLastAccessTime.dwLowDateTime=0x92f4e4a1, ftLastAccessTime.dwHighDateTime=0x1c9ea0f, ftLastWriteTime.dwLowDateTime=0x92f9a75d, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x186b84, dwReserved0=0x0, dwReserved1=0x0, cFileName="FlickAnimation.avi", cAlternateFileName="")) returned 1 [0070.024] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d640 | out: lpFindFileData=0x12d640*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5c53a9c4, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0x5c53a9c4, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0xe29c9700, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0xe2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="FlickLearningWizard.exe", cAlternateFileName="")) returned 1 [0070.024] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d640 | out: lpFindFileData=0x12d640*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7a0866, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x98159680, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x98159680, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr-FR", cAlternateFileName="")) returned 1 [0070.024] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d640 | out: lpFindFileData=0x12d640*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7a0866, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7ecb1a, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7ecb1a, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fsdefinitions", cAlternateFileName="FSDEFI~1")) returned 1 [0070.024] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d640 | out: lpFindFileData=0x12d640*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7ecb1a, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7ecb1a, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7ecb1a, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="he-IL", cAlternateFileName="")) returned 1 [0070.024] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d640 | out: lpFindFileData=0x12d640*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7ecb1a, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7ecb1a, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7ecb1a, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hr-HR", cAlternateFileName="")) returned 1 [0070.024] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d640 | out: lpFindFileData=0x12d640*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7ecb1a, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7ecb1a, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7ecb1a, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hu-HU", cAlternateFileName="")) returned 1 [0070.024] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d640 | out: lpFindFileData=0x12d640*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2ece8572, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x2ece8572, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x2ea60e45, ftLastWriteTime.dwHighDateTime=0x1ca03fa, nFileSizeHigh=0x0, nFileSizeLow=0xb620, dwReserved0=0x0, dwReserved1=0x0, cFileName="hwrcommonlm.dat", cAlternateFileName="")) returned 1 [0070.025] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d640 | out: lpFindFileData=0x12d640*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9e0df36a, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaabda5f8, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9e0df36a, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HWRCustomization", cAlternateFileName="HWRCUS~1")) returned 1 [0070.025] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d640 | out: lpFindFileData=0x12d640*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f7eaa54, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x2f7eaa54, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x2f301d57, ftLastWriteTime.dwHighDateTime=0x1ca03fa, nFileSizeHigh=0x0, nFileSizeLow=0xb6710, dwReserved0=0x0, dwReserved1=0x0, cFileName="hwrenalm.dat", cAlternateFileName="")) returned 1 [0070.025] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d640 | out: lpFindFileData=0x12d640*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33535c00, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x33535c00, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x332fa78d, ftLastWriteTime.dwHighDateTime=0x1ca03fa, nFileSizeHigh=0x0, nFileSizeLow=0xc7240, dwReserved0=0x0, dwReserved1=0x0, cFileName="hwrenclm.dat", cAlternateFileName="")) returned 1 [0070.025] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d640 | out: lpFindFileData=0x12d640*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x32bd661d, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x32bd661d, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x32a7f9d8, ftLastWriteTime.dwHighDateTime=0x1ca03fa, nFileSizeHigh=0x0, nFileSizeLow=0x10ca50, dwReserved0=0x0, dwReserved1=0x0, cFileName="hwrlatinlm.dat", cAlternateFileName="")) returned 1 [0070.025] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d640 | out: lpFindFileData=0x12d640*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d94dbb3, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x3d94dbb3, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x3c28ab1e, ftLastWriteTime.dwHighDateTime=0x1ca03fa, nFileSizeHigh=0x0, nFileSizeLow=0x2e99a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hwruklm.dat", cAlternateFileName="")) returned 1 [0070.025] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d640 | out: lpFindFileData=0x12d640*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3da5853e, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x3da5853e, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x3d7f6f6e, ftLastWriteTime.dwHighDateTime=0x1ca03fa, nFileSizeHigh=0x0, nFileSizeLow=0x21ff00, dwReserved0=0x0, dwReserved1=0x0, cFileName="hwruksh.dat", cAlternateFileName="")) returned 1 [0070.025] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d640 | out: lpFindFileData=0x12d640*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3db89026, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x3db89026, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x3d3cc942, ftLastWriteTime.dwHighDateTime=0x1ca03fa, nFileSizeHigh=0x0, nFileSizeLow=0x30c330, dwReserved0=0x0, dwReserved1=0x0, cFileName="hwrusalm.dat", cAlternateFileName="")) returned 1 [0070.025] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d640 | out: lpFindFileData=0x12d640*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3dbfb43d, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x3dbfb43d, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x3da7e69b, ftLastWriteTime.dwHighDateTime=0x1ca03fa, nFileSizeHigh=0x0, nFileSizeLow=0x3ee0d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hwrusash.dat", cAlternateFileName="")) returned 1 [0070.025] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d640 | out: lpFindFileData=0x12d640*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4c4bfb78, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0x4c4bfb78, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x298e8420, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x56400, dwReserved0=0x0, dwReserved1=0x0, cFileName="InkDiv.dll", cAlternateFileName="")) returned 1 [0070.026] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d640 | out: lpFindFileData=0x12d640*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c412911, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0x6c412911, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x29a8c2e0, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x201800, dwReserved0=0x0, dwReserved1=0x0, cFileName="InkObj.dll", cAlternateFileName="")) returned 1 [0070.026] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d640 | out: lpFindFileData=0x12d640*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5eab8150, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0x5eab8150, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0xe4490e80, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x61000, dwReserved0=0x0, dwReserved1=0x0, cFileName="InkWatson.exe", cAlternateFileName="")) returned 1 [0070.026] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d640 | out: lpFindFileData=0x12d640*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7700d105, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0x7700d105, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0xe45c2150, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x5da00, dwReserved0=0x0, dwReserved1=0x0, cFileName="InputPersonalization.exe", cAlternateFileName="")) returned 1 [0070.026] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d640 | out: lpFindFileData=0x12d640*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x91865215, ftCreationTime.dwHighDateTime=0x1c9ea0f, ftLastAccessTime.dwLowDateTime=0x91865215, ftLastAccessTime.dwHighDateTime=0x1c9ea0f, ftLastWriteTime.dwLowDateTime=0x91865215, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xa20, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipscat.xml", cAlternateFileName="")) returned 1 [0070.026] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d640 | out: lpFindFileData=0x12d640*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27bfdab7, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x27bfdab7, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x91865215, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x99e, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipschs.xml", cAlternateFileName="")) returned 1 [0070.026] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d640 | out: lpFindFileData=0x12d640*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27c23c14, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x27c23c14, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x91865215, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x984, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipscht.xml", cAlternateFileName="")) returned 1 [0070.026] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d640 | out: lpFindFileData=0x12d640*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27c23c14, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x27c23c14, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x91865215, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x9fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipscsy.xml", cAlternateFileName="")) returned 1 [0070.026] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d640 | out: lpFindFileData=0x12d640*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27c49d71, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x27c49d71, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x91865215, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x9d2, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipsdan.xml", cAlternateFileName="")) returned 1 [0070.026] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d640 | out: lpFindFileData=0x12d640*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27c49d71, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x27c49d71, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x91865215, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xa38, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipsdeu.xml", cAlternateFileName="")) returned 1 [0070.026] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d640 | out: lpFindFileData=0x12d640*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27c6fece, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x27c6fece, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x91865215, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xa12, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipsen.xml", cAlternateFileName="")) returned 1 [0070.026] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d640 | out: lpFindFileData=0x12d640*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27cbc188, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x27cbc188, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x91865215, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xbd0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipsesp.xml", cAlternateFileName="")) returned 1 [0070.027] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d640 | out: lpFindFileData=0x12d640*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x58cd8515, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0x58cd8515, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x5ca35e50, ftLastWriteTime.dwHighDateTime=0x1ca0422, nFileSizeHigh=0x0, nFileSizeLow=0x800, dwReserved0=0x0, dwReserved1=0x0, cFileName="IPSEventLogMsg.dll", cAlternateFileName="")) returned 1 [0070.027] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d640 | out: lpFindFileData=0x12d640*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27c9602b, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x27c9602b, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x91865215, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xa62, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipsfin.xml", cAlternateFileName="")) returned 1 [0070.027] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d640 | out: lpFindFileData=0x12d640*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27cbc188, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x27cbc188, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x91865215, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xa44, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipsfra.xml", cAlternateFileName="")) returned 1 [0070.027] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d640 | out: lpFindFileData=0x12d640*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27ce22e5, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x27ce22e5, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x91865215, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xa5c, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipshrv.xml", cAlternateFileName="")) returned 1 [0070.027] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d640 | out: lpFindFileData=0x12d640*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27ce22e5, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x27ce22e5, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x91865215, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x9de, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipsita.xml", cAlternateFileName="")) returned 1 [0070.027] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d640 | out: lpFindFileData=0x12d640*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27d08442, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x27d08442, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x9188b373, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x9da, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipsjpn.xml", cAlternateFileName="")) returned 1 [0070.027] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d640 | out: lpFindFileData=0x12d640*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27d2e59f, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x27d2e59f, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x918b14d1, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xa08, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipskor.xml", cAlternateFileName="")) returned 1 [0070.027] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d640 | out: lpFindFileData=0x12d640*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5dc49d13, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0x5dc49d13, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x2a1fc7a0, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0xa000, dwReserved0=0x0, dwReserved1=0x0, cFileName="IpsMigrationPlugin.dll", cAlternateFileName="")) returned 1 [0070.027] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d640 | out: lpFindFileData=0x12d640*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27d2e59f, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x27d2e59f, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x918b14d1, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xa42, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipsnld.xml", cAlternateFileName="")) returned 1 [0070.027] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d640 | out: lpFindFileData=0x12d640*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27d2e59f, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x27d2e59f, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x918b14d1, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xa14, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipsnor.xml", cAlternateFileName="")) returned 1 [0070.027] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d640 | out: lpFindFileData=0x12d640*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27d546fc, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x27d546fc, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x918b14d1, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xa28, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipsplk.xml", cAlternateFileName="")) returned 1 [0070.027] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d640 | out: lpFindFileData=0x12d640*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x63de1b63, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0x63de1b63, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x2a991650, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x17200, dwReserved0=0x0, dwReserved1=0x0, cFileName="IpsPlugin.dll", cAlternateFileName="")) returned 1 [0070.027] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d640 | out: lpFindFileData=0x12d640*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27d546fc, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x27d546fc, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x918b14d1, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x8c6, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipsptb.xml", cAlternateFileName="")) returned 1 [0070.027] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d640 | out: lpFindFileData=0x12d640*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27d7a859, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x27d7a859, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x918b14d1, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x8c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipsptg.xml", cAlternateFileName="")) returned 1 [0070.027] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d640 | out: lpFindFileData=0x12d640*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27d7a859, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x27d7a859, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x918b14d1, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xa54, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipsrom.xml", cAlternateFileName="")) returned 1 [0070.027] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d640 | out: lpFindFileData=0x12d640*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27da09b6, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x27da09b6, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x918b14d1, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x9ee, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipsrus.xml", cAlternateFileName="")) returned 1 [0070.027] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d640 | out: lpFindFileData=0x12d640*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27da09b6, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x27da09b6, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x918b14d1, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xa08, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipssrb.xml", cAlternateFileName="")) returned 1 [0070.028] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d640 | out: lpFindFileData=0x12d640*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27dc6b13, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x27dc6b13, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x918b14d1, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xa24, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipssrl.xml", cAlternateFileName="")) returned 1 [0070.028] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d640 | out: lpFindFileData=0x12d640*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27decc70, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x27decc70, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x918b14d1, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x9d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipssve.xml", cAlternateFileName="")) returned 1 [0070.028] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d640 | out: lpFindFileData=0x12d640*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7ecb1a, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7ecb1a, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7ecb1a, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="it-IT", cAlternateFileName="")) returned 1 [0070.028] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d640 | out: lpFindFileData=0x12d640*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7ecb1a, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd812c74, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd812c74, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ja-JP", cAlternateFileName="")) returned 1 [0070.028] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d640 | out: lpFindFileData=0x12d640*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8b45ecf9, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0x8b45ecf9, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x2b0dd120, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x14de00, dwReserved0=0x0, dwReserved1=0x0, cFileName="journal.dll", cAlternateFileName="")) returned 1 [0070.028] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d640 | out: lpFindFileData=0x12d640*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7ecb1a, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd812c74, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd812c74, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ko-KR", cAlternateFileName="")) returned 1 [0070.028] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d640 | out: lpFindFileData=0x12d640*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd812c74, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd812c74, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd812c74, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="lt-LT", cAlternateFileName="")) returned 1 [0070.028] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d640 | out: lpFindFileData=0x12d640*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd812c74, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd812c74, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd812c74, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="lv-LV", cAlternateFileName="")) returned 1 [0070.028] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d640 | out: lpFindFileData=0x12d640*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x69e22d6e, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0x69e22d6e, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x3188e7b0, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x1a0200, dwReserved0=0x0, dwReserved1=0x0, cFileName="micaut.dll", cAlternateFileName="")) returned 1 [0070.028] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d640 | out: lpFindFileData=0x12d640*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x472c5956, ftCreationTime.dwHighDateTime=0x1ca040e, ftLastAccessTime.dwLowDateTime=0xa4945a00, ftLastAccessTime.dwHighDateTime=0x1ca0424, ftLastWriteTime.dwLowDateTime=0x9fcc4285, ftLastWriteTime.dwHighDateTime=0x1ca0425, nFileSizeHigh=0x0, nFileSizeLow=0x7c000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Ink.dll", cAlternateFileName="")) returned 1 [0070.028] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d640 | out: lpFindFileData=0x12d640*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa12394d3, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xa12394d3, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xa125f634, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x179c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="mip.exe", cAlternateFileName="")) returned 1 [0070.028] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d640 | out: lpFindFileData=0x12d640*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5ad46e47, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0x5ad46e47, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x344e2230, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x609c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="mraut.dll", cAlternateFileName="")) returned 1 [0070.028] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d640 | out: lpFindFileData=0x12d640*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x66c00201, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0x66c00201, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x34eb4c90, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0xc200, dwReserved0=0x0, dwReserved1=0x0, cFileName="mshwgst.dll", cAlternateFileName="")) returned 1 [0070.028] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d640 | out: lpFindFileData=0x12d640*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x901e133e, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0x901e133e, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x353c2bb0, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x105a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="mshwLatin.dll", cAlternateFileName="")) returned 1 [0070.028] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d640 | out: lpFindFileData=0x12d640*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd812c74, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd812c74, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd812c74, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nb-NO", cAlternateFileName="")) returned 1 [0070.029] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d640 | out: lpFindFileData=0x12d640*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd812c74, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd812c74, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd812c74, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nl-NL", cAlternateFileName="")) returned 1 [0070.029] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d640 | out: lpFindFileData=0x12d640*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd812c74, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd812c74, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd812c74, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pl-PL", cAlternateFileName="")) returned 1 [0070.029] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d640 | out: lpFindFileData=0x12d640*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd812c74, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd812c74, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd812c74, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt-BR", cAlternateFileName="")) returned 1 [0070.029] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d640 | out: lpFindFileData=0x12d640*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd812c74, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd812c74, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd812c74, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt-PT", cAlternateFileName="")) returned 1 [0070.029] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d640 | out: lpFindFileData=0x12d640*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd812c74, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd812c74, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd812c74, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ro-RO", cAlternateFileName="")) returned 1 [0070.029] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d640 | out: lpFindFileData=0x12d640*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42a795bf, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0x42a795bf, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x43f1e320, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x29800, dwReserved0=0x0, dwReserved1=0x0, cFileName="rtscom.dll", cAlternateFileName="")) returned 1 [0070.029] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d640 | out: lpFindFileData=0x12d640*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd812c74, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd838dce, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd838dce, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ru-RU", cAlternateFileName="")) returned 1 [0070.029] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d640 | out: lpFindFileData=0x12d640*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a593198, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0x6a593198, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0xf44c0670, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0xa9c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ShapeCollector.exe", cAlternateFileName="")) returned 1 [0070.029] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d640 | out: lpFindFileData=0x12d640*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd838dce, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd838dce, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sk-SK", cAlternateFileName="")) returned 1 [0070.029] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d640 | out: lpFindFileData=0x12d640*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd838dce, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd838dce, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sl-SI", cAlternateFileName="")) returned 1 [0070.029] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d640 | out: lpFindFileData=0x12d640*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd838dce, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd838dce, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sr-Latn-CS", cAlternateFileName="SR-LAT~1")) returned 1 [0070.029] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d640 | out: lpFindFileData=0x12d640*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd838dce, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd838dce, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sv-SE", cAlternateFileName="")) returned 1 [0070.029] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d640 | out: lpFindFileData=0x12d640*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x56ef1310, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0x56ef1310, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x449d3e50, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x9e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="TabIpsps.dll", cAlternateFileName="")) returned 1 [0070.029] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d640 | out: lpFindFileData=0x12d640*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8bf05363, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8bf05363, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8bf05363, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x6d600, dwReserved0=0x0, dwReserved1=0x0, cFileName="tabskb.dll", cAlternateFileName="")) returned 1 [0070.029] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d640 | out: lpFindFileData=0x12d640*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x45c03bb8, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0x45c03bb8, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0xf8825d20, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x36c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="TabTip.exe", cAlternateFileName="")) returned 1 [0070.029] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d640 | out: lpFindFileData=0x12d640*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd838dce, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd838dce, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="th-TH", cAlternateFileName="")) returned 1 [0070.029] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d640 | out: lpFindFileData=0x12d640*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41bbeec8, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0x41bbeec8, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x44c363f0, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x1b000, dwReserved0=0x0, dwReserved1=0x0, cFileName="TipBand.dll", cAlternateFileName="")) returned 1 [0070.030] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d640 | out: lpFindFileData=0x12d640*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5d6a2945, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0x5d6a2945, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x18975da0, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x85000, dwReserved0=0x0, dwReserved1=0x0, cFileName="TipRes.dll", cAlternateFileName="")) returned 1 [0070.030] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d640 | out: lpFindFileData=0x12d640*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d7038f2, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0x3d7038f2, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x18975da0, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x3000, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll", cAlternateFileName="")) returned 1 [0070.030] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d640 | out: lpFindFileData=0x12d640*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa125f634, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xa125f634, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xa1285794, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x130600, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipskins.dll", cAlternateFileName="")) returned 1 [0070.030] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d640 | out: lpFindFileData=0x12d640*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa1213373, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xa1213373, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xa12394d3, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x7ae00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tiptsf.dll", cAlternateFileName="")) returned 1 [0070.030] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d640 | out: lpFindFileData=0x12d640*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3dda83b, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb3dda83b, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb3dda83b, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x18c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tpcps.dll", cAlternateFileName="")) returned 1 [0070.030] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d640 | out: lpFindFileData=0x12d640*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x980e725f, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x980e725f, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="tr-TR", cAlternateFileName="")) returned 1 [0070.030] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d640 | out: lpFindFileData=0x12d640*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd838dce, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd838dce, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="uk-UA", cAlternateFileName="")) returned 1 [0070.030] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d640 | out: lpFindFileData=0x12d640*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x98074e3f, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x98074e3f, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-CN", cAlternateFileName="")) returned 1 [0070.030] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d640 | out: lpFindFileData=0x12d640*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd838dce, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd838dce, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-TW", cAlternateFileName="")) returned 1 [0070.030] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d640 | out: lpFindFileData=0x12d640*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd838dce, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd838dce, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-TW", cAlternateFileName="")) returned 0 [0070.030] FindClose (in: hFindFile=0x1af3b6b0 | out: hFindFile=0x1af3b6b0) returned 1 [0070.030] SetErrorMode (uMode=0x0) returned 0x1 [0070.031] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ar-SA", nBufferLength=0x105, lpBuffer=0x12d390, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ar-SA", lpFilePart=0x0) returned 0x38 [0070.031] SetErrorMode (uMode=0x1) returned 0x0 [0070.031] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ar-SA\\*", lpFindFileData=0x12d530 | out: lpFindFileData=0x12d530*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7545b2, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7545b2, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7545b2, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1af3b6b0 [0070.056] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7545b2, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7545b2, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7545b2, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0070.056] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe846a08f, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe86330eb, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe8659248, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0070.056] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe846a08f, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe86330eb, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe8659248, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0070.057] FindClose (in: hFindFile=0x1af3b6b0 | out: hFindFile=0x1af3b6b0) returned 1 [0070.057] SetErrorMode (uMode=0x0) returned 0x1 [0070.057] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ar-SA\\Decrypt Instructions.txt", nBufferLength=0x105, lpBuffer=0x12d240, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ar-SA\\Decrypt Instructions.txt", lpFilePart=0x0) returned 0x51 [0070.057] SetErrorMode (uMode=0x1) returned 0x0 [0070.057] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ar-SA\\Decrypt Instructions.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ar-sa\\decrypt instructions.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1e8 [0070.058] GetFileType (hFile=0x1e8) returned 0x1 [0070.058] SetErrorMode (uMode=0x0) returned 0x1 [0070.058] GetFileType (hFile=0x1e8) returned 0x1 [0070.058] WriteFile (in: hFile=0x1e8, lpBuffer=0x26e2828*, nNumberOfBytesToWrite=0x773, lpNumberOfBytesWritten=0x12d7a8, lpOverlapped=0x0 | out: lpBuffer=0x26e2828*, lpNumberOfBytesWritten=0x12d7a8*=0x773, lpOverlapped=0x0) returned 1 [0070.061] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ar-SA", nBufferLength=0x105, lpBuffer=0x12d430, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ar-SA", lpFilePart=0x0) returned 0x38 [0070.061] SetErrorMode (uMode=0x1) returned 0x0 [0070.061] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ar-SA\\*", lpFindFileData=0x12d5d0 | out: lpFindFileData=0x12d5d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7545b2, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x49d622f0, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x49d622f0, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1af3b6b0 [0070.061] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7545b2, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x49d622f0, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x49d622f0, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0070.062] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x49d622f0, ftCreationTime.dwHighDateTime=0x1d5e786, ftLastAccessTime.dwLowDateTime=0x49d622f0, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x49d622f0, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x773, dwReserved0=0x0, dwReserved1=0x0, cFileName="Decrypt Instructions.txt", cAlternateFileName="DECRYP~1.TXT")) returned 1 [0070.062] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe846a08f, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe86330eb, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe8659248, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0070.062] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe846a08f, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe86330eb, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe8659248, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0070.062] FindClose (in: hFindFile=0x1af3b6b0 | out: hFindFile=0x1af3b6b0) returned 1 [0070.062] SetErrorMode (uMode=0x0) returned 0x1 [0070.062] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\bg-BG", nBufferLength=0x105, lpBuffer=0x12d390, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\bg-BG", lpFilePart=0x0) returned 0x38 [0070.062] SetErrorMode (uMode=0x1) returned 0x0 [0070.062] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\bg-BG\\*", lpFindFileData=0x12d530 | out: lpFindFileData=0x12d530*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7545b2, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7545b2, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7545b2, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1af3b6b0 [0070.063] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7545b2, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7545b2, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7545b2, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0070.063] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea1207ac, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xea335ac2, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xea35bc1f, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0070.063] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea1207ac, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xea335ac2, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xea35bc1f, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0070.063] FindClose (in: hFindFile=0x1af3b6b0 | out: hFindFile=0x1af3b6b0) returned 1 [0070.063] SetErrorMode (uMode=0x0) returned 0x1 [0070.064] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\bg-BG\\Decrypt Instructions.txt", nBufferLength=0x105, lpBuffer=0x12d240, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\bg-BG\\Decrypt Instructions.txt", lpFilePart=0x0) returned 0x51 [0070.064] SetErrorMode (uMode=0x1) returned 0x0 [0070.064] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\bg-BG\\Decrypt Instructions.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\bg-bg\\decrypt instructions.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1e8 [0070.064] GetFileType (hFile=0x1e8) returned 0x1 [0070.064] SetErrorMode (uMode=0x0) returned 0x1 [0070.065] GetFileType (hFile=0x1e8) returned 0x1 [0070.065] WriteFile (in: hFile=0x1e8, lpBuffer=0x26e8df0*, nNumberOfBytesToWrite=0x773, lpNumberOfBytesWritten=0x12d7a8, lpOverlapped=0x0 | out: lpBuffer=0x26e8df0*, lpNumberOfBytesWritten=0x12d7a8*=0x773, lpOverlapped=0x0) returned 1 [0070.066] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\bg-BG", nBufferLength=0x105, lpBuffer=0x12d430, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\bg-BG", lpFilePart=0x0) returned 0x38 [0070.066] SetErrorMode (uMode=0x1) returned 0x0 [0070.066] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\bg-BG\\*", lpFindFileData=0x12d5d0 | out: lpFindFileData=0x12d5d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7545b2, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x49d622f0, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x49d622f0, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1af3b6b0 [0070.066] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7545b2, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x49d622f0, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x49d622f0, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0070.067] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x49d622f0, ftCreationTime.dwHighDateTime=0x1d5e786, ftLastAccessTime.dwLowDateTime=0x49d622f0, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x49d622f0, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x773, dwReserved0=0x0, dwReserved1=0x0, cFileName="Decrypt Instructions.txt", cAlternateFileName="DECRYP~1.TXT")) returned 1 [0070.067] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea1207ac, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xea335ac2, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xea35bc1f, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0070.067] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea1207ac, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xea335ac2, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xea35bc1f, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0070.067] FindClose (in: hFindFile=0x1af3b6b0 | out: hFindFile=0x1af3b6b0) returned 1 [0070.067] SetErrorMode (uMode=0x0) returned 0x1 [0070.067] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\cs-CZ", nBufferLength=0x105, lpBuffer=0x12d390, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\cs-CZ", lpFilePart=0x0) returned 0x38 [0070.067] SetErrorMode (uMode=0x1) returned 0x0 [0070.067] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\cs-CZ\\*", lpFindFileData=0x12d530 | out: lpFindFileData=0x12d530*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7545b2, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd77a70c, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd77a70c, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1af3b6b0 [0070.068] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7545b2, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd77a70c, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd77a70c, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0070.068] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe6ce8929, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe6f23d9c, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe6f23d9c, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0070.068] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe6ce8929, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe6f23d9c, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe6f23d9c, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0070.068] FindClose (in: hFindFile=0x1af3b6b0 | out: hFindFile=0x1af3b6b0) returned 1 [0070.068] SetErrorMode (uMode=0x0) returned 0x1 [0070.069] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\cs-CZ\\Decrypt Instructions.txt", nBufferLength=0x105, lpBuffer=0x12d240, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\cs-CZ\\Decrypt Instructions.txt", lpFilePart=0x0) returned 0x51 [0070.069] SetErrorMode (uMode=0x1) returned 0x0 [0070.069] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\cs-CZ\\Decrypt Instructions.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\cs-cz\\decrypt instructions.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1e8 [0070.070] GetFileType (hFile=0x1e8) returned 0x1 [0070.070] SetErrorMode (uMode=0x0) returned 0x1 [0070.070] GetFileType (hFile=0x1e8) returned 0x1 [0070.071] WriteFile (in: hFile=0x1e8, lpBuffer=0x26ef3b8*, nNumberOfBytesToWrite=0x773, lpNumberOfBytesWritten=0x12d7a8, lpOverlapped=0x0 | out: lpBuffer=0x26ef3b8*, lpNumberOfBytesWritten=0x12d7a8*=0x773, lpOverlapped=0x0) returned 1 [0070.073] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\cs-CZ", nBufferLength=0x105, lpBuffer=0x12d430, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\cs-CZ", lpFilePart=0x0) returned 0x38 [0070.073] SetErrorMode (uMode=0x1) returned 0x0 [0070.073] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\cs-CZ\\*", lpFindFileData=0x12d5d0 | out: lpFindFileData=0x12d5d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7545b2, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x49d88450, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x49d88450, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1af3b6b0 [0070.073] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7545b2, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x49d88450, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x49d88450, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0070.073] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x49d88450, ftCreationTime.dwHighDateTime=0x1d5e786, ftLastAccessTime.dwLowDateTime=0x49d88450, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x49d88450, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x773, dwReserved0=0x0, dwReserved1=0x0, cFileName="Decrypt Instructions.txt", cAlternateFileName="DECRYP~1.TXT")) returned 1 [0070.073] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe6ce8929, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe6f23d9c, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe6f23d9c, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0070.073] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe6ce8929, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe6f23d9c, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe6f23d9c, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0070.073] FindClose (in: hFindFile=0x1af3b6b0 | out: hFindFile=0x1af3b6b0) returned 1 [0070.074] SetErrorMode (uMode=0x0) returned 0x1 [0070.074] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\da-DK", nBufferLength=0x105, lpBuffer=0x12d390, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\da-DK", lpFilePart=0x0) returned 0x38 [0070.074] SetErrorMode (uMode=0x1) returned 0x0 [0070.074] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\da-DK\\*", lpFindFileData=0x12d530 | out: lpFindFileData=0x12d530*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd77a70c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd77a70c, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd77a70c, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1af3b6b0 [0070.075] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd77a70c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd77a70c, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd77a70c, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0070.075] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe6fbc310, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe71ab4c9, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe71d1626, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0070.075] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe6fbc310, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe71ab4c9, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe71d1626, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0070.075] FindClose (in: hFindFile=0x1af3b6b0 | out: hFindFile=0x1af3b6b0) returned 1 [0070.075] SetErrorMode (uMode=0x0) returned 0x1 [0070.075] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\da-DK\\Decrypt Instructions.txt", nBufferLength=0x105, lpBuffer=0x12d240, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\da-DK\\Decrypt Instructions.txt", lpFilePart=0x0) returned 0x51 [0070.075] SetErrorMode (uMode=0x1) returned 0x0 [0070.075] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\da-DK\\Decrypt Instructions.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\da-dk\\decrypt instructions.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1e8 [0070.076] GetFileType (hFile=0x1e8) returned 0x1 [0070.076] SetErrorMode (uMode=0x0) returned 0x1 [0070.076] GetFileType (hFile=0x1e8) returned 0x1 [0070.076] WriteFile (in: hFile=0x1e8, lpBuffer=0x26f5980*, nNumberOfBytesToWrite=0x773, lpNumberOfBytesWritten=0x12d7a8, lpOverlapped=0x0 | out: lpBuffer=0x26f5980*, lpNumberOfBytesWritten=0x12d7a8*=0x773, lpOverlapped=0x0) returned 1 [0070.078] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\da-DK", nBufferLength=0x105, lpBuffer=0x12d430, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\da-DK", lpFilePart=0x0) returned 0x38 [0070.078] SetErrorMode (uMode=0x1) returned 0x0 [0070.078] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\da-DK\\*", lpFindFileData=0x12d5d0 | out: lpFindFileData=0x12d5d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd77a70c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x49d88450, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x49d88450, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1af3b6b0 [0070.078] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd77a70c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x49d88450, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x49d88450, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0070.078] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x49d88450, ftCreationTime.dwHighDateTime=0x1d5e786, ftLastAccessTime.dwLowDateTime=0x49d88450, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x49d88450, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x773, dwReserved0=0x0, dwReserved1=0x0, cFileName="Decrypt Instructions.txt", cAlternateFileName="DECRYP~1.TXT")) returned 1 [0070.078] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe6fbc310, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe71ab4c9, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe71d1626, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0070.078] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe6fbc310, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe71ab4c9, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe71d1626, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0070.078] FindClose (in: hFindFile=0x1af3b6b0 | out: hFindFile=0x1af3b6b0) returned 1 [0070.079] SetErrorMode (uMode=0x0) returned 0x1 [0070.079] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\de-DE", nBufferLength=0x105, lpBuffer=0x12d390, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\de-DE", lpFilePart=0x0) returned 0x38 [0070.079] SetErrorMode (uMode=0x1) returned 0x0 [0070.079] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\de-DE\\*", lpFindFileData=0x12d530 | out: lpFindFileData=0x12d530*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd77a70c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd77a70c, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd77a70c, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1af3b6b0 [0070.081] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd77a70c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd77a70c, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd77a70c, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0070.081] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe728fcf7, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe74cb16a, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe74cb16a, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0070.081] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe728fcf7, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe74cb16a, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe74cb16a, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0070.081] FindClose (in: hFindFile=0x1af3b6b0 | out: hFindFile=0x1af3b6b0) returned 1 [0070.081] SetErrorMode (uMode=0x0) returned 0x1 [0070.082] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\de-DE\\Decrypt Instructions.txt", nBufferLength=0x105, lpBuffer=0x12d240, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\de-DE\\Decrypt Instructions.txt", lpFilePart=0x0) returned 0x51 [0070.082] SetErrorMode (uMode=0x1) returned 0x0 [0070.082] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\de-DE\\Decrypt Instructions.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\de-de\\decrypt instructions.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1e8 [0070.082] GetFileType (hFile=0x1e8) returned 0x1 [0070.082] SetErrorMode (uMode=0x0) returned 0x1 [0070.082] GetFileType (hFile=0x1e8) returned 0x1 [0070.083] WriteFile (in: hFile=0x1e8, lpBuffer=0x26fbf48*, nNumberOfBytesToWrite=0x773, lpNumberOfBytesWritten=0x12d7a8, lpOverlapped=0x0 | out: lpBuffer=0x26fbf48*, lpNumberOfBytesWritten=0x12d7a8*=0x773, lpOverlapped=0x0) returned 1 [0070.084] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\de-DE", nBufferLength=0x105, lpBuffer=0x12d430, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\de-DE", lpFilePart=0x0) returned 0x38 [0070.084] SetErrorMode (uMode=0x1) returned 0x0 [0070.084] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\de-DE\\*", lpFindFileData=0x12d5d0 | out: lpFindFileData=0x12d5d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd77a70c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x49d88450, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x49d88450, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1af3b6b0 [0070.085] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd77a70c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x49d88450, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x49d88450, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0070.085] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x49d88450, ftCreationTime.dwHighDateTime=0x1d5e786, ftLastAccessTime.dwLowDateTime=0x49d88450, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x49d88450, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x773, dwReserved0=0x0, dwReserved1=0x0, cFileName="Decrypt Instructions.txt", cAlternateFileName="DECRYP~1.TXT")) returned 1 [0070.085] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe728fcf7, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe74cb16a, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe74cb16a, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0070.085] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe728fcf7, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe74cb16a, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe74cb16a, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0070.085] FindClose (in: hFindFile=0x1af3b6b0 | out: hFindFile=0x1af3b6b0) returned 1 [0070.085] SetErrorMode (uMode=0x0) returned 0x1 [0070.085] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\el-GR", nBufferLength=0x105, lpBuffer=0x12d390, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\el-GR", lpFilePart=0x0) returned 0x38 [0070.086] SetErrorMode (uMode=0x1) returned 0x0 [0070.086] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\el-GR\\*", lpFindFileData=0x12d530 | out: lpFindFileData=0x12d530*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd77a70c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd77a70c, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd77a70c, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1af3b6b0 [0070.087] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd77a70c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd77a70c, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd77a70c, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0070.087] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe31667d9, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe337baef, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe337baef, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0070.087] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe31667d9, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe337baef, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe337baef, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0070.087] FindClose (in: hFindFile=0x1af3b6b0 | out: hFindFile=0x1af3b6b0) returned 1 [0070.087] SetErrorMode (uMode=0x0) returned 0x1 [0070.087] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\el-GR\\Decrypt Instructions.txt", nBufferLength=0x105, lpBuffer=0x12d240, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\el-GR\\Decrypt Instructions.txt", lpFilePart=0x0) returned 0x51 [0070.087] SetErrorMode (uMode=0x1) returned 0x0 [0070.088] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\el-GR\\Decrypt Instructions.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\el-gr\\decrypt instructions.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1e8 [0070.106] GetFileType (hFile=0x1e8) returned 0x1 [0070.106] SetErrorMode (uMode=0x0) returned 0x1 [0070.106] GetFileType (hFile=0x1e8) returned 0x1 [0070.107] WriteFile (in: hFile=0x1e8, lpBuffer=0x2702510*, nNumberOfBytesToWrite=0x773, lpNumberOfBytesWritten=0x12d7a8, lpOverlapped=0x0 | out: lpBuffer=0x2702510*, lpNumberOfBytesWritten=0x12d7a8*=0x773, lpOverlapped=0x0) returned 1 [0070.108] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\el-GR", nBufferLength=0x105, lpBuffer=0x12d430, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\el-GR", lpFilePart=0x0) returned 0x38 [0070.108] SetErrorMode (uMode=0x1) returned 0x0 [0070.108] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\el-GR\\*", lpFindFileData=0x12d5d0 | out: lpFindFileData=0x12d5d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd77a70c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x49dd4710, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x49dd4710, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1af3b6b0 [0070.109] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd77a70c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x49dd4710, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x49dd4710, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0070.109] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x49dd4710, ftCreationTime.dwHighDateTime=0x1d5e786, ftLastAccessTime.dwLowDateTime=0x49dd4710, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x49dd4710, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x773, dwReserved0=0x0, dwReserved1=0x0, cFileName="Decrypt Instructions.txt", cAlternateFileName="DECRYP~1.TXT")) returned 1 [0070.109] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe31667d9, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe337baef, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe337baef, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0070.109] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe31667d9, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe337baef, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe337baef, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0070.109] FindClose (in: hFindFile=0x1af3b6b0 | out: hFindFile=0x1af3b6b0) returned 1 [0070.109] SetErrorMode (uMode=0x0) returned 0x1 [0070.109] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US", nBufferLength=0x105, lpBuffer=0x12d390, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US", lpFilePart=0x0) returned 0x38 [0070.109] SetErrorMode (uMode=0x1) returned 0x0 [0070.110] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\*", lpFindFileData=0x12d530 | out: lpFindFileData=0x12d530*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd77a70c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x9e0df36a, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9e0df36a, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1af3b6b0 [0070.113] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd77a70c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x9e0df36a, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9e0df36a, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0070.113] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9a407849, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0x9a407849, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0x9a407849, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x15e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="boxed-correct.avi", cAlternateFileName="")) returned 1 [0070.114] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x23b3de0, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x23b3de0, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x9a49fdc1, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x7c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="boxed-delete.avi", cAlternateFileName="")) returned 1 [0070.114] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x23d9f3d, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x23d9f3d, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x9a4c5f1f, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x8200, dwReserved0=0x0, dwReserved1=0x0, cFileName="boxed-join.avi", cAlternateFileName="")) returned 1 [0070.114] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x24261f7, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x24261f7, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x9a538339, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0xf600, dwReserved0=0x0, dwReserved1=0x0, cFileName="boxed-split.avi", cAlternateFileName="")) returned 1 [0070.114] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x244c354, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x244c354, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x9a55e497, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x30200, dwReserved0=0x0, dwReserved1=0x0, cFileName="correct.avi", cAlternateFileName="")) returned 1 [0070.114] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x24be76b, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x24be76b, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x9a5845f5, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x36c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="delete.avi", cAlternateFileName="")) returned 1 [0070.114] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x110442fe, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1138bee4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x110442fe, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x2200, dwReserved0=0x0, dwReserved1=0x0, cFileName="FlickLearningWizard.exe.mui", cAlternateFileName="")) returned 1 [0070.114] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdc8723b, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xe067905, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xdc8723b, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x1200, dwReserved0=0x0, dwReserved1=0x0, cFileName="InkObj.dll.mui", cAlternateFileName="")) returned 1 [0070.114] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x110442fe, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1138bee4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x110442fe, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x2400, dwReserved0=0x0, dwReserved1=0x0, cFileName="InkWatson.exe.mui", cAlternateFileName="")) returned 1 [0070.114] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x110442fe, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1138bee4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x110442fe, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="InputPersonalization.exe.mui", cAlternateFileName="")) returned 1 [0070.114] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x110442fe, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1138bee4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x110442fe, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x5800, dwReserved0=0x0, dwReserved1=0x0, cFileName="IPSEventLogMsg.dll.mui", cAlternateFileName="")) returned 1 [0070.114] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x110442fe, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1138bee4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x110442fe, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="IpsMigrationPlugin.dll.mui", cAlternateFileName="")) returned 1 [0070.114] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x250aa25, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x250aa25, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x9a5aa753, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x36400, dwReserved0=0x0, dwReserved1=0x0, cFileName="join.avi", cAlternateFileName="")) returned 1 [0070.115] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x110442fe, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1138bee4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x110442fe, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x2200, dwReserved0=0x0, dwReserved1=0x0, cFileName="micaut.dll.mui", cAlternateFileName="")) returned 1 [0070.115] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x110442fe, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1138bee4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x110442fe, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="mip.exe.mui", cAlternateFileName="")) returned 1 [0070.115] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x110442fe, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1138bee4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x110442fe, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="mshwLatin.dll.mui", cAlternateFileName="")) returned 1 [0070.115] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeca1847, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xf901a42, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xeca1847, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="rtscom.dll.mui", cAlternateFileName="")) returned 1 [0070.115] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x110442fe, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1138bee4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x110442fe, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xaa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ShapeCollector.exe.mui", cAlternateFileName="")) returned 1 [0070.115] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x25c90f6, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x25c90f6, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x9a5d08b1, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x2f600, dwReserved0=0x0, dwReserved1=0x0, cFileName="split.avi", cAlternateFileName="")) returned 1 [0070.115] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa23a9ac, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xa5a884b, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xa23a9ac, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xc00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tabskb.dll.mui", cAlternateFileName="")) returned 1 [0070.115] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x110442fe, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1138bee4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x110442fe, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xc00, dwReserved0=0x0, dwReserved1=0x0, cFileName="TipBand.dll.mui", cAlternateFileName="")) returned 1 [0070.115] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x110442fe, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1138bee4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x110442fe, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x8000, dwReserved0=0x0, dwReserved1=0x0, cFileName="TipRes.dll.mui", cAlternateFileName="")) returned 1 [0070.115] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe5cd75ed, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe5f38bbd, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe5f38bbd, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0070.115] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x110442fe, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1138bee4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x110442fe, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xc00, dwReserved0=0x0, dwReserved1=0x0, cFileName="TipTsf.dll.mui", cAlternateFileName="")) returned 1 [0070.115] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x110442fe, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1138bee4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x110442fe, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xc00, dwReserved0=0x0, dwReserved1=0x0, cFileName="TipTsf.dll.mui", cAlternateFileName="")) returned 0 [0070.116] FindClose (in: hFindFile=0x1af3b6b0 | out: hFindFile=0x1af3b6b0) returned 1 [0070.117] SetErrorMode (uMode=0x0) returned 0x1 [0070.117] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\boxed-correct.avi", nBufferLength=0x105, lpBuffer=0x12d5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\boxed-correct.avi", lpFilePart=0x0) returned 0x4a [0070.117] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\boxed-correct.avi", nBufferLength=0x105, lpBuffer=0x12d590, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\boxed-correct.avi", lpFilePart=0x0) returned 0x4a [0070.117] SetErrorMode (uMode=0x1) returned 0x0 [0070.117] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\boxed-correct.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\boxed-correct.avi"), fInfoLevelId=0x0, lpFileInformation=0x12d810 | out: lpFileInformation=0x12d810*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9a407849, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0x9a407849, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0x9a407849, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x15e00)) returned 1 [0070.120] SetErrorMode (uMode=0x0) returned 0x1 [0070.120] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\boxed-correct.avi", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\boxed-correct.avi", lpFilePart=0x0) returned 0x4a [0070.120] SetErrorMode (uMode=0x1) returned 0x0 [0070.120] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\boxed-correct.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\boxed-correct.avi"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1e8 [0070.121] GetFileType (hFile=0x1e8) returned 0x1 [0070.121] SetErrorMode (uMode=0x0) returned 0x1 [0070.121] GetFileType (hFile=0x1e8) returned 0x1 [0070.121] GetFileSize (in: hFile=0x1e8, lpFileSizeHigh=0x12d8c8 | out: lpFileSizeHigh=0x12d8c8*=0x0) returned 0x15e00 [0070.122] ReadFile (in: hFile=0x1e8, lpBuffer=0x12807760, nNumberOfBytesToRead=0x15e00, lpNumberOfBytesRead=0x12d7a8, lpOverlapped=0x0 | out: lpBuffer=0x12807760*, lpNumberOfBytesRead=0x12d7a8*=0x15e00, lpOverlapped=0x0) returned 1 [0070.187] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\boxed-correct.avi", nBufferLength=0x105, lpBuffer=0x12d270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\boxed-correct.avi", lpFilePart=0x0) returned 0x4a [0070.187] SetErrorMode (uMode=0x1) returned 0x0 [0070.188] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\boxed-correct.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\boxed-correct.avi"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0070.190] SetErrorMode (uMode=0x0) returned 0x1 [0070.192] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\boxed-delete.avi", nBufferLength=0x105, lpBuffer=0x12d5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\boxed-delete.avi", lpFilePart=0x0) returned 0x49 [0070.192] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\boxed-delete.avi", nBufferLength=0x105, lpBuffer=0x12d590, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\boxed-delete.avi", lpFilePart=0x0) returned 0x49 [0070.192] SetErrorMode (uMode=0x1) returned 0x0 [0070.192] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\boxed-delete.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\boxed-delete.avi"), fInfoLevelId=0x0, lpFileInformation=0x12d810 | out: lpFileInformation=0x12d810*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x23b3de0, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x23b3de0, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x9a49fdc1, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x7c00)) returned 1 [0070.203] SetErrorMode (uMode=0x0) returned 0x1 [0070.547] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\boxed-delete.avi", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\boxed-delete.avi", lpFilePart=0x0) returned 0x49 [0070.547] SetErrorMode (uMode=0x1) returned 0x0 [0070.547] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\boxed-delete.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\boxed-delete.avi"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1e8 [0070.548] GetFileType (hFile=0x1e8) returned 0x1 [0070.548] SetErrorMode (uMode=0x0) returned 0x1 [0070.548] GetFileType (hFile=0x1e8) returned 0x1 [0070.548] GetFileSize (in: hFile=0x1e8, lpFileSizeHigh=0x12d8c8 | out: lpFileSizeHigh=0x12d8c8*=0x0) returned 0x7c00 [0070.548] ReadFile (in: hFile=0x1e8, lpBuffer=0x27e8ff8, nNumberOfBytesToRead=0x7c00, lpNumberOfBytesRead=0x12d7a8, lpOverlapped=0x0 | out: lpBuffer=0x27e8ff8*, lpNumberOfBytesRead=0x12d7a8*=0x7c00, lpOverlapped=0x0) returned 1 [0070.608] CloseHandle (hObject=0x1e8) returned 1 [0070.789] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\boxed-delete.avi", nBufferLength=0x105, lpBuffer=0x12d270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\boxed-delete.avi", lpFilePart=0x0) returned 0x49 [0070.790] SetErrorMode (uMode=0x1) returned 0x0 [0070.790] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\boxed-delete.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\boxed-delete.avi"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0070.793] SetErrorMode (uMode=0x0) returned 0x1 [0070.794] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\boxed-join.avi", nBufferLength=0x105, lpBuffer=0x12d5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\boxed-join.avi", lpFilePart=0x0) returned 0x47 [0070.794] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\boxed-join.avi", nBufferLength=0x105, lpBuffer=0x12d590, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\boxed-join.avi", lpFilePart=0x0) returned 0x47 [0070.794] SetErrorMode (uMode=0x1) returned 0x0 [0070.795] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\boxed-join.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\boxed-join.avi"), fInfoLevelId=0x0, lpFileInformation=0x12d810 | out: lpFileInformation=0x12d810*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x23d9f3d, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x23d9f3d, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x9a4c5f1f, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x8200)) returned 1 [0070.795] SetErrorMode (uMode=0x0) returned 0x1 [0070.795] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\boxed-join.avi", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\boxed-join.avi", lpFilePart=0x0) returned 0x47 [0070.795] SetErrorMode (uMode=0x1) returned 0x0 [0070.795] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\boxed-join.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\boxed-join.avi"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1e8 [0070.795] GetFileType (hFile=0x1e8) returned 0x1 [0070.796] SetErrorMode (uMode=0x0) returned 0x1 [0070.796] GetFileType (hFile=0x1e8) returned 0x1 [0070.796] GetFileSize (in: hFile=0x1e8, lpFileSizeHigh=0x12d8c8 | out: lpFileSizeHigh=0x12d8c8*=0x0) returned 0x8200 [0070.796] ReadFile (in: hFile=0x1e8, lpBuffer=0x2707078, nNumberOfBytesToRead=0x8200, lpNumberOfBytesRead=0x12d7a8, lpOverlapped=0x0 | out: lpBuffer=0x2707078*, lpNumberOfBytesRead=0x12d7a8*=0x8200, lpOverlapped=0x0) returned 1 [0070.917] CloseHandle (hObject=0x1e8) returned 1 [0071.078] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\boxed-join.avi", nBufferLength=0x105, lpBuffer=0x12d270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\boxed-join.avi", lpFilePart=0x0) returned 0x47 [0071.078] SetErrorMode (uMode=0x1) returned 0x0 [0071.078] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\boxed-join.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\boxed-join.avi"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0071.082] SetErrorMode (uMode=0x0) returned 0x1 [0071.084] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\boxed-split.avi", nBufferLength=0x105, lpBuffer=0x12d5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\boxed-split.avi", lpFilePart=0x0) returned 0x48 [0071.084] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\boxed-split.avi", nBufferLength=0x105, lpBuffer=0x12d590, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\boxed-split.avi", lpFilePart=0x0) returned 0x48 [0071.084] SetErrorMode (uMode=0x1) returned 0x0 [0071.084] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\boxed-split.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\boxed-split.avi"), fInfoLevelId=0x0, lpFileInformation=0x12d810 | out: lpFileInformation=0x12d810*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x24261f7, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x24261f7, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x9a538339, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0xf600)) returned 1 [0071.085] SetErrorMode (uMode=0x0) returned 0x1 [0071.085] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\boxed-split.avi", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\boxed-split.avi", lpFilePart=0x0) returned 0x48 [0071.085] SetErrorMode (uMode=0x1) returned 0x0 [0071.085] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\boxed-split.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\boxed-split.avi"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1e8 [0071.085] GetFileType (hFile=0x1e8) returned 0x1 [0071.085] SetErrorMode (uMode=0x0) returned 0x1 [0071.085] GetFileType (hFile=0x1e8) returned 0x1 [0071.085] GetFileSize (in: hFile=0x1e8, lpFileSizeHigh=0x12d8c8 | out: lpFileSizeHigh=0x12d8c8*=0x0) returned 0xf600 [0071.086] ReadFile (in: hFile=0x1e8, lpBuffer=0x2819330, nNumberOfBytesToRead=0xf600, lpNumberOfBytesRead=0x12d7a8, lpOverlapped=0x0 | out: lpBuffer=0x2819330*, lpNumberOfBytesRead=0x12d7a8*=0xf600, lpOverlapped=0x0) returned 1 [0072.576] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\boxed-split.avi", nBufferLength=0x105, lpBuffer=0x12d270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\boxed-split.avi", lpFilePart=0x0) returned 0x48 [0072.576] SetErrorMode (uMode=0x1) returned 0x0 [0072.576] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\boxed-split.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\boxed-split.avi"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0072.579] SetErrorMode (uMode=0x0) returned 0x1 [0072.582] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\correct.avi", nBufferLength=0x105, lpBuffer=0x12d5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\correct.avi", lpFilePart=0x0) returned 0x44 [0072.582] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\correct.avi", nBufferLength=0x105, lpBuffer=0x12d590, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\correct.avi", lpFilePart=0x0) returned 0x44 [0072.583] SetErrorMode (uMode=0x1) returned 0x0 [0072.583] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\correct.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\correct.avi"), fInfoLevelId=0x0, lpFileInformation=0x12d810 | out: lpFileInformation=0x12d810*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x244c354, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x244c354, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x9a55e497, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x30200)) returned 1 [0072.583] SetErrorMode (uMode=0x0) returned 0x1 [0072.583] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\correct.avi", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\correct.avi", lpFilePart=0x0) returned 0x44 [0072.583] SetErrorMode (uMode=0x1) returned 0x0 [0072.583] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\correct.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\correct.avi"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1f0 [0072.584] GetFileType (hFile=0x1f0) returned 0x1 [0072.584] SetErrorMode (uMode=0x0) returned 0x1 [0072.584] GetFileType (hFile=0x1f0) returned 0x1 [0072.584] GetFileSize (in: hFile=0x1f0, lpFileSizeHigh=0x12d8c8 | out: lpFileSizeHigh=0x12d8c8*=0x0) returned 0x30200 [0072.586] ReadFile (in: hFile=0x1f0, lpBuffer=0x128a9890, nNumberOfBytesToRead=0x30200, lpNumberOfBytesRead=0x12d7a8, lpOverlapped=0x0 | out: lpBuffer=0x128a9890*, lpNumberOfBytesRead=0x12d7a8*=0x30200, lpOverlapped=0x0) returned 1 [0072.592] CloseHandle (hObject=0x1f0) returned 1 [0072.828] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\correct.avi", nBufferLength=0x105, lpBuffer=0x12d270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\correct.avi", lpFilePart=0x0) returned 0x44 [0072.828] SetErrorMode (uMode=0x1) returned 0x0 [0072.828] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\correct.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\correct.avi"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0072.841] SetErrorMode (uMode=0x0) returned 0x1 [0072.845] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\delete.avi", nBufferLength=0x105, lpBuffer=0x12d5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\delete.avi", lpFilePart=0x0) returned 0x43 [0072.845] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\delete.avi", nBufferLength=0x105, lpBuffer=0x12d590, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\delete.avi", lpFilePart=0x0) returned 0x43 [0072.845] SetErrorMode (uMode=0x1) returned 0x0 [0072.845] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\delete.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\delete.avi"), fInfoLevelId=0x0, lpFileInformation=0x12d810 | out: lpFileInformation=0x12d810*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x24be76b, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x24be76b, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x9a5845f5, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x36c00)) returned 1 [0072.895] SetErrorMode (uMode=0x0) returned 0x1 [0072.895] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\delete.avi", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\delete.avi", lpFilePart=0x0) returned 0x43 [0072.895] SetErrorMode (uMode=0x1) returned 0x0 [0072.895] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\delete.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\delete.avi"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1f0 [0072.896] GetFileType (hFile=0x1f0) returned 0x1 [0072.896] SetErrorMode (uMode=0x0) returned 0x1 [0072.896] GetFileType (hFile=0x1f0) returned 0x1 [0072.896] GetFileSize (in: hFile=0x1f0, lpFileSizeHigh=0x12d8c8 | out: lpFileSizeHigh=0x12d8c8*=0x0) returned 0x36c00 [0072.899] ReadFile (in: hFile=0x1f0, lpBuffer=0x126b0de0, nNumberOfBytesToRead=0x36c00, lpNumberOfBytesRead=0x12d7a8, lpOverlapped=0x0 | out: lpBuffer=0x126b0de0*, lpNumberOfBytesRead=0x12d7a8*=0x36c00, lpOverlapped=0x0) returned 1 [0072.902] CloseHandle (hObject=0x1f0) returned 1 [0073.266] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\delete.avi", nBufferLength=0x105, lpBuffer=0x12d270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\delete.avi", lpFilePart=0x0) returned 0x43 [0073.266] SetErrorMode (uMode=0x1) returned 0x0 [0073.266] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\delete.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\delete.avi"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0073.381] SetErrorMode (uMode=0x0) returned 0x1 [0073.384] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\join.avi", nBufferLength=0x105, lpBuffer=0x12d5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\join.avi", lpFilePart=0x0) returned 0x41 [0073.384] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\join.avi", nBufferLength=0x105, lpBuffer=0x12d590, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\join.avi", lpFilePart=0x0) returned 0x41 [0073.384] SetErrorMode (uMode=0x1) returned 0x0 [0073.384] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\join.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\join.avi"), fInfoLevelId=0x0, lpFileInformation=0x12d810 | out: lpFileInformation=0x12d810*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x250aa25, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x250aa25, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x9a5aa753, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x36400)) returned 1 [0073.384] SetErrorMode (uMode=0x0) returned 0x1 [0073.385] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\join.avi", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\join.avi", lpFilePart=0x0) returned 0x41 [0073.385] SetErrorMode (uMode=0x1) returned 0x0 [0073.385] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\join.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\join.avi"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1f0 [0073.385] GetFileType (hFile=0x1f0) returned 0x1 [0073.385] SetErrorMode (uMode=0x0) returned 0x1 [0073.385] GetFileType (hFile=0x1f0) returned 0x1 [0073.385] GetFileSize (in: hFile=0x1f0, lpFileSizeHigh=0x12d8c8 | out: lpFileSizeHigh=0x12d8c8*=0x0) returned 0x36400 [0073.387] ReadFile (in: hFile=0x1f0, lpBuffer=0x127f96e0, nNumberOfBytesToRead=0x36400, lpNumberOfBytesRead=0x12d7a8, lpOverlapped=0x0 | out: lpBuffer=0x127f96e0*, lpNumberOfBytesRead=0x12d7a8*=0x36400, lpOverlapped=0x0) returned 1 [0073.470] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\join.avi", nBufferLength=0x105, lpBuffer=0x12d270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\join.avi", lpFilePart=0x0) returned 0x41 [0073.470] SetErrorMode (uMode=0x1) returned 0x0 [0073.470] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\join.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\join.avi"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0074.020] SetErrorMode (uMode=0x0) returned 0x1 [0074.023] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\split.avi", nBufferLength=0x105, lpBuffer=0x12d5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\split.avi", lpFilePart=0x0) returned 0x42 [0074.023] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\split.avi", nBufferLength=0x105, lpBuffer=0x12d590, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\split.avi", lpFilePart=0x0) returned 0x42 [0074.023] SetErrorMode (uMode=0x1) returned 0x0 [0074.023] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\split.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\split.avi"), fInfoLevelId=0x0, lpFileInformation=0x12d810 | out: lpFileInformation=0x12d810*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x25c90f6, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x25c90f6, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x9a5d08b1, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x2f600)) returned 1 [0074.024] SetErrorMode (uMode=0x0) returned 0x1 [0074.024] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\split.avi", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\split.avi", lpFilePart=0x0) returned 0x42 [0074.024] SetErrorMode (uMode=0x1) returned 0x0 [0074.024] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\split.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\split.avi"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1f0 [0074.024] GetFileType (hFile=0x1f0) returned 0x1 [0074.024] SetErrorMode (uMode=0x0) returned 0x1 [0074.025] GetFileType (hFile=0x1f0) returned 0x1 [0074.025] GetFileSize (in: hFile=0x1f0, lpFileSizeHigh=0x12d8c8 | out: lpFileSizeHigh=0x12d8c8*=0x0) returned 0x2f600 [0074.025] ReadFile (in: hFile=0x1f0, lpBuffer=0x129d0778, nNumberOfBytesToRead=0x2f600, lpNumberOfBytesRead=0x12d7a8, lpOverlapped=0x0 | out: lpBuffer=0x129d0778*, lpNumberOfBytesRead=0x12d7a8*=0x2f600, lpOverlapped=0x0) returned 1 [0075.160] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\split.avi", nBufferLength=0x105, lpBuffer=0x12d270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\split.avi", lpFilePart=0x0) returned 0x42 [0075.160] SetErrorMode (uMode=0x1) returned 0x0 [0075.160] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\split.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\split.avi"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0075.164] SetErrorMode (uMode=0x0) returned 0x1 [0075.167] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\Decrypt Instructions.txt", nBufferLength=0x105, lpBuffer=0x12d240, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\Decrypt Instructions.txt", lpFilePart=0x0) returned 0x51 [0075.167] SetErrorMode (uMode=0x1) returned 0x0 [0075.167] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\Decrypt Instructions.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\decrypt instructions.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1f0 [0075.168] GetFileType (hFile=0x1f0) returned 0x1 [0075.168] SetErrorMode (uMode=0x0) returned 0x1 [0075.169] GetFileType (hFile=0x1f0) returned 0x1 [0075.169] WriteFile (in: hFile=0x1f0, lpBuffer=0x26c8ce8*, nNumberOfBytesToWrite=0x773, lpNumberOfBytesWritten=0x12d7a8, lpOverlapped=0x0 | out: lpBuffer=0x26c8ce8*, lpNumberOfBytesWritten=0x12d7a8*=0x773, lpOverlapped=0x0) returned 1 [0075.171] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US", nBufferLength=0x105, lpBuffer=0x12d430, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US", lpFilePart=0x0) returned 0x38 [0075.218] SetErrorMode (uMode=0x1) returned 0x0 [0075.218] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\*", lpFindFileData=0x12d5d0 | out: lpFindFileData=0x12d5d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd77a70c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x4ce08490, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x4ce08490, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1af3b6b0 [0075.219] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd77a70c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x4ce08490, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x4ce08490, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0075.219] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9a407849, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0x9a407849, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0x9a407849, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x15e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="boxed-correct.avi", cAlternateFileName="")) returned 1 [0075.219] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x23b3de0, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x23b3de0, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x9a49fdc1, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x7c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="boxed-delete.avi", cAlternateFileName="")) returned 1 [0075.219] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x23d9f3d, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x23d9f3d, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x9a4c5f1f, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x8200, dwReserved0=0x0, dwReserved1=0x0, cFileName="boxed-join.avi", cAlternateFileName="")) returned 1 [0075.219] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x24261f7, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x24261f7, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x9a538339, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0xf600, dwReserved0=0x0, dwReserved1=0x0, cFileName="boxed-split.avi", cAlternateFileName="")) returned 1 [0075.219] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x244c354, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x244c354, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x9a55e497, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x30200, dwReserved0=0x0, dwReserved1=0x0, cFileName="correct.avi", cAlternateFileName="")) returned 1 [0075.219] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4ce08490, ftCreationTime.dwHighDateTime=0x1d5e786, ftLastAccessTime.dwLowDateTime=0x4ce08490, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x4ce08490, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x773, dwReserved0=0x0, dwReserved1=0x0, cFileName="Decrypt Instructions.txt", cAlternateFileName="DECRYP~1.TXT")) returned 1 [0075.219] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x24be76b, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x24be76b, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x9a5845f5, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x36c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="delete.avi", cAlternateFileName="")) returned 1 [0075.219] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x110442fe, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1138bee4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x110442fe, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x2200, dwReserved0=0x0, dwReserved1=0x0, cFileName="FlickLearningWizard.exe.mui", cAlternateFileName="")) returned 1 [0075.219] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdc8723b, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xe067905, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xdc8723b, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x1200, dwReserved0=0x0, dwReserved1=0x0, cFileName="InkObj.dll.mui", cAlternateFileName="")) returned 1 [0075.220] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x110442fe, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1138bee4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x110442fe, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x2400, dwReserved0=0x0, dwReserved1=0x0, cFileName="InkWatson.exe.mui", cAlternateFileName="")) returned 1 [0075.220] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x110442fe, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1138bee4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x110442fe, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="InputPersonalization.exe.mui", cAlternateFileName="")) returned 1 [0075.220] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x110442fe, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1138bee4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x110442fe, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x5800, dwReserved0=0x0, dwReserved1=0x0, cFileName="IPSEventLogMsg.dll.mui", cAlternateFileName="")) returned 1 [0075.220] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x110442fe, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1138bee4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x110442fe, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="IpsMigrationPlugin.dll.mui", cAlternateFileName="")) returned 1 [0075.220] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x250aa25, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x250aa25, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x9a5aa753, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x36400, dwReserved0=0x0, dwReserved1=0x0, cFileName="join.avi", cAlternateFileName="")) returned 1 [0075.220] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x110442fe, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1138bee4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x110442fe, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x2200, dwReserved0=0x0, dwReserved1=0x0, cFileName="micaut.dll.mui", cAlternateFileName="")) returned 1 [0075.220] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x110442fe, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1138bee4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x110442fe, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="mip.exe.mui", cAlternateFileName="")) returned 1 [0075.220] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x110442fe, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1138bee4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x110442fe, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="mshwLatin.dll.mui", cAlternateFileName="")) returned 1 [0075.220] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeca1847, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xf901a42, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xeca1847, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="rtscom.dll.mui", cAlternateFileName="")) returned 1 [0075.220] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x110442fe, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1138bee4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x110442fe, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xaa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ShapeCollector.exe.mui", cAlternateFileName="")) returned 1 [0075.220] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x25c90f6, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x25c90f6, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x9a5d08b1, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x2f600, dwReserved0=0x0, dwReserved1=0x0, cFileName="split.avi", cAlternateFileName="")) returned 1 [0075.220] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa23a9ac, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xa5a884b, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xa23a9ac, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xc00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tabskb.dll.mui", cAlternateFileName="")) returned 1 [0075.221] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x110442fe, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1138bee4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x110442fe, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xc00, dwReserved0=0x0, dwReserved1=0x0, cFileName="TipBand.dll.mui", cAlternateFileName="")) returned 1 [0075.221] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x110442fe, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1138bee4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x110442fe, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x8000, dwReserved0=0x0, dwReserved1=0x0, cFileName="TipRes.dll.mui", cAlternateFileName="")) returned 1 [0075.221] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe5cd75ed, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe5f38bbd, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe5f38bbd, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0075.221] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x110442fe, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1138bee4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x110442fe, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xc00, dwReserved0=0x0, dwReserved1=0x0, cFileName="TipTsf.dll.mui", cAlternateFileName="")) returned 1 [0075.221] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x110442fe, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1138bee4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x110442fe, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xc00, dwReserved0=0x0, dwReserved1=0x0, cFileName="TipTsf.dll.mui", cAlternateFileName="")) returned 0 [0075.221] FindClose (in: hFindFile=0x1af3b6b0 | out: hFindFile=0x1af3b6b0) returned 1 [0075.221] SetErrorMode (uMode=0x0) returned 0x1 [0075.221] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\es-ES", nBufferLength=0x105, lpBuffer=0x12d390, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\es-ES", lpFilePart=0x0) returned 0x38 [0075.222] SetErrorMode (uMode=0x1) returned 0x0 [0075.222] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\es-ES\\*", lpFindFileData=0x12d530 | out: lpFindFileData=0x12d530*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd77a70c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd77a70c, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd77a70c, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1af3b6b0 [0075.222] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd77a70c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd77a70c, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd77a70c, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0075.223] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe3f3c6a2, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe41519b8, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe41519b8, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0075.223] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe3f3c6a2, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe41519b8, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe41519b8, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0075.223] FindClose (in: hFindFile=0x1af3b6b0 | out: hFindFile=0x1af3b6b0) returned 1 [0075.223] SetErrorMode (uMode=0x0) returned 0x1 [0075.223] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\es-ES\\Decrypt Instructions.txt", nBufferLength=0x105, lpBuffer=0x12d240, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\es-ES\\Decrypt Instructions.txt", lpFilePart=0x0) returned 0x51 [0075.224] SetErrorMode (uMode=0x1) returned 0x0 [0075.224] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\es-ES\\Decrypt Instructions.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\es-es\\decrypt instructions.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1f0 [0075.224] GetFileType (hFile=0x1f0) returned 0x1 [0075.224] SetErrorMode (uMode=0x0) returned 0x1 [0075.224] GetFileType (hFile=0x1f0) returned 0x1 [0075.225] WriteFile (in: hFile=0x1f0, lpBuffer=0x26cf820*, nNumberOfBytesToWrite=0x773, lpNumberOfBytesWritten=0x12d7a8, lpOverlapped=0x0 | out: lpBuffer=0x26cf820*, lpNumberOfBytesWritten=0x12d7a8*=0x773, lpOverlapped=0x0) returned 1 [0075.229] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\es-ES", nBufferLength=0x105, lpBuffer=0x12d430, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\es-ES", lpFilePart=0x0) returned 0x38 [0075.229] SetErrorMode (uMode=0x1) returned 0x0 [0075.229] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\es-ES\\*", lpFindFileData=0x12d5d0 | out: lpFindFileData=0x12d5d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd77a70c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x4cea0a10, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x4cea0a10, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1af3b6b0 [0075.230] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd77a70c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x4cea0a10, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x4cea0a10, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0075.230] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4cea0a10, ftCreationTime.dwHighDateTime=0x1d5e786, ftLastAccessTime.dwLowDateTime=0x4cea0a10, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x4cea0a10, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x773, dwReserved0=0x0, dwReserved1=0x0, cFileName="Decrypt Instructions.txt", cAlternateFileName="DECRYP~1.TXT")) returned 1 [0075.230] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe3f3c6a2, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe41519b8, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe41519b8, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0075.230] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe3f3c6a2, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe41519b8, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe41519b8, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0075.230] FindClose (in: hFindFile=0x1af3b6b0 | out: hFindFile=0x1af3b6b0) returned 1 [0075.230] SetErrorMode (uMode=0x0) returned 0x1 [0075.230] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\et-EE", nBufferLength=0x105, lpBuffer=0x12d390, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\et-EE", lpFilePart=0x0) returned 0x38 [0075.231] SetErrorMode (uMode=0x1) returned 0x0 [0075.231] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\et-EE\\*", lpFindFileData=0x12d530 | out: lpFindFileData=0x12d530*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd77a70c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd77a70c, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd77a70c, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1af3b6b0 [0075.281] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd77a70c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd77a70c, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd77a70c, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0075.281] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeb4e9cfd, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xeb74b2cd, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xeb74b2cd, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0075.281] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeb4e9cfd, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xeb74b2cd, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xeb74b2cd, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0075.281] FindClose (in: hFindFile=0x1af3b6b0 | out: hFindFile=0x1af3b6b0) returned 1 [0075.282] SetErrorMode (uMode=0x0) returned 0x1 [0075.282] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\et-EE\\Decrypt Instructions.txt", nBufferLength=0x105, lpBuffer=0x12d240, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\et-EE\\Decrypt Instructions.txt", lpFilePart=0x0) returned 0x51 [0075.282] SetErrorMode (uMode=0x1) returned 0x0 [0075.282] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\et-EE\\Decrypt Instructions.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\et-ee\\decrypt instructions.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1f0 [0075.283] GetFileType (hFile=0x1f0) returned 0x1 [0075.283] SetErrorMode (uMode=0x0) returned 0x1 [0075.283] GetFileType (hFile=0x1f0) returned 0x1 [0075.283] WriteFile (in: hFile=0x1f0, lpBuffer=0x26d5de8*, nNumberOfBytesToWrite=0x773, lpNumberOfBytesWritten=0x12d7a8, lpOverlapped=0x0 | out: lpBuffer=0x26d5de8*, lpNumberOfBytesWritten=0x12d7a8*=0x773, lpOverlapped=0x0) returned 1 [0075.285] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\et-EE", nBufferLength=0x105, lpBuffer=0x12d430, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\et-EE", lpFilePart=0x0) returned 0x38 [0075.285] SetErrorMode (uMode=0x1) returned 0x0 [0075.285] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\et-EE\\*", lpFindFileData=0x12d5d0 | out: lpFindFileData=0x12d5d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd77a70c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x4cf38f90, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x4cf38f90, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1af3b6b0 [0075.285] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd77a70c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x4cf38f90, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x4cf38f90, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0075.285] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4cf38f90, ftCreationTime.dwHighDateTime=0x1d5e786, ftLastAccessTime.dwLowDateTime=0x4cf38f90, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x4cf38f90, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x773, dwReserved0=0x0, dwReserved1=0x0, cFileName="Decrypt Instructions.txt", cAlternateFileName="DECRYP~1.TXT")) returned 1 [0075.285] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeb4e9cfd, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xeb74b2cd, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xeb74b2cd, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0075.285] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeb4e9cfd, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xeb74b2cd, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xeb74b2cd, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0075.286] FindClose (in: hFindFile=0x1af3b6b0 | out: hFindFile=0x1af3b6b0) returned 1 [0075.286] SetErrorMode (uMode=0x0) returned 0x1 [0075.286] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fi-FI", nBufferLength=0x105, lpBuffer=0x12d390, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fi-FI", lpFilePart=0x0) returned 0x38 [0075.286] SetErrorMode (uMode=0x1) returned 0x0 [0075.286] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fi-FI\\*", lpFindFileData=0x12d530 | out: lpFindFileData=0x12d530*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd77a70c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7a0866, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7a0866, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1af3b6b0 [0075.287] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd77a70c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7a0866, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7a0866, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0075.287] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe47dd5b4, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe4a64ce1, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe4a64ce1, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0075.287] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe47dd5b4, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe4a64ce1, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe4a64ce1, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0075.287] FindClose (in: hFindFile=0x1af3b6b0 | out: hFindFile=0x1af3b6b0) returned 1 [0075.291] SetErrorMode (uMode=0x0) returned 0x1 [0075.292] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fi-FI\\Decrypt Instructions.txt", nBufferLength=0x105, lpBuffer=0x12d240, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fi-FI\\Decrypt Instructions.txt", lpFilePart=0x0) returned 0x51 [0075.292] SetErrorMode (uMode=0x1) returned 0x0 [0075.292] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fi-FI\\Decrypt Instructions.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fi-fi\\decrypt instructions.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1f0 [0075.293] GetFileType (hFile=0x1f0) returned 0x1 [0075.293] SetErrorMode (uMode=0x0) returned 0x1 [0075.293] GetFileType (hFile=0x1f0) returned 0x1 [0075.293] WriteFile (in: hFile=0x1f0, lpBuffer=0x26dc3b0*, nNumberOfBytesToWrite=0x773, lpNumberOfBytesWritten=0x12d7a8, lpOverlapped=0x0 | out: lpBuffer=0x26dc3b0*, lpNumberOfBytesWritten=0x12d7a8*=0x773, lpOverlapped=0x0) returned 1 [0075.294] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fi-FI", nBufferLength=0x105, lpBuffer=0x12d430, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fi-FI", lpFilePart=0x0) returned 0x38 [0075.294] SetErrorMode (uMode=0x1) returned 0x0 [0075.295] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fi-FI\\*", lpFindFileData=0x12d5d0 | out: lpFindFileData=0x12d5d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd77a70c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x4cf38f90, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x4cf38f90, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1af3b6b0 [0075.295] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd77a70c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x4cf38f90, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x4cf38f90, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0075.295] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4cf38f90, ftCreationTime.dwHighDateTime=0x1d5e786, ftLastAccessTime.dwLowDateTime=0x4cf38f90, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x4cf38f90, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x773, dwReserved0=0x0, dwReserved1=0x0, cFileName="Decrypt Instructions.txt", cAlternateFileName="DECRYP~1.TXT")) returned 1 [0075.295] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe47dd5b4, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe4a64ce1, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe4a64ce1, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0075.295] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe47dd5b4, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe4a64ce1, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe4a64ce1, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0075.295] FindClose (in: hFindFile=0x1af3b6b0 | out: hFindFile=0x1af3b6b0) returned 1 [0075.295] SetErrorMode (uMode=0x0) returned 0x1 [0075.295] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fr-FR", nBufferLength=0x105, lpBuffer=0x12d390, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fr-FR", lpFilePart=0x0) returned 0x38 [0075.296] SetErrorMode (uMode=0x1) returned 0x0 [0075.296] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fr-FR\\*", lpFindFileData=0x12d530 | out: lpFindFileData=0x12d530*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7a0866, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x98159680, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x98159680, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1af3b6b0 [0075.296] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7a0866, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x98159680, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x98159680, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0075.296] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8311729d, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8311729d, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8311729d, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0075.297] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8311729d, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8311729d, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8311729d, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0075.297] FindClose (in: hFindFile=0x1af3b6b0 | out: hFindFile=0x1af3b6b0) returned 1 [0075.297] SetErrorMode (uMode=0x0) returned 0x1 [0075.297] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fr-FR\\Decrypt Instructions.txt", nBufferLength=0x105, lpBuffer=0x12d240, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fr-FR\\Decrypt Instructions.txt", lpFilePart=0x0) returned 0x51 [0075.297] SetErrorMode (uMode=0x1) returned 0x0 [0075.298] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fr-FR\\Decrypt Instructions.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fr-fr\\decrypt instructions.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1f0 [0075.345] GetFileType (hFile=0x1f0) returned 0x1 [0075.345] SetErrorMode (uMode=0x0) returned 0x1 [0075.345] GetFileType (hFile=0x1f0) returned 0x1 [0075.345] WriteFile (in: hFile=0x1f0, lpBuffer=0x26e2978*, nNumberOfBytesToWrite=0x773, lpNumberOfBytesWritten=0x12d7a8, lpOverlapped=0x0 | out: lpBuffer=0x26e2978*, lpNumberOfBytesWritten=0x12d7a8*=0x773, lpOverlapped=0x0) returned 1 [0075.347] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fr-FR", nBufferLength=0x105, lpBuffer=0x12d430, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fr-FR", lpFilePart=0x0) returned 0x38 [0075.347] SetErrorMode (uMode=0x1) returned 0x0 [0075.347] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fr-FR\\*", lpFindFileData=0x12d5d0 | out: lpFindFileData=0x12d5d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7a0866, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x4cfd1510, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x4cfd1510, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1af3b6b0 [0075.347] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7a0866, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x4cfd1510, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x4cfd1510, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0075.347] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4cfd1510, ftCreationTime.dwHighDateTime=0x1d5e786, ftLastAccessTime.dwLowDateTime=0x4cfd1510, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x4cfd1510, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x773, dwReserved0=0x0, dwReserved1=0x0, cFileName="Decrypt Instructions.txt", cAlternateFileName="DECRYP~1.TXT")) returned 1 [0075.348] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8311729d, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8311729d, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8311729d, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0075.348] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8311729d, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8311729d, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8311729d, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0075.348] FindClose (in: hFindFile=0x1af3b6b0 | out: hFindFile=0x1af3b6b0) returned 1 [0075.348] SetErrorMode (uMode=0x0) returned 0x1 [0075.348] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions", nBufferLength=0x105, lpBuffer=0x12d390, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions", lpFilePart=0x0) returned 0x40 [0075.348] SetErrorMode (uMode=0x1) returned 0x0 [0075.348] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\*", lpFindFileData=0x12d530 | out: lpFindFileData=0x12d530*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7a0866, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7ecb1a, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7ecb1a, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1af3b6b0 [0075.390] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7a0866, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7ecb1a, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7ecb1a, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0075.390] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7a0866, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7a0866, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7a0866, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="auxpad", cAlternateFileName="")) returned 1 [0075.390] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f2b1a99, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0x8f2b1a99, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0x8f2b1a99, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0xd4, dwReserved0=0x0, dwReserved1=0x0, cFileName="auxpad.xml", cAlternateFileName="")) returned 1 [0075.390] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7a0866, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7a0866, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7a0866, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="keypad", cAlternateFileName="")) returned 1 [0075.390] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f47ab01, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0x8f47ab01, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0x8f47ab01, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x2d7, dwReserved0=0x0, dwReserved1=0x0, cFileName="keypad.xml", cAlternateFileName="")) returned 1 [0075.390] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7a0866, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7c69c0, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7c69c0, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="main", cAlternateFileName="")) returned 1 [0075.391] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f513079, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0x8f513079, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0x8f513079, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x9655, dwReserved0=0x0, dwReserved1=0x0, cFileName="main.xml", cAlternateFileName="")) returned 1 [0075.391] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7a0866, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7a0866, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7a0866, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="numbers", cAlternateFileName="")) returned 1 [0075.391] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f79a7b7, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0x8f79a7b7, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0x8f7c0915, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0xd1, dwReserved0=0x0, dwReserved1=0x0, cFileName="numbers.xml", cAlternateFileName="")) returned 1 [0075.391] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7a0866, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7a0866, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7a0866, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="oskmenu", cAlternateFileName="")) returned 1 [0075.391] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f80cbd1, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0x8f80cbd1, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0x8f832d2f, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0xd7, dwReserved0=0x0, dwReserved1=0x0, cFileName="oskmenu.xml", cAlternateFileName="")) returned 1 [0075.391] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7a0866, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7c69c0, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7c69c0, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="osknumpad", cAlternateFileName="OSKNUM~1")) returned 1 [0075.391] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8fdb3fc5, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0x8fdb3fc5, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0x8fdb3fc5, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0xdb, dwReserved0=0x0, dwReserved1=0x0, cFileName="osknumpad.xml", cAlternateFileName="")) returned 1 [0075.391] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7c69c0, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7c69c0, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7c69c0, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="oskpred", cAlternateFileName="")) returned 1 [0075.391] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8fe00281, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0x8fe00281, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0x8fe00281, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0xd7, dwReserved0=0x0, dwReserved1=0x0, cFileName="oskpred.xml", cAlternateFileName="")) returned 1 [0075.391] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7c69c0, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7ecb1a, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7ecb1a, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="symbols", cAlternateFileName="")) returned 1 [0075.391] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8fe7269b, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0x8fe7269b, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0x8fe7269b, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x24f, dwReserved0=0x0, dwReserved1=0x0, cFileName="symbols.xml", cAlternateFileName="")) returned 1 [0075.392] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7c69c0, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7ecb1a, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7ecb1a, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="web", cAlternateFileName="")) returned 1 [0075.392] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90061861, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0x90061861, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0x90061861, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0xcf, dwReserved0=0x0, dwReserved1=0x0, cFileName="web.xml", cAlternateFileName="")) returned 1 [0075.392] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90061861, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0x90061861, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0x90061861, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0xcf, dwReserved0=0x0, dwReserved1=0x0, cFileName="web.xml", cAlternateFileName="")) returned 0 [0075.392] FindClose (in: hFindFile=0x1af3b6b0 | out: hFindFile=0x1af3b6b0) returned 1 [0075.393] SetErrorMode (uMode=0x0) returned 0x1 [0075.395] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\Decrypt Instructions.txt", nBufferLength=0x105, lpBuffer=0x12d240, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\Decrypt Instructions.txt", lpFilePart=0x0) returned 0x59 [0075.395] SetErrorMode (uMode=0x1) returned 0x0 [0075.395] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\Decrypt Instructions.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\decrypt instructions.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1f0 [0075.397] GetFileType (hFile=0x1f0) returned 0x1 [0075.397] SetErrorMode (uMode=0x0) returned 0x1 [0075.397] GetFileType (hFile=0x1f0) returned 0x1 [0075.397] WriteFile (in: hFile=0x1f0, lpBuffer=0x26e9cf8*, nNumberOfBytesToWrite=0x773, lpNumberOfBytesWritten=0x12d7a8, lpOverlapped=0x0 | out: lpBuffer=0x26e9cf8*, lpNumberOfBytesWritten=0x12d7a8*=0x773, lpOverlapped=0x0) returned 1 [0075.404] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions", nBufferLength=0x105, lpBuffer=0x12d430, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions", lpFilePart=0x0) returned 0x40 [0075.405] SetErrorMode (uMode=0x1) returned 0x0 [0075.405] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\*", lpFindFileData=0x12d5d0 | out: lpFindFileData=0x12d5d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7a0866, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x4d043930, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x4d043930, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1af3b6b0 [0075.405] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7a0866, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x4d043930, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x4d043930, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0075.405] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7a0866, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7a0866, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7a0866, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="auxpad", cAlternateFileName="")) returned 1 [0075.405] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f2b1a99, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0x8f2b1a99, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0x8f2b1a99, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0xd4, dwReserved0=0x0, dwReserved1=0x0, cFileName="auxpad.xml", cAlternateFileName="")) returned 1 [0075.405] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4d043930, ftCreationTime.dwHighDateTime=0x1d5e786, ftLastAccessTime.dwLowDateTime=0x4d043930, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x4d043930, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x773, dwReserved0=0x0, dwReserved1=0x0, cFileName="Decrypt Instructions.txt", cAlternateFileName="DECRYP~1.TXT")) returned 1 [0075.406] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7a0866, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7a0866, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7a0866, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="keypad", cAlternateFileName="")) returned 1 [0075.406] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f47ab01, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0x8f47ab01, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0x8f47ab01, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x2d7, dwReserved0=0x0, dwReserved1=0x0, cFileName="keypad.xml", cAlternateFileName="")) returned 1 [0075.406] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7a0866, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7c69c0, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7c69c0, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="main", cAlternateFileName="")) returned 1 [0075.408] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f513079, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0x8f513079, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0x8f513079, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x9655, dwReserved0=0x0, dwReserved1=0x0, cFileName="main.xml", cAlternateFileName="")) returned 1 [0075.409] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7a0866, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7a0866, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7a0866, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="numbers", cAlternateFileName="")) returned 1 [0075.409] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f79a7b7, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0x8f79a7b7, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0x8f7c0915, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0xd1, dwReserved0=0x0, dwReserved1=0x0, cFileName="numbers.xml", cAlternateFileName="")) returned 1 [0075.409] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7a0866, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7a0866, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7a0866, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="oskmenu", cAlternateFileName="")) returned 1 [0075.410] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f80cbd1, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0x8f80cbd1, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0x8f832d2f, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0xd7, dwReserved0=0x0, dwReserved1=0x0, cFileName="oskmenu.xml", cAlternateFileName="")) returned 1 [0075.415] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7a0866, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7c69c0, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7c69c0, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="osknumpad", cAlternateFileName="OSKNUM~1")) returned 1 [0075.418] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8fdb3fc5, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0x8fdb3fc5, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0x8fdb3fc5, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0xdb, dwReserved0=0x0, dwReserved1=0x0, cFileName="osknumpad.xml", cAlternateFileName="")) returned 1 [0075.418] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7c69c0, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7c69c0, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7c69c0, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="oskpred", cAlternateFileName="")) returned 1 [0075.418] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8fe00281, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0x8fe00281, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0x8fe00281, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0xd7, dwReserved0=0x0, dwReserved1=0x0, cFileName="oskpred.xml", cAlternateFileName="")) returned 1 [0075.418] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7c69c0, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7ecb1a, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7ecb1a, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="symbols", cAlternateFileName="")) returned 1 [0075.418] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8fe7269b, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0x8fe7269b, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0x8fe7269b, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x24f, dwReserved0=0x0, dwReserved1=0x0, cFileName="symbols.xml", cAlternateFileName="")) returned 1 [0075.418] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7c69c0, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7ecb1a, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7ecb1a, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="web", cAlternateFileName="")) returned 1 [0075.418] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90061861, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0x90061861, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0x90061861, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0xcf, dwReserved0=0x0, dwReserved1=0x0, cFileName="web.xml", cAlternateFileName="")) returned 1 [0075.419] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90061861, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0x90061861, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0x90061861, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0xcf, dwReserved0=0x0, dwReserved1=0x0, cFileName="web.xml", cAlternateFileName="")) returned 0 [0075.419] FindClose (in: hFindFile=0x1af3b6b0 | out: hFindFile=0x1af3b6b0) returned 1 [0075.419] SetErrorMode (uMode=0x0) returned 0x1 [0075.419] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\auxpad", nBufferLength=0x105, lpBuffer=0x12d330, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\auxpad", lpFilePart=0x0) returned 0x47 [0075.419] SetErrorMode (uMode=0x1) returned 0x0 [0075.419] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\auxpad\\*", lpFindFileData=0x12d4d0 | out: lpFindFileData=0x12d4d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7a0866, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7a0866, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7a0866, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1af3b6b0 [0075.472] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d4e0 | out: lpFindFileData=0x12d4e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7a0866, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7a0866, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7a0866, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0075.472] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d4e0 | out: lpFindFileData=0x12d4e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f2d7bf7, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0x8f2d7bf7, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0x8f2d7bf7, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x59a, dwReserved0=0x0, dwReserved1=0x0, cFileName="auxbase.xml", cAlternateFileName="")) returned 1 [0075.472] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d4e0 | out: lpFindFileData=0x12d4e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f2d7bf7, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0x8f2d7bf7, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0x8f2d7bf7, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x59a, dwReserved0=0x0, dwReserved1=0x0, cFileName="auxbase.xml", cAlternateFileName="")) returned 0 [0075.472] FindClose (in: hFindFile=0x1af3b6b0 | out: hFindFile=0x1af3b6b0) returned 1 [0075.472] SetErrorMode (uMode=0x0) returned 0x1 [0075.473] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\auxpad\\Decrypt Instructions.txt", nBufferLength=0x105, lpBuffer=0x12d1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\auxpad\\Decrypt Instructions.txt", lpFilePart=0x0) returned 0x60 [0075.473] SetErrorMode (uMode=0x1) returned 0x0 [0075.473] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\auxpad\\Decrypt Instructions.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\auxpad\\decrypt instructions.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1f0 [0075.473] GetFileType (hFile=0x1f0) returned 0x1 [0075.473] SetErrorMode (uMode=0x0) returned 0x1 [0075.473] GetFileType (hFile=0x1f0) returned 0x1 [0075.474] WriteFile (in: hFile=0x1f0, lpBuffer=0x26f1298*, nNumberOfBytesToWrite=0x773, lpNumberOfBytesWritten=0x12d748, lpOverlapped=0x0 | out: lpBuffer=0x26f1298*, lpNumberOfBytesWritten=0x12d748*=0x773, lpOverlapped=0x0) returned 1 [0075.475] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\auxpad", nBufferLength=0x105, lpBuffer=0x12d3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\auxpad", lpFilePart=0x0) returned 0x47 [0075.475] SetErrorMode (uMode=0x1) returned 0x0 [0075.475] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\auxpad\\*", lpFindFileData=0x12d570 | out: lpFindFileData=0x12d570*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7a0866, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x4d102010, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x4d102010, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1af3b6b0 [0075.476] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d580 | out: lpFindFileData=0x12d580*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7a0866, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x4d102010, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x4d102010, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0075.476] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d580 | out: lpFindFileData=0x12d580*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f2d7bf7, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0x8f2d7bf7, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0x8f2d7bf7, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x59a, dwReserved0=0x0, dwReserved1=0x0, cFileName="auxbase.xml", cAlternateFileName="")) returned 1 [0075.476] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d580 | out: lpFindFileData=0x12d580*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4d102010, ftCreationTime.dwHighDateTime=0x1d5e786, ftLastAccessTime.dwLowDateTime=0x4d102010, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x4d102010, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x773, dwReserved0=0x0, dwReserved1=0x0, cFileName="Decrypt Instructions.txt", cAlternateFileName="DECRYP~1.TXT")) returned 1 [0075.476] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d580 | out: lpFindFileData=0x12d580*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4d102010, ftCreationTime.dwHighDateTime=0x1d5e786, ftLastAccessTime.dwLowDateTime=0x4d102010, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x4d102010, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x773, dwReserved0=0x0, dwReserved1=0x0, cFileName="Decrypt Instructions.txt", cAlternateFileName="DECRYP~1.TXT")) returned 0 [0075.476] FindClose (in: hFindFile=0x1af3b6b0 | out: hFindFile=0x1af3b6b0) returned 1 [0075.476] SetErrorMode (uMode=0x0) returned 0x1 [0075.476] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\keypad", nBufferLength=0x105, lpBuffer=0x12d330, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\keypad", lpFilePart=0x0) returned 0x47 [0075.476] SetErrorMode (uMode=0x1) returned 0x0 [0075.477] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\keypad\\*", lpFindFileData=0x12d4d0 | out: lpFindFileData=0x12d4d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7a0866, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7a0866, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7a0866, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1af3b6b0 [0075.477] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d4e0 | out: lpFindFileData=0x12d4e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7a0866, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7a0866, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7a0866, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0075.477] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d4e0 | out: lpFindFileData=0x12d4e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f4a0c5f, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0x8f4a0c5f, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0x8f4c6dbd, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x180, dwReserved0=0x0, dwReserved1=0x0, cFileName="ea.xml", cAlternateFileName="")) returned 1 [0075.477] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d4e0 | out: lpFindFileData=0x12d4e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1c8fc70, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x1c8fc70, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x8f4c6dbd, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x45e, dwReserved0=0x0, dwReserved1=0x0, cFileName="keypadbase.xml", cAlternateFileName="")) returned 1 [0075.477] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d4e0 | out: lpFindFileData=0x12d4e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1cb5dcd, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x1cb5dcd, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x8f4ecf1b, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x188, dwReserved0=0x0, dwReserved1=0x0, cFileName="kor-kor.xml", cAlternateFileName="")) returned 1 [0075.477] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d4e0 | out: lpFindFileData=0x12d4e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1cb5dcd, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x1cb5dcd, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x8f4ecf1b, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x188, dwReserved0=0x0, dwReserved1=0x0, cFileName="kor-kor.xml", cAlternateFileName="")) returned 0 [0075.477] FindClose (in: hFindFile=0x1af3b6b0 | out: hFindFile=0x1af3b6b0) returned 1 [0075.478] SetErrorMode (uMode=0x0) returned 0x1 [0075.478] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\keypad\\Decrypt Instructions.txt", nBufferLength=0x105, lpBuffer=0x12d1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\keypad\\Decrypt Instructions.txt", lpFilePart=0x0) returned 0x60 [0075.479] SetErrorMode (uMode=0x1) returned 0x0 [0075.479] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\keypad\\Decrypt Instructions.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\keypad\\decrypt instructions.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1f0 [0075.516] GetFileType (hFile=0x1f0) returned 0x1 [0075.516] SetErrorMode (uMode=0x0) returned 0x1 [0075.516] GetFileType (hFile=0x1f0) returned 0x1 [0075.517] WriteFile (in: hFile=0x1f0, lpBuffer=0x26f7d68*, nNumberOfBytesToWrite=0x773, lpNumberOfBytesWritten=0x12d748, lpOverlapped=0x0 | out: lpBuffer=0x26f7d68*, lpNumberOfBytesWritten=0x12d748*=0x773, lpOverlapped=0x0) returned 1 [0075.518] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\keypad", nBufferLength=0x105, lpBuffer=0x12d3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\keypad", lpFilePart=0x0) returned 0x47 [0075.518] SetErrorMode (uMode=0x1) returned 0x0 [0075.518] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\keypad\\*", lpFindFileData=0x12d570 | out: lpFindFileData=0x12d570*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7a0866, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x4d174430, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x4d174430, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1af3b6b0 [0075.519] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d580 | out: lpFindFileData=0x12d580*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7a0866, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x4d174430, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x4d174430, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0075.519] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d580 | out: lpFindFileData=0x12d580*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4d174430, ftCreationTime.dwHighDateTime=0x1d5e786, ftLastAccessTime.dwLowDateTime=0x4d174430, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x4d174430, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x773, dwReserved0=0x0, dwReserved1=0x0, cFileName="Decrypt Instructions.txt", cAlternateFileName="DECRYP~1.TXT")) returned 1 [0075.519] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d580 | out: lpFindFileData=0x12d580*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f4a0c5f, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0x8f4a0c5f, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0x8f4c6dbd, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x180, dwReserved0=0x0, dwReserved1=0x0, cFileName="ea.xml", cAlternateFileName="")) returned 1 [0075.519] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d580 | out: lpFindFileData=0x12d580*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1c8fc70, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x1c8fc70, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x8f4c6dbd, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x45e, dwReserved0=0x0, dwReserved1=0x0, cFileName="keypadbase.xml", cAlternateFileName="")) returned 1 [0075.519] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d580 | out: lpFindFileData=0x12d580*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1cb5dcd, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x1cb5dcd, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x8f4ecf1b, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x188, dwReserved0=0x0, dwReserved1=0x0, cFileName="kor-kor.xml", cAlternateFileName="")) returned 1 [0075.519] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d580 | out: lpFindFileData=0x12d580*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1cb5dcd, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x1cb5dcd, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x8f4ecf1b, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x188, dwReserved0=0x0, dwReserved1=0x0, cFileName="kor-kor.xml", cAlternateFileName="")) returned 0 [0075.519] FindClose (in: hFindFile=0x1af3b6b0 | out: hFindFile=0x1af3b6b0) returned 1 [0075.519] SetErrorMode (uMode=0x0) returned 0x1 [0075.519] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main", nBufferLength=0x105, lpBuffer=0x12d330, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main", lpFilePart=0x0) returned 0x45 [0075.520] SetErrorMode (uMode=0x1) returned 0x0 [0075.520] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\*", lpFindFileData=0x12d4d0 | out: lpFindFileData=0x12d4d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7a0866, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7c69c0, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7c69c0, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1af3b6b0 [0075.563] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d4e0 | out: lpFindFileData=0x12d4e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7a0866, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7c69c0, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7c69c0, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0075.563] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d4e0 | out: lpFindFileData=0x12d4e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f643b69, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0x8f643b69, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0x8f643b69, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0xc4e, dwReserved0=0x0, dwReserved1=0x0, cFileName="base.xml", cAlternateFileName="")) returned 1 [0075.563] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d4e0 | out: lpFindFileData=0x12d4e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1e7ee29, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x1e7ee29, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x8f6b5f83, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0xf7, dwReserved0=0x0, dwReserved1=0x0, cFileName="baseAltGr_rtl.xml", cAlternateFileName="")) returned 1 [0075.563] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d4e0 | out: lpFindFileData=0x12d4e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1c8fc70, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x1c8fc70, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x8f643b69, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0xc59, dwReserved0=0x0, dwReserved1=0x0, cFileName="base_altgr.xml", cAlternateFileName="")) returned 1 [0075.563] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d4e0 | out: lpFindFileData=0x12d4e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1cb5dcd, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x1cb5dcd, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x8f669cc7, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0xc5e, dwReserved0=0x0, dwReserved1=0x0, cFileName="base_ca.xml", cAlternateFileName="")) returned 1 [0075.563] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d4e0 | out: lpFindFileData=0x12d4e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1cdbf2a, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x1cdbf2a, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x8f68fe25, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x2e2, dwReserved0=0x0, dwReserved1=0x0, cFileName="base_heb.xml", cAlternateFileName="")) returned 1 [0075.563] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d4e0 | out: lpFindFileData=0x12d4e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d02087, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x1d02087, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x8f68fe25, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x324, dwReserved0=0x0, dwReserved1=0x0, cFileName="base_jpn.xml", cAlternateFileName="")) returned 1 [0075.563] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d4e0 | out: lpFindFileData=0x12d4e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d02087, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x1d02087, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x8f68fe25, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x1e8, dwReserved0=0x0, dwReserved1=0x0, cFileName="base_kor.xml", cAlternateFileName="")) returned 1 [0075.563] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d4e0 | out: lpFindFileData=0x12d4e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d281e4, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x1d281e4, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x8f6b5f83, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x269, dwReserved0=0x0, dwReserved1=0x0, cFileName="base_rtl.xml", cAlternateFileName="")) returned 1 [0075.563] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d4e0 | out: lpFindFileData=0x12d4e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d4e341, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x1d4e341, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x8f6dc0e1, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x40e8, dwReserved0=0x0, dwReserved1=0x0, cFileName="ja-jp.xml", cAlternateFileName="")) returned 1 [0075.564] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d4e0 | out: lpFindFileData=0x12d4e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d7449e, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x1d7449e, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x8f70223f, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x3af9, dwReserved0=0x0, dwReserved1=0x0, cFileName="ko-kr.xml", cAlternateFileName="")) returned 1 [0075.564] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d4e0 | out: lpFindFileData=0x12d4e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d9a5fb, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x1d9a5fb, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x8f774659, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x264b, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-changjei.xml", cAlternateFileName="")) returned 1 [0075.564] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d4e0 | out: lpFindFileData=0x12d4e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1e7ee29, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x1e7ee29, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x8f79a7b7, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x2b3b, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-dayi.xml", cAlternateFileName="")) returned 1 [0075.564] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d4e0 | out: lpFindFileData=0x12d4e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1e32b6f, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x1e32b6f, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x8f79a7b7, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x2ac3, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-phonetic.xml", cAlternateFileName="")) returned 1 [0075.564] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d4e0 | out: lpFindFileData=0x12d4e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1e32b6f, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x1e32b6f, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x8f79a7b7, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x2ac3, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-phonetic.xml", cAlternateFileName="")) returned 0 [0075.564] FindClose (in: hFindFile=0x1af3b6b0 | out: hFindFile=0x1af3b6b0) returned 1 [0075.565] SetErrorMode (uMode=0x0) returned 0x1 [0075.568] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\Decrypt Instructions.txt", nBufferLength=0x105, lpBuffer=0x12d1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\Decrypt Instructions.txt", lpFilePart=0x0) returned 0x5e [0075.568] SetErrorMode (uMode=0x1) returned 0x0 [0075.568] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\Decrypt Instructions.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\decrypt instructions.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1f0 [0075.570] GetFileType (hFile=0x1f0) returned 0x1 [0075.570] SetErrorMode (uMode=0x0) returned 0x1 [0075.570] GetFileType (hFile=0x1f0) returned 0x1 [0075.570] WriteFile (in: hFile=0x1f0, lpBuffer=0x26ff820*, nNumberOfBytesToWrite=0x773, lpNumberOfBytesWritten=0x12d748, lpOverlapped=0x0 | out: lpBuffer=0x26ff820*, lpNumberOfBytesWritten=0x12d748*=0x773, lpOverlapped=0x0) returned 1 [0075.571] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main", nBufferLength=0x105, lpBuffer=0x12d3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main", lpFilePart=0x0) returned 0x45 [0075.572] SetErrorMode (uMode=0x1) returned 0x0 [0075.572] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\*", lpFindFileData=0x12d570 | out: lpFindFileData=0x12d570*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7a0866, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x4d1e6850, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x4d1e6850, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1af3b6b0 [0075.572] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d580 | out: lpFindFileData=0x12d580*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7a0866, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x4d1e6850, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x4d1e6850, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0075.572] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d580 | out: lpFindFileData=0x12d580*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f643b69, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0x8f643b69, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0x8f643b69, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0xc4e, dwReserved0=0x0, dwReserved1=0x0, cFileName="base.xml", cAlternateFileName="")) returned 1 [0075.572] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d580 | out: lpFindFileData=0x12d580*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1e7ee29, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x1e7ee29, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x8f6b5f83, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0xf7, dwReserved0=0x0, dwReserved1=0x0, cFileName="baseAltGr_rtl.xml", cAlternateFileName="")) returned 1 [0075.572] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d580 | out: lpFindFileData=0x12d580*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1c8fc70, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x1c8fc70, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x8f643b69, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0xc59, dwReserved0=0x0, dwReserved1=0x0, cFileName="base_altgr.xml", cAlternateFileName="")) returned 1 [0075.572] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d580 | out: lpFindFileData=0x12d580*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1cb5dcd, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x1cb5dcd, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x8f669cc7, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0xc5e, dwReserved0=0x0, dwReserved1=0x0, cFileName="base_ca.xml", cAlternateFileName="")) returned 1 [0075.572] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d580 | out: lpFindFileData=0x12d580*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1cdbf2a, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x1cdbf2a, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x8f68fe25, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x2e2, dwReserved0=0x0, dwReserved1=0x0, cFileName="base_heb.xml", cAlternateFileName="")) returned 1 [0075.572] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d580 | out: lpFindFileData=0x12d580*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d02087, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x1d02087, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x8f68fe25, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x324, dwReserved0=0x0, dwReserved1=0x0, cFileName="base_jpn.xml", cAlternateFileName="")) returned 1 [0075.573] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d580 | out: lpFindFileData=0x12d580*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d02087, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x1d02087, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x8f68fe25, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x1e8, dwReserved0=0x0, dwReserved1=0x0, cFileName="base_kor.xml", cAlternateFileName="")) returned 1 [0075.573] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d580 | out: lpFindFileData=0x12d580*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d281e4, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x1d281e4, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x8f6b5f83, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x269, dwReserved0=0x0, dwReserved1=0x0, cFileName="base_rtl.xml", cAlternateFileName="")) returned 1 [0075.573] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d580 | out: lpFindFileData=0x12d580*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4d1e6850, ftCreationTime.dwHighDateTime=0x1d5e786, ftLastAccessTime.dwLowDateTime=0x4d1e6850, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x4d1e6850, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x773, dwReserved0=0x0, dwReserved1=0x0, cFileName="Decrypt Instructions.txt", cAlternateFileName="DECRYP~1.TXT")) returned 1 [0075.573] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d580 | out: lpFindFileData=0x12d580*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d4e341, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x1d4e341, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x8f6dc0e1, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x40e8, dwReserved0=0x0, dwReserved1=0x0, cFileName="ja-jp.xml", cAlternateFileName="")) returned 1 [0075.573] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d580 | out: lpFindFileData=0x12d580*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d7449e, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x1d7449e, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x8f70223f, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x3af9, dwReserved0=0x0, dwReserved1=0x0, cFileName="ko-kr.xml", cAlternateFileName="")) returned 1 [0075.573] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d580 | out: lpFindFileData=0x12d580*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d9a5fb, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x1d9a5fb, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x8f774659, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x264b, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-changjei.xml", cAlternateFileName="")) returned 1 [0075.573] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d580 | out: lpFindFileData=0x12d580*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1e7ee29, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x1e7ee29, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x8f79a7b7, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x2b3b, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-dayi.xml", cAlternateFileName="")) returned 1 [0075.573] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d580 | out: lpFindFileData=0x12d580*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1e32b6f, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x1e32b6f, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x8f79a7b7, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x2ac3, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-phonetic.xml", cAlternateFileName="")) returned 1 [0075.573] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d580 | out: lpFindFileData=0x12d580*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1e32b6f, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x1e32b6f, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x8f79a7b7, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x2ac3, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-phonetic.xml", cAlternateFileName="")) returned 0 [0075.573] FindClose (in: hFindFile=0x1af3b6b0 | out: hFindFile=0x1af3b6b0) returned 1 [0075.573] SetErrorMode (uMode=0x0) returned 0x1 [0075.573] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\numbers", nBufferLength=0x105, lpBuffer=0x12d330, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\numbers", lpFilePart=0x0) returned 0x48 [0075.574] SetErrorMode (uMode=0x1) returned 0x0 [0075.574] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\numbers\\*", lpFindFileData=0x12d4d0 | out: lpFindFileData=0x12d4d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7a0866, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7a0866, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7a0866, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1af3b6b0 [0075.574] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d4e0 | out: lpFindFileData=0x12d4e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7a0866, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7a0866, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7a0866, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0075.574] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d4e0 | out: lpFindFileData=0x12d4e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f7e6a73, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0x8f7e6a73, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0x8f7e6a73, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x4c2, dwReserved0=0x0, dwReserved1=0x0, cFileName="numbase.xml", cAlternateFileName="")) returned 1 [0075.574] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d4e0 | out: lpFindFileData=0x12d4e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f7e6a73, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0x8f7e6a73, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0x8f7e6a73, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x4c2, dwReserved0=0x0, dwReserved1=0x0, cFileName="numbase.xml", cAlternateFileName="")) returned 0 [0075.575] FindClose (in: hFindFile=0x1af3b6b0 | out: hFindFile=0x1af3b6b0) returned 1 [0075.575] SetErrorMode (uMode=0x0) returned 0x1 [0075.575] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\numbers\\Decrypt Instructions.txt", nBufferLength=0x105, lpBuffer=0x12d1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\numbers\\Decrypt Instructions.txt", lpFilePart=0x0) returned 0x61 [0075.575] SetErrorMode (uMode=0x1) returned 0x0 [0075.575] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\numbers\\Decrypt Instructions.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\numbers\\decrypt instructions.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1f0 [0075.576] GetFileType (hFile=0x1f0) returned 0x1 [0075.576] SetErrorMode (uMode=0x0) returned 0x1 [0075.576] GetFileType (hFile=0x1f0) returned 0x1 [0075.576] WriteFile (in: hFile=0x1f0, lpBuffer=0x2706220*, nNumberOfBytesToWrite=0x773, lpNumberOfBytesWritten=0x12d748, lpOverlapped=0x0 | out: lpBuffer=0x2706220*, lpNumberOfBytesWritten=0x12d748*=0x773, lpOverlapped=0x0) returned 1 [0075.577] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\numbers", nBufferLength=0x105, lpBuffer=0x12d3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\numbers", lpFilePart=0x0) returned 0x48 [0075.578] SetErrorMode (uMode=0x1) returned 0x0 [0075.578] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\numbers\\*", lpFindFileData=0x12d570 | out: lpFindFileData=0x12d570*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7a0866, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x4d1e6850, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x4d1e6850, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1af3b6b0 [0075.578] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d580 | out: lpFindFileData=0x12d580*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7a0866, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x4d1e6850, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x4d1e6850, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0075.578] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d580 | out: lpFindFileData=0x12d580*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4d1e6850, ftCreationTime.dwHighDateTime=0x1d5e786, ftLastAccessTime.dwLowDateTime=0x4d1e6850, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x4d20c9b0, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x773, dwReserved0=0x0, dwReserved1=0x0, cFileName="Decrypt Instructions.txt", cAlternateFileName="DECRYP~1.TXT")) returned 1 [0075.578] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d580 | out: lpFindFileData=0x12d580*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f7e6a73, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0x8f7e6a73, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0x8f7e6a73, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x4c2, dwReserved0=0x0, dwReserved1=0x0, cFileName="numbase.xml", cAlternateFileName="")) returned 1 [0075.578] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d580 | out: lpFindFileData=0x12d580*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f7e6a73, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0x8f7e6a73, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0x8f7e6a73, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x4c2, dwReserved0=0x0, dwReserved1=0x0, cFileName="numbase.xml", cAlternateFileName="")) returned 0 [0075.578] FindClose (in: hFindFile=0x1af3b6b0 | out: hFindFile=0x1af3b6b0) returned 1 [0075.578] SetErrorMode (uMode=0x0) returned 0x1 [0075.578] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\oskmenu", nBufferLength=0x105, lpBuffer=0x12d330, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\oskmenu", lpFilePart=0x0) returned 0x48 [0075.579] SetErrorMode (uMode=0x1) returned 0x0 [0075.579] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\oskmenu\\*", lpFindFileData=0x12d4d0 | out: lpFindFileData=0x12d4d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7a0866, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7a0866, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7a0866, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1af3b6b0 [0075.645] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d4e0 | out: lpFindFileData=0x12d4e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7a0866, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7a0866, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7a0866, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0075.645] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d4e0 | out: lpFindFileData=0x12d4e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f832d2f, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0x8f832d2f, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0x8f858e8d, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x1d7, dwReserved0=0x0, dwReserved1=0x0, cFileName="oskmenubase.xml", cAlternateFileName="")) returned 1 [0075.645] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d4e0 | out: lpFindFileData=0x12d4e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f832d2f, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0x8f832d2f, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0x8f858e8d, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x1d7, dwReserved0=0x0, dwReserved1=0x0, cFileName="oskmenubase.xml", cAlternateFileName="")) returned 0 [0075.646] FindClose (in: hFindFile=0x1af3b6b0 | out: hFindFile=0x1af3b6b0) returned 1 [0075.646] SetErrorMode (uMode=0x0) returned 0x1 [0075.646] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\oskmenu\\Decrypt Instructions.txt", nBufferLength=0x105, lpBuffer=0x12d1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\oskmenu\\Decrypt Instructions.txt", lpFilePart=0x0) returned 0x61 [0075.646] SetErrorMode (uMode=0x1) returned 0x0 [0075.646] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\oskmenu\\Decrypt Instructions.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\oskmenu\\decrypt instructions.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1f0 [0075.697] GetFileType (hFile=0x1f0) returned 0x1 [0075.697] SetErrorMode (uMode=0x0) returned 0x1 [0075.697] GetFileType (hFile=0x1f0) returned 0x1 [0075.697] WriteFile (in: hFile=0x1f0, lpBuffer=0x270c9d8*, nNumberOfBytesToWrite=0x773, lpNumberOfBytesWritten=0x12d748, lpOverlapped=0x0 | out: lpBuffer=0x270c9d8*, lpNumberOfBytesWritten=0x12d748*=0x773, lpOverlapped=0x0) returned 1 [0075.699] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\oskmenu", nBufferLength=0x105, lpBuffer=0x12d3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\oskmenu", lpFilePart=0x0) returned 0x48 [0075.699] SetErrorMode (uMode=0x1) returned 0x0 [0075.699] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\oskmenu\\*", lpFindFileData=0x12d570 | out: lpFindFileData=0x12d570*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7a0866, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x4d317350, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x4d317350, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1af3b6b0 [0075.699] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d580 | out: lpFindFileData=0x12d580*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7a0866, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x4d317350, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x4d317350, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0075.700] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d580 | out: lpFindFileData=0x12d580*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4d317350, ftCreationTime.dwHighDateTime=0x1d5e786, ftLastAccessTime.dwLowDateTime=0x4d317350, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x4d317350, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x773, dwReserved0=0x0, dwReserved1=0x0, cFileName="Decrypt Instructions.txt", cAlternateFileName="DECRYP~1.TXT")) returned 1 [0075.700] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d580 | out: lpFindFileData=0x12d580*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f832d2f, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0x8f832d2f, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0x8f858e8d, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x1d7, dwReserved0=0x0, dwReserved1=0x0, cFileName="oskmenubase.xml", cAlternateFileName="")) returned 1 [0075.700] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d580 | out: lpFindFileData=0x12d580*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f832d2f, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0x8f832d2f, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0x8f858e8d, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x1d7, dwReserved0=0x0, dwReserved1=0x0, cFileName="oskmenubase.xml", cAlternateFileName="")) returned 0 [0075.700] FindClose (in: hFindFile=0x1af3b6b0 | out: hFindFile=0x1af3b6b0) returned 1 [0075.700] SetErrorMode (uMode=0x0) returned 0x1 [0075.700] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\osknumpad", nBufferLength=0x105, lpBuffer=0x12d330, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\osknumpad", lpFilePart=0x0) returned 0x4a [0075.700] SetErrorMode (uMode=0x1) returned 0x0 [0075.700] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\osknumpad\\*", lpFindFileData=0x12d4d0 | out: lpFindFileData=0x12d4d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7a0866, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7c69c0, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7c69c0, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1af3b6b0 [0075.701] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d4e0 | out: lpFindFileData=0x12d4e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7a0866, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7c69c0, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7c69c0, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0075.701] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d4e0 | out: lpFindFileData=0x12d4e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8fdda123, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0x8fdda123, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0x8fdda123, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x59d, dwReserved0=0x0, dwReserved1=0x0, cFileName="osknumpadbase.xml", cAlternateFileName="")) returned 1 [0075.701] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d4e0 | out: lpFindFileData=0x12d4e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8fdda123, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0x8fdda123, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0x8fdda123, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x59d, dwReserved0=0x0, dwReserved1=0x0, cFileName="osknumpadbase.xml", cAlternateFileName="")) returned 0 [0075.701] FindClose (in: hFindFile=0x1af3b6b0 | out: hFindFile=0x1af3b6b0) returned 1 [0075.701] SetErrorMode (uMode=0x0) returned 0x1 [0075.702] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\osknumpad\\Decrypt Instructions.txt", nBufferLength=0x105, lpBuffer=0x12d1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\osknumpad\\Decrypt Instructions.txt", lpFilePart=0x0) returned 0x63 [0075.702] SetErrorMode (uMode=0x1) returned 0x0 [0075.702] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\osknumpad\\Decrypt Instructions.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\osknumpad\\decrypt instructions.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1f0 [0075.703] GetFileType (hFile=0x1f0) returned 0x1 [0075.703] SetErrorMode (uMode=0x0) returned 0x1 [0075.703] GetFileType (hFile=0x1f0) returned 0x1 [0075.703] WriteFile (in: hFile=0x1f0, lpBuffer=0x27131e0*, nNumberOfBytesToWrite=0x773, lpNumberOfBytesWritten=0x12d748, lpOverlapped=0x0 | out: lpBuffer=0x27131e0*, lpNumberOfBytesWritten=0x12d748*=0x773, lpOverlapped=0x0) returned 1 [0075.704] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\osknumpad", nBufferLength=0x105, lpBuffer=0x12d3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\osknumpad", lpFilePart=0x0) returned 0x4a [0075.704] SetErrorMode (uMode=0x1) returned 0x0 [0075.705] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\osknumpad\\*", lpFindFileData=0x12d570 | out: lpFindFileData=0x12d570*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7a0866, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x4d33d4b0, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x4d33d4b0, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1af3b6b0 [0075.705] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d580 | out: lpFindFileData=0x12d580*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7a0866, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x4d33d4b0, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x4d33d4b0, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0075.705] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d580 | out: lpFindFileData=0x12d580*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4d33d4b0, ftCreationTime.dwHighDateTime=0x1d5e786, ftLastAccessTime.dwLowDateTime=0x4d33d4b0, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x4d33d4b0, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x773, dwReserved0=0x0, dwReserved1=0x0, cFileName="Decrypt Instructions.txt", cAlternateFileName="DECRYP~1.TXT")) returned 1 [0075.705] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d580 | out: lpFindFileData=0x12d580*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8fdda123, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0x8fdda123, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0x8fdda123, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x59d, dwReserved0=0x0, dwReserved1=0x0, cFileName="osknumpadbase.xml", cAlternateFileName="")) returned 1 [0075.705] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d580 | out: lpFindFileData=0x12d580*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8fdda123, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0x8fdda123, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0x8fdda123, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x59d, dwReserved0=0x0, dwReserved1=0x0, cFileName="osknumpadbase.xml", cAlternateFileName="")) returned 0 [0075.705] FindClose (in: hFindFile=0x1af3b6b0 | out: hFindFile=0x1af3b6b0) returned 1 [0075.705] SetErrorMode (uMode=0x0) returned 0x1 [0075.705] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\oskpred", nBufferLength=0x105, lpBuffer=0x12d330, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\oskpred", lpFilePart=0x0) returned 0x48 [0075.705] SetErrorMode (uMode=0x1) returned 0x0 [0075.706] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\oskpred\\*", lpFindFileData=0x12d4d0 | out: lpFindFileData=0x12d4d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7c69c0, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7c69c0, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7c69c0, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1af3b6b0 [0075.706] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d4e0 | out: lpFindFileData=0x12d4e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7c69c0, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7c69c0, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7c69c0, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0075.706] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d4e0 | out: lpFindFileData=0x12d4e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8fe263df, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0x8fe263df, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0x8fe263df, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x39c, dwReserved0=0x0, dwReserved1=0x0, cFileName="oskpredbase.xml", cAlternateFileName="")) returned 1 [0075.706] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d4e0 | out: lpFindFileData=0x12d4e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8fe263df, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0x8fe263df, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0x8fe263df, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x39c, dwReserved0=0x0, dwReserved1=0x0, cFileName="oskpredbase.xml", cAlternateFileName="")) returned 0 [0075.706] FindClose (in: hFindFile=0x1af3b6b0 | out: hFindFile=0x1af3b6b0) returned 1 [0075.706] SetErrorMode (uMode=0x0) returned 0x1 [0075.707] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\oskpred\\Decrypt Instructions.txt", nBufferLength=0x105, lpBuffer=0x12d1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\oskpred\\Decrypt Instructions.txt", lpFilePart=0x0) returned 0x61 [0075.707] SetErrorMode (uMode=0x1) returned 0x0 [0075.707] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\oskpred\\Decrypt Instructions.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\oskpred\\decrypt instructions.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1f0 [0075.749] SetErrorMode (uMode=0x0) returned 0x1 [0075.750] GetFileType (hFile=0x1f0) returned 0x1 [0075.750] WriteFile (in: hFile=0x1f0, lpBuffer=0x27199d8*, nNumberOfBytesToWrite=0x773, lpNumberOfBytesWritten=0x12d748, lpOverlapped=0x0 | out: lpBuffer=0x27199d8*, lpNumberOfBytesWritten=0x12d748*=0x773, lpOverlapped=0x0) returned 1 [0075.751] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\oskpred", nBufferLength=0x105, lpBuffer=0x12d3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\oskpred", lpFilePart=0x0) returned 0x48 [0075.751] SetErrorMode (uMode=0x1) returned 0x0 [0075.751] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\oskpred\\*", lpFindFileData=0x12d570 | out: lpFindFileData=0x12d570*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7c69c0, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x4d3af8d0, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x4d3af8d0, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1af3b6b0 [0075.751] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d580 | out: lpFindFileData=0x12d580*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7c69c0, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x4d3af8d0, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x4d3af8d0, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0075.751] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d580 | out: lpFindFileData=0x12d580*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4d3af8d0, ftCreationTime.dwHighDateTime=0x1d5e786, ftLastAccessTime.dwLowDateTime=0x4d3af8d0, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x4d3af8d0, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x773, dwReserved0=0x0, dwReserved1=0x0, cFileName="Decrypt Instructions.txt", cAlternateFileName="DECRYP~1.TXT")) returned 1 [0075.751] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d580 | out: lpFindFileData=0x12d580*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8fe263df, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0x8fe263df, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0x8fe263df, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x39c, dwReserved0=0x0, dwReserved1=0x0, cFileName="oskpredbase.xml", cAlternateFileName="")) returned 1 [0075.751] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d580 | out: lpFindFileData=0x12d580*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8fe263df, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0x8fe263df, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0x8fe263df, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x39c, dwReserved0=0x0, dwReserved1=0x0, cFileName="oskpredbase.xml", cAlternateFileName="")) returned 0 [0075.751] FindClose (in: hFindFile=0x1af3b6b0 | out: hFindFile=0x1af3b6b0) returned 1 [0075.751] SetErrorMode (uMode=0x0) returned 0x1 [0075.751] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\symbols", nBufferLength=0x105, lpBuffer=0x12d330, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\symbols", lpFilePart=0x0) returned 0x48 [0075.751] SetErrorMode (uMode=0x1) returned 0x0 [0075.752] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\symbols\\*", lpFindFileData=0x12d4d0 | out: lpFindFileData=0x12d4d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7c69c0, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7ecb1a, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7ecb1a, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1af3b6b0 [0075.752] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d4e0 | out: lpFindFileData=0x12d4e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7c69c0, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7ecb1a, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7ecb1a, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0075.752] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d4e0 | out: lpFindFileData=0x12d4e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1dc0758, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x1dc0758, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x900155a5, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x2ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="ea-sym.xml", cAlternateFileName="")) returned 1 [0075.752] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d4e0 | out: lpFindFileData=0x12d4e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d9a5fb, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x1d9a5fb, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x900155a5, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x2ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="ja-jp-sym.xml", cAlternateFileName="")) returned 1 [0075.752] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d4e0 | out: lpFindFileData=0x12d4e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9003b703, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0x9003b703, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0x90061861, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0xacc, dwReserved0=0x0, dwReserved1=0x0, cFileName="symbase.xml", cAlternateFileName="")) returned 1 [0075.752] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d4e0 | out: lpFindFileData=0x12d4e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9003b703, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0x9003b703, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0x90061861, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0xacc, dwReserved0=0x0, dwReserved1=0x0, cFileName="symbase.xml", cAlternateFileName="")) returned 0 [0075.752] FindClose (in: hFindFile=0x1af3b6b0 | out: hFindFile=0x1af3b6b0) returned 1 [0075.752] SetErrorMode (uMode=0x0) returned 0x1 [0075.753] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\symbols\\Decrypt Instructions.txt", nBufferLength=0x105, lpBuffer=0x12d1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\symbols\\Decrypt Instructions.txt", lpFilePart=0x0) returned 0x61 [0075.753] SetErrorMode (uMode=0x1) returned 0x0 [0075.753] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\symbols\\Decrypt Instructions.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\symbols\\decrypt instructions.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1f0 [0075.754] SetErrorMode (uMode=0x0) returned 0x1 [0075.754] GetFileType (hFile=0x1f0) returned 0x1 [0075.754] WriteFile (in: hFile=0x1f0, lpBuffer=0x2720498*, nNumberOfBytesToWrite=0x773, lpNumberOfBytesWritten=0x12d748, lpOverlapped=0x0 | out: lpBuffer=0x2720498*, lpNumberOfBytesWritten=0x12d748*=0x773, lpOverlapped=0x0) returned 1 [0075.755] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\symbols", nBufferLength=0x105, lpBuffer=0x12d3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\symbols", lpFilePart=0x0) returned 0x48 [0075.755] SetErrorMode (uMode=0x1) returned 0x0 [0075.755] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\symbols\\*", lpFindFileData=0x12d570 | out: lpFindFileData=0x12d570*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7c69c0, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x4d3af8d0, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x4d3af8d0, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1af3b6b0 [0075.755] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d580 | out: lpFindFileData=0x12d580*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7c69c0, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x4d3af8d0, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x4d3af8d0, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0075.755] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d580 | out: lpFindFileData=0x12d580*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4d3af8d0, ftCreationTime.dwHighDateTime=0x1d5e786, ftLastAccessTime.dwLowDateTime=0x4d3af8d0, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x4d3af8d0, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x773, dwReserved0=0x0, dwReserved1=0x0, cFileName="Decrypt Instructions.txt", cAlternateFileName="DECRYP~1.TXT")) returned 1 [0075.755] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d580 | out: lpFindFileData=0x12d580*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1dc0758, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x1dc0758, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x900155a5, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x2ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="ea-sym.xml", cAlternateFileName="")) returned 1 [0075.756] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d580 | out: lpFindFileData=0x12d580*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d9a5fb, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x1d9a5fb, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x900155a5, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x2ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="ja-jp-sym.xml", cAlternateFileName="")) returned 1 [0075.756] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d580 | out: lpFindFileData=0x12d580*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9003b703, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0x9003b703, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0x90061861, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0xacc, dwReserved0=0x0, dwReserved1=0x0, cFileName="symbase.xml", cAlternateFileName="")) returned 1 [0075.756] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d580 | out: lpFindFileData=0x12d580*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9003b703, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0x9003b703, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0x90061861, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0xacc, dwReserved0=0x0, dwReserved1=0x0, cFileName="symbase.xml", cAlternateFileName="")) returned 0 [0075.756] FindClose (in: hFindFile=0x1af3b6b0 | out: hFindFile=0x1af3b6b0) returned 1 [0075.756] SetErrorMode (uMode=0x0) returned 0x1 [0075.756] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\web", nBufferLength=0x105, lpBuffer=0x12d330, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\web", lpFilePart=0x0) returned 0x44 [0075.756] SetErrorMode (uMode=0x1) returned 0x0 [0075.756] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\web\\*", lpFindFileData=0x12d4d0 | out: lpFindFileData=0x12d4d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7c69c0, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7ecb1a, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7ecb1a, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1af3b6b0 [0075.796] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d4e0 | out: lpFindFileData=0x12d4e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7c69c0, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7ecb1a, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7ecb1a, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0075.796] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d4e0 | out: lpFindFileData=0x12d4e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x900d3c7b, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0x900d3c7b, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0x900f9dd9, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x48e, dwReserved0=0x0, dwReserved1=0x0, cFileName="webbase.xml", cAlternateFileName="")) returned 1 [0075.796] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d4e0 | out: lpFindFileData=0x12d4e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x900d3c7b, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0x900d3c7b, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0x900f9dd9, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x48e, dwReserved0=0x0, dwReserved1=0x0, cFileName="webbase.xml", cAlternateFileName="")) returned 0 [0075.796] FindClose (in: hFindFile=0x1af3b6b0 | out: hFindFile=0x1af3b6b0) returned 1 [0075.796] SetErrorMode (uMode=0x0) returned 0x1 [0075.797] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\web\\Decrypt Instructions.txt", nBufferLength=0x105, lpBuffer=0x12d1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\web\\Decrypt Instructions.txt", lpFilePart=0x0) returned 0x5d [0075.797] SetErrorMode (uMode=0x1) returned 0x0 [0075.797] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\web\\Decrypt Instructions.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\web\\decrypt instructions.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1f0 [0075.798] SetErrorMode (uMode=0x0) returned 0x1 [0075.798] GetFileType (hFile=0x1f0) returned 0x1 [0075.798] WriteFile (in: hFile=0x1f0, lpBuffer=0x2726c50*, nNumberOfBytesToWrite=0x773, lpNumberOfBytesWritten=0x12d748, lpOverlapped=0x0 | out: lpBuffer=0x2726c50*, lpNumberOfBytesWritten=0x12d748*=0x773, lpOverlapped=0x0) returned 1 [0075.799] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\web", nBufferLength=0x105, lpBuffer=0x12d3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\web", lpFilePart=0x0) returned 0x44 [0075.799] SetErrorMode (uMode=0x1) returned 0x0 [0075.799] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\web\\*", lpFindFileData=0x12d570 | out: lpFindFileData=0x12d570*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7c69c0, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x4d421cf0, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x4d421cf0, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1af3b6b0 [0075.799] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d580 | out: lpFindFileData=0x12d580*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7c69c0, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x4d421cf0, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x4d421cf0, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0075.799] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d580 | out: lpFindFileData=0x12d580*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4d421cf0, ftCreationTime.dwHighDateTime=0x1d5e786, ftLastAccessTime.dwLowDateTime=0x4d421cf0, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x4d421cf0, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x773, dwReserved0=0x0, dwReserved1=0x0, cFileName="Decrypt Instructions.txt", cAlternateFileName="DECRYP~1.TXT")) returned 1 [0075.799] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d580 | out: lpFindFileData=0x12d580*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x900d3c7b, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0x900d3c7b, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0x900f9dd9, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x48e, dwReserved0=0x0, dwReserved1=0x0, cFileName="webbase.xml", cAlternateFileName="")) returned 1 [0075.799] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d580 | out: lpFindFileData=0x12d580*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x900d3c7b, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0x900d3c7b, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0x900f9dd9, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x48e, dwReserved0=0x0, dwReserved1=0x0, cFileName="webbase.xml", cAlternateFileName="")) returned 0 [0075.800] FindClose (in: hFindFile=0x1af3b6b0 | out: hFindFile=0x1af3b6b0) returned 1 [0075.800] SetErrorMode (uMode=0x0) returned 0x1 [0075.800] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\he-IL", nBufferLength=0x105, lpBuffer=0x12d390, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\he-IL", lpFilePart=0x0) returned 0x38 [0075.800] SetErrorMode (uMode=0x1) returned 0x0 [0075.800] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\he-IL\\*", lpFindFileData=0x12d530 | out: lpFindFileData=0x12d530*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7ecb1a, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7ecb1a, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7ecb1a, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1af3b6b0 [0075.800] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7ecb1a, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7ecb1a, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7ecb1a, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0075.800] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe2bbf40b, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe2dd4721, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe2dd4721, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0075.800] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe2bbf40b, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe2dd4721, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe2dd4721, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0075.800] FindClose (in: hFindFile=0x1af3b6b0 | out: hFindFile=0x1af3b6b0) returned 1 [0075.801] SetErrorMode (uMode=0x0) returned 0x1 [0075.801] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\he-IL\\Decrypt Instructions.txt", nBufferLength=0x105, lpBuffer=0x12d240, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\he-IL\\Decrypt Instructions.txt", lpFilePart=0x0) returned 0x51 [0075.801] SetErrorMode (uMode=0x1) returned 0x0 [0075.801] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\he-IL\\Decrypt Instructions.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\he-il\\decrypt instructions.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1f0 [0075.843] SetErrorMode (uMode=0x0) returned 0x1 [0075.843] GetFileType (hFile=0x1f0) returned 0x1 [0075.843] WriteFile (in: hFile=0x1f0, lpBuffer=0x272d298*, nNumberOfBytesToWrite=0x773, lpNumberOfBytesWritten=0x12d7a8, lpOverlapped=0x0 | out: lpBuffer=0x272d298*, lpNumberOfBytesWritten=0x12d7a8*=0x773, lpOverlapped=0x0) returned 1 [0075.844] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\he-IL", nBufferLength=0x105, lpBuffer=0x12d430, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\he-IL", lpFilePart=0x0) returned 0x38 [0075.844] SetErrorMode (uMode=0x1) returned 0x0 [0075.844] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\he-IL\\*", lpFindFileData=0x12d5d0 | out: lpFindFileData=0x12d5d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7ecb1a, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x4d494110, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x4d494110, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1af3b6b0 [0075.844] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7ecb1a, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x4d494110, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x4d494110, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0075.844] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4d494110, ftCreationTime.dwHighDateTime=0x1d5e786, ftLastAccessTime.dwLowDateTime=0x4d494110, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x4d494110, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x773, dwReserved0=0x0, dwReserved1=0x0, cFileName="Decrypt Instructions.txt", cAlternateFileName="DECRYP~1.TXT")) returned 1 [0075.844] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe2bbf40b, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe2dd4721, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe2dd4721, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0075.844] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe2bbf40b, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe2dd4721, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe2dd4721, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0075.845] FindClose (in: hFindFile=0x1af3b6b0 | out: hFindFile=0x1af3b6b0) returned 1 [0075.845] SetErrorMode (uMode=0x0) returned 0x1 [0075.845] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\hr-HR", nBufferLength=0x105, lpBuffer=0x12d390, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\hr-HR", lpFilePart=0x0) returned 0x38 [0075.845] SetErrorMode (uMode=0x1) returned 0x0 [0075.845] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\hr-HR\\*", lpFindFileData=0x12d530 | out: lpFindFileData=0x12d530*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7ecb1a, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7ecb1a, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7ecb1a, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1af3b6b0 [0075.845] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7ecb1a, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7ecb1a, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7ecb1a, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0075.845] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe50f08dd, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe539e167, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe539e167, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0075.845] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe50f08dd, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe539e167, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe539e167, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0075.845] FindClose (in: hFindFile=0x1af3b6b0 | out: hFindFile=0x1af3b6b0) returned 1 [0075.846] SetErrorMode (uMode=0x0) returned 0x1 [0075.846] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\hr-HR\\Decrypt Instructions.txt", nBufferLength=0x105, lpBuffer=0x12d240, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\hr-HR\\Decrypt Instructions.txt", lpFilePart=0x0) returned 0x51 [0075.846] SetErrorMode (uMode=0x1) returned 0x0 [0075.846] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\hr-HR\\Decrypt Instructions.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hr-hr\\decrypt instructions.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1f0 [0075.846] SetErrorMode (uMode=0x0) returned 0x1 [0075.846] GetFileType (hFile=0x1f0) returned 0x1 [0075.847] WriteFile (in: hFile=0x1f0, lpBuffer=0x2733860*, nNumberOfBytesToWrite=0x773, lpNumberOfBytesWritten=0x12d7a8, lpOverlapped=0x0 | out: lpBuffer=0x2733860*, lpNumberOfBytesWritten=0x12d7a8*=0x773, lpOverlapped=0x0) returned 1 [0075.848] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\hr-HR", nBufferLength=0x105, lpBuffer=0x12d430, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\hr-HR", lpFilePart=0x0) returned 0x38 [0075.848] SetErrorMode (uMode=0x1) returned 0x0 [0075.848] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\hr-HR\\*", lpFindFileData=0x12d5d0 | out: lpFindFileData=0x12d5d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7ecb1a, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x4d494110, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x4d494110, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1af3b6b0 [0075.848] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7ecb1a, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x4d494110, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x4d494110, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0075.848] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4d494110, ftCreationTime.dwHighDateTime=0x1d5e786, ftLastAccessTime.dwLowDateTime=0x4d494110, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x4d494110, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x773, dwReserved0=0x0, dwReserved1=0x0, cFileName="Decrypt Instructions.txt", cAlternateFileName="DECRYP~1.TXT")) returned 1 [0075.848] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe50f08dd, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe539e167, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe539e167, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0075.848] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe50f08dd, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe539e167, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe539e167, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0075.848] FindClose (in: hFindFile=0x1af3b6b0 | out: hFindFile=0x1af3b6b0) returned 1 [0075.848] SetErrorMode (uMode=0x0) returned 0x1 [0075.848] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\hu-HU", nBufferLength=0x105, lpBuffer=0x12d390, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\hu-HU", lpFilePart=0x0) returned 0x38 [0075.848] SetErrorMode (uMode=0x1) returned 0x0 [0075.848] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\hu-HU\\*", lpFindFileData=0x12d530 | out: lpFindFileData=0x12d530*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7ecb1a, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7ecb1a, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7ecb1a, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1af3b6b0 [0075.849] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7ecb1a, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7ecb1a, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7ecb1a, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0075.849] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe8e3ba89, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe9004ae5, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe9004ae5, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0075.849] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe8e3ba89, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe9004ae5, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe9004ae5, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0075.849] FindClose (in: hFindFile=0x1af3b6b0 | out: hFindFile=0x1af3b6b0) returned 1 [0075.849] SetErrorMode (uMode=0x0) returned 0x1 [0075.849] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\hu-HU\\Decrypt Instructions.txt", nBufferLength=0x105, lpBuffer=0x12d240, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\hu-HU\\Decrypt Instructions.txt", lpFilePart=0x0) returned 0x51 [0075.849] SetErrorMode (uMode=0x1) returned 0x0 [0075.850] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\hu-HU\\Decrypt Instructions.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hu-hu\\decrypt instructions.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1f0 [0075.850] SetErrorMode (uMode=0x0) returned 0x1 [0075.850] GetFileType (hFile=0x1f0) returned 0x1 [0075.850] WriteFile (in: hFile=0x1f0, lpBuffer=0x2739e28*, nNumberOfBytesToWrite=0x773, lpNumberOfBytesWritten=0x12d7a8, lpOverlapped=0x0 | out: lpBuffer=0x2739e28*, lpNumberOfBytesWritten=0x12d7a8*=0x773, lpOverlapped=0x0) returned 1 [0075.851] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\hu-HU", nBufferLength=0x105, lpBuffer=0x12d430, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\hu-HU", lpFilePart=0x0) returned 0x38 [0075.851] SetErrorMode (uMode=0x1) returned 0x0 [0075.852] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\hu-HU\\*", lpFindFileData=0x12d5d0 | out: lpFindFileData=0x12d5d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7ecb1a, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x4d494110, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x4d494110, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1af3b6b0 [0075.852] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7ecb1a, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x4d494110, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x4d494110, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0075.852] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4d494110, ftCreationTime.dwHighDateTime=0x1d5e786, ftLastAccessTime.dwLowDateTime=0x4d494110, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x4d494110, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x773, dwReserved0=0x0, dwReserved1=0x0, cFileName="Decrypt Instructions.txt", cAlternateFileName="DECRYP~1.TXT")) returned 1 [0075.852] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe8e3ba89, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe9004ae5, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe9004ae5, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0075.852] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe8e3ba89, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe9004ae5, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe9004ae5, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0075.852] FindClose (in: hFindFile=0x1af3b6b0 | out: hFindFile=0x1af3b6b0) returned 1 [0075.852] SetErrorMode (uMode=0x0) returned 0x1 [0075.852] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\HWRCustomization", nBufferLength=0x105, lpBuffer=0x12d390, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\HWRCustomization", lpFilePart=0x0) returned 0x43 [0075.852] SetErrorMode (uMode=0x1) returned 0x0 [0075.853] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\HWRCustomization\\*", lpFindFileData=0x12d530 | out: lpFindFileData=0x12d530*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9e0df36a, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaabda5f8, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9e0df36a, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1af3b6b0 [0075.920] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9e0df36a, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaabda5f8, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9e0df36a, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0075.921] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9e0df36a, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaabda5f8, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9e0df36a, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0075.921] FindClose (in: hFindFile=0x1af3b6b0 | out: hFindFile=0x1af3b6b0) returned 1 [0075.921] SetErrorMode (uMode=0x0) returned 0x1 [0075.921] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\HWRCustomization\\Decrypt Instructions.txt", nBufferLength=0x105, lpBuffer=0x12d240, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\HWRCustomization\\Decrypt Instructions.txt", lpFilePart=0x0) returned 0x5c [0075.921] SetErrorMode (uMode=0x1) returned 0x0 [0075.921] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\HWRCustomization\\Decrypt Instructions.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hwrcustomization\\decrypt instructions.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1f0 [0077.474] SetErrorMode (uMode=0x0) returned 0x1 [0077.474] GetFileType (hFile=0x1f0) returned 0x1 [0077.474] WriteFile (in: hFile=0x1f0, lpBuffer=0x2740008*, nNumberOfBytesToWrite=0x773, lpNumberOfBytesWritten=0x12d7a8, lpOverlapped=0x0 | out: lpBuffer=0x2740008*, lpNumberOfBytesWritten=0x12d7a8*=0x773, lpOverlapped=0x0) returned 1 [0077.791] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\HWRCustomization", nBufferLength=0x105, lpBuffer=0x12d430, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\HWRCustomization", lpFilePart=0x0) returned 0x43 [0077.791] SetErrorMode (uMode=0x1) returned 0x0 [0077.791] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\HWRCustomization\\*", lpFindFileData=0x12d5d0 | out: lpFindFileData=0x12d5d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9e0df36a, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x4d5527f0, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x4d5527f0, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1af3b6b0 [0077.791] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9e0df36a, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x4d5527f0, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x4d5527f0, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0077.791] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4d5527f0, ftCreationTime.dwHighDateTime=0x1d5e786, ftLastAccessTime.dwLowDateTime=0x4d5527f0, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x4e6e0a30, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x773, dwReserved0=0x0, dwReserved1=0x0, cFileName="Decrypt Instructions.txt", cAlternateFileName="DECRYP~1.TXT")) returned 1 [0077.791] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4d5527f0, ftCreationTime.dwHighDateTime=0x1d5e786, ftLastAccessTime.dwLowDateTime=0x4d5527f0, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x4e6e0a30, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x773, dwReserved0=0x0, dwReserved1=0x0, cFileName="Decrypt Instructions.txt", cAlternateFileName="DECRYP~1.TXT")) returned 0 [0077.791] FindClose (in: hFindFile=0x1af3b6b0 | out: hFindFile=0x1af3b6b0) returned 1 [0077.792] SetErrorMode (uMode=0x0) returned 0x1 [0077.792] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\it-IT", nBufferLength=0x105, lpBuffer=0x12d390, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\it-IT", lpFilePart=0x0) returned 0x38 [0077.792] SetErrorMode (uMode=0x1) returned 0x0 [0077.792] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\it-IT\\*", lpFindFileData=0x12d530 | out: lpFindFileData=0x12d530*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7ecb1a, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7ecb1a, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7ecb1a, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1af3b6b0 [0077.792] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7ecb1a, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7ecb1a, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7ecb1a, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0077.792] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe9e26c68, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xea015e21, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xea015e21, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0077.793] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe9e26c68, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xea015e21, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xea015e21, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0077.793] FindClose (in: hFindFile=0x1af3b6b0 | out: hFindFile=0x1af3b6b0) returned 1 [0077.793] SetErrorMode (uMode=0x0) returned 0x1 [0077.793] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\it-IT\\Decrypt Instructions.txt", nBufferLength=0x105, lpBuffer=0x12d240, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\it-IT\\Decrypt Instructions.txt", lpFilePart=0x0) returned 0x51 [0077.793] SetErrorMode (uMode=0x1) returned 0x0 [0077.794] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\it-IT\\Decrypt Instructions.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\it-it\\decrypt instructions.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1f0 [0077.794] SetErrorMode (uMode=0x0) returned 0x1 [0077.794] GetFileType (hFile=0x1f0) returned 0x1 [0077.794] WriteFile (in: hFile=0x1f0, lpBuffer=0x2746668*, nNumberOfBytesToWrite=0x773, lpNumberOfBytesWritten=0x12d7a8, lpOverlapped=0x0 | out: lpBuffer=0x2746668*, lpNumberOfBytesWritten=0x12d7a8*=0x773, lpOverlapped=0x0) returned 1 [0077.795] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\it-IT", nBufferLength=0x105, lpBuffer=0x12d430, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\it-IT", lpFilePart=0x0) returned 0x38 [0077.795] SetErrorMode (uMode=0x1) returned 0x0 [0077.795] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\it-IT\\*", lpFindFileData=0x12d5d0 | out: lpFindFileData=0x12d5d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7ecb1a, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x4e706b90, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x4e706b90, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1af3b6b0 [0077.796] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7ecb1a, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x4e706b90, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x4e706b90, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0077.796] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e706b90, ftCreationTime.dwHighDateTime=0x1d5e786, ftLastAccessTime.dwLowDateTime=0x4e706b90, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x4e706b90, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x773, dwReserved0=0x0, dwReserved1=0x0, cFileName="Decrypt Instructions.txt", cAlternateFileName="DECRYP~1.TXT")) returned 1 [0077.796] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe9e26c68, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xea015e21, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xea015e21, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0077.796] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe9e26c68, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xea015e21, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xea015e21, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0077.796] FindClose (in: hFindFile=0x1af3b6b0 | out: hFindFile=0x1af3b6b0) returned 1 [0077.796] SetErrorMode (uMode=0x0) returned 0x1 [0077.796] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ja-JP", nBufferLength=0x105, lpBuffer=0x12d390, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ja-JP", lpFilePart=0x0) returned 0x38 [0077.796] SetErrorMode (uMode=0x1) returned 0x0 [0077.796] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ja-JP\\*", lpFindFileData=0x12d530 | out: lpFindFileData=0x12d530*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7ecb1a, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd812c74, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd812c74, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1af3b6b0 [0077.797] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7ecb1a, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd812c74, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd812c74, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0077.797] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe68981a0, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe6aad4b6, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe6aad4b6, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0077.797] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe68981a0, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe6aad4b6, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe6aad4b6, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0077.797] FindClose (in: hFindFile=0x1af3b6b0 | out: hFindFile=0x1af3b6b0) returned 1 [0077.797] SetErrorMode (uMode=0x0) returned 0x1 [0077.797] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ja-JP\\Decrypt Instructions.txt", nBufferLength=0x105, lpBuffer=0x12d240, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ja-JP\\Decrypt Instructions.txt", lpFilePart=0x0) returned 0x51 [0077.797] SetErrorMode (uMode=0x1) returned 0x0 [0077.798] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ja-JP\\Decrypt Instructions.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ja-jp\\decrypt instructions.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1f0 [0077.799] SetErrorMode (uMode=0x0) returned 0x1 [0077.799] GetFileType (hFile=0x1f0) returned 0x1 [0077.799] WriteFile (in: hFile=0x1f0, lpBuffer=0x274cc30*, nNumberOfBytesToWrite=0x773, lpNumberOfBytesWritten=0x12d7a8, lpOverlapped=0x0 | out: lpBuffer=0x274cc30*, lpNumberOfBytesWritten=0x12d7a8*=0x773, lpOverlapped=0x0) returned 1 [0077.800] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ja-JP", nBufferLength=0x105, lpBuffer=0x12d430, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ja-JP", lpFilePart=0x0) returned 0x38 [0077.800] SetErrorMode (uMode=0x1) returned 0x0 [0077.800] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ja-JP\\*", lpFindFileData=0x12d5d0 | out: lpFindFileData=0x12d5d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7ecb1a, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x4e706b90, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x4e706b90, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1af3b6b0 [0077.800] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7ecb1a, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x4e706b90, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x4e706b90, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0077.800] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e706b90, ftCreationTime.dwHighDateTime=0x1d5e786, ftLastAccessTime.dwLowDateTime=0x4e706b90, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x4e706b90, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x773, dwReserved0=0x0, dwReserved1=0x0, cFileName="Decrypt Instructions.txt", cAlternateFileName="DECRYP~1.TXT")) returned 1 [0077.801] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe68981a0, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe6aad4b6, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe6aad4b6, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0077.801] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe68981a0, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe6aad4b6, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe6aad4b6, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0077.801] FindClose (in: hFindFile=0x1af3b6b0 | out: hFindFile=0x1af3b6b0) returned 1 [0077.801] SetErrorMode (uMode=0x0) returned 0x1 [0077.801] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ko-KR", nBufferLength=0x105, lpBuffer=0x12d390, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ko-KR", lpFilePart=0x0) returned 0x38 [0077.801] SetErrorMode (uMode=0x1) returned 0x0 [0077.801] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ko-KR\\*", lpFindFileData=0x12d530 | out: lpFindFileData=0x12d530*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7ecb1a, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd812c74, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd812c74, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1af3b6b0 [0077.801] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7ecb1a, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd812c74, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd812c74, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0077.801] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4e1cef6, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe507e4c6, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe507e4c6, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0077.802] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4e1cef6, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe507e4c6, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe507e4c6, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0077.802] FindClose (in: hFindFile=0x1af3b6b0 | out: hFindFile=0x1af3b6b0) returned 1 [0077.802] SetErrorMode (uMode=0x0) returned 0x1 [0077.802] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ko-KR\\Decrypt Instructions.txt", nBufferLength=0x105, lpBuffer=0x12d240, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ko-KR\\Decrypt Instructions.txt", lpFilePart=0x0) returned 0x51 [0077.802] SetErrorMode (uMode=0x1) returned 0x0 [0077.802] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ko-KR\\Decrypt Instructions.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ko-kr\\decrypt instructions.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1f0 [0077.803] SetErrorMode (uMode=0x0) returned 0x1 [0077.803] GetFileType (hFile=0x1f0) returned 0x1 [0077.803] WriteFile (in: hFile=0x1f0, lpBuffer=0x27531f8*, nNumberOfBytesToWrite=0x773, lpNumberOfBytesWritten=0x12d7a8, lpOverlapped=0x0 | out: lpBuffer=0x27531f8*, lpNumberOfBytesWritten=0x12d7a8*=0x773, lpOverlapped=0x0) returned 1 [0077.804] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ko-KR", nBufferLength=0x105, lpBuffer=0x12d430, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ko-KR", lpFilePart=0x0) returned 0x38 [0077.804] SetErrorMode (uMode=0x1) returned 0x0 [0077.804] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ko-KR\\*", lpFindFileData=0x12d5d0 | out: lpFindFileData=0x12d5d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7ecb1a, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x4e706b90, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x4e706b90, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1af3b6b0 [0077.804] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7ecb1a, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x4e706b90, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x4e706b90, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0077.804] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e706b90, ftCreationTime.dwHighDateTime=0x1d5e786, ftLastAccessTime.dwLowDateTime=0x4e706b90, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x4e706b90, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x773, dwReserved0=0x0, dwReserved1=0x0, cFileName="Decrypt Instructions.txt", cAlternateFileName="DECRYP~1.TXT")) returned 1 [0077.804] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4e1cef6, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe507e4c6, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe507e4c6, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0077.804] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4e1cef6, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe507e4c6, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe507e4c6, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0077.804] FindClose (in: hFindFile=0x1af3b6b0 | out: hFindFile=0x1af3b6b0) returned 1 [0077.805] SetErrorMode (uMode=0x0) returned 0x1 [0077.805] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\lt-LT", nBufferLength=0x105, lpBuffer=0x12d390, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\lt-LT", lpFilePart=0x0) returned 0x38 [0077.805] SetErrorMode (uMode=0x1) returned 0x0 [0077.805] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\lt-LT\\*", lpFindFileData=0x12d530 | out: lpFindFileData=0x12d530*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd812c74, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd812c74, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd812c74, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1af3b6b0 [0077.806] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd812c74, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd812c74, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd812c74, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0077.806] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe608f802, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe627e9bb, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe62a4b18, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0077.806] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe608f802, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe627e9bb, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe62a4b18, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0077.806] FindClose (in: hFindFile=0x1af3b6b0 | out: hFindFile=0x1af3b6b0) returned 1 [0077.806] SetErrorMode (uMode=0x0) returned 0x1 [0077.807] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\lt-LT\\Decrypt Instructions.txt", nBufferLength=0x105, lpBuffer=0x12d240, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\lt-LT\\Decrypt Instructions.txt", lpFilePart=0x0) returned 0x51 [0077.807] SetErrorMode (uMode=0x1) returned 0x0 [0077.807] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\lt-LT\\Decrypt Instructions.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\lt-lt\\decrypt instructions.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1f0 [0077.807] SetErrorMode (uMode=0x0) returned 0x1 [0077.808] GetFileType (hFile=0x1f0) returned 0x1 [0077.808] WriteFile (in: hFile=0x1f0, lpBuffer=0x27597c0*, nNumberOfBytesToWrite=0x773, lpNumberOfBytesWritten=0x12d7a8, lpOverlapped=0x0 | out: lpBuffer=0x27597c0*, lpNumberOfBytesWritten=0x12d7a8*=0x773, lpOverlapped=0x0) returned 1 [0077.809] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\lt-LT", nBufferLength=0x105, lpBuffer=0x12d430, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\lt-LT", lpFilePart=0x0) returned 0x38 [0077.809] SetErrorMode (uMode=0x1) returned 0x0 [0077.809] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\lt-LT\\*", lpFindFileData=0x12d5d0 | out: lpFindFileData=0x12d5d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd812c74, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x4e706b90, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x4e706b90, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1af3b6b0 [0077.809] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd812c74, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x4e706b90, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x4e706b90, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0077.809] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e706b90, ftCreationTime.dwHighDateTime=0x1d5e786, ftLastAccessTime.dwLowDateTime=0x4e706b90, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x4e72ccf0, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x773, dwReserved0=0x0, dwReserved1=0x0, cFileName="Decrypt Instructions.txt", cAlternateFileName="DECRYP~1.TXT")) returned 1 [0077.809] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe608f802, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe627e9bb, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe62a4b18, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0077.809] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe608f802, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe627e9bb, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe62a4b18, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0077.809] FindClose (in: hFindFile=0x1af3b6b0 | out: hFindFile=0x1af3b6b0) returned 1 [0077.809] SetErrorMode (uMode=0x0) returned 0x1 [0077.810] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\lv-LV", nBufferLength=0x105, lpBuffer=0x12d390, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\lv-LV", lpFilePart=0x0) returned 0x38 [0077.810] SetErrorMode (uMode=0x1) returned 0x0 [0077.810] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\lv-LV\\*", lpFindFileData=0x12d530 | out: lpFindFileData=0x12d530*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd812c74, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd812c74, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd812c74, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1af3b6b0 [0077.810] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd812c74, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd812c74, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd812c74, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0077.810] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe721d8e0, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe7432bf6, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe7458d53, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0077.810] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe721d8e0, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe7432bf6, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe7458d53, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0077.810] FindClose (in: hFindFile=0x1af3b6b0 | out: hFindFile=0x1af3b6b0) returned 1 [0077.810] SetErrorMode (uMode=0x0) returned 0x1 [0077.811] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\lv-LV\\Decrypt Instructions.txt", nBufferLength=0x105, lpBuffer=0x12d240, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\lv-LV\\Decrypt Instructions.txt", lpFilePart=0x0) returned 0x51 [0077.811] SetErrorMode (uMode=0x1) returned 0x0 [0077.811] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\lv-LV\\Decrypt Instructions.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\lv-lv\\decrypt instructions.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1f0 [0077.811] SetErrorMode (uMode=0x0) returned 0x1 [0077.811] GetFileType (hFile=0x1f0) returned 0x1 [0077.812] WriteFile (in: hFile=0x1f0, lpBuffer=0x275fd88*, nNumberOfBytesToWrite=0x773, lpNumberOfBytesWritten=0x12d7a8, lpOverlapped=0x0 | out: lpBuffer=0x275fd88*, lpNumberOfBytesWritten=0x12d7a8*=0x773, lpOverlapped=0x0) returned 1 [0077.813] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\lv-LV", nBufferLength=0x105, lpBuffer=0x12d430, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\lv-LV", lpFilePart=0x0) returned 0x38 [0077.813] SetErrorMode (uMode=0x1) returned 0x0 [0077.813] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\lv-LV\\*", lpFindFileData=0x12d5d0 | out: lpFindFileData=0x12d5d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd812c74, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x4e72ccf0, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x4e72ccf0, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1af3b6b0 [0077.813] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd812c74, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x4e72ccf0, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x4e72ccf0, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0077.813] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e72ccf0, ftCreationTime.dwHighDateTime=0x1d5e786, ftLastAccessTime.dwLowDateTime=0x4e72ccf0, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x4e72ccf0, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x773, dwReserved0=0x0, dwReserved1=0x0, cFileName="Decrypt Instructions.txt", cAlternateFileName="DECRYP~1.TXT")) returned 1 [0077.813] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe721d8e0, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe7432bf6, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe7458d53, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0077.813] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe721d8e0, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe7432bf6, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe7458d53, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0077.813] FindClose (in: hFindFile=0x1af3b6b0 | out: hFindFile=0x1af3b6b0) returned 1 [0077.813] SetErrorMode (uMode=0x0) returned 0x1 [0077.813] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\nb-NO", nBufferLength=0x105, lpBuffer=0x12d390, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\nb-NO", lpFilePart=0x0) returned 0x38 [0077.813] SetErrorMode (uMode=0x1) returned 0x0 [0077.814] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\nb-NO\\*", lpFindFileData=0x12d530 | out: lpFindFileData=0x12d530*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd812c74, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd812c74, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd812c74, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1af3b6b0 [0077.814] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd812c74, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd812c74, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd812c74, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0077.814] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xead074bc, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xeaef6675, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xeaef6675, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0077.814] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xead074bc, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xeaef6675, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xeaef6675, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0077.814] FindClose (in: hFindFile=0x1af3b6b0 | out: hFindFile=0x1af3b6b0) returned 1 [0077.814] SetErrorMode (uMode=0x0) returned 0x1 [0077.815] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\nb-NO\\Decrypt Instructions.txt", nBufferLength=0x105, lpBuffer=0x12d240, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\nb-NO\\Decrypt Instructions.txt", lpFilePart=0x0) returned 0x51 [0077.815] SetErrorMode (uMode=0x1) returned 0x0 [0077.815] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\nb-NO\\Decrypt Instructions.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\nb-no\\decrypt instructions.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1f0 [0077.816] SetErrorMode (uMode=0x0) returned 0x1 [0077.816] GetFileType (hFile=0x1f0) returned 0x1 [0077.816] WriteFile (in: hFile=0x1f0, lpBuffer=0x2766350*, nNumberOfBytesToWrite=0x773, lpNumberOfBytesWritten=0x12d7a8, lpOverlapped=0x0 | out: lpBuffer=0x2766350*, lpNumberOfBytesWritten=0x12d7a8*=0x773, lpOverlapped=0x0) returned 1 [0077.817] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\nb-NO", nBufferLength=0x105, lpBuffer=0x12d430, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\nb-NO", lpFilePart=0x0) returned 0x38 [0077.817] SetErrorMode (uMode=0x1) returned 0x0 [0077.817] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\nb-NO\\*", lpFindFileData=0x12d5d0 | out: lpFindFileData=0x12d5d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd812c74, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x4e72ccf0, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x4e72ccf0, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1af3b6b0 [0077.818] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd812c74, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x4e72ccf0, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x4e72ccf0, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0077.818] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e72ccf0, ftCreationTime.dwHighDateTime=0x1d5e786, ftLastAccessTime.dwLowDateTime=0x4e72ccf0, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x4e72ccf0, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x773, dwReserved0=0x0, dwReserved1=0x0, cFileName="Decrypt Instructions.txt", cAlternateFileName="DECRYP~1.TXT")) returned 1 [0077.818] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xead074bc, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xeaef6675, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xeaef6675, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0077.818] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xead074bc, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xeaef6675, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xeaef6675, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0077.818] FindClose (in: hFindFile=0x1af3b6b0 | out: hFindFile=0x1af3b6b0) returned 1 [0077.818] SetErrorMode (uMode=0x0) returned 0x1 [0077.818] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\nl-NL", nBufferLength=0x105, lpBuffer=0x12d390, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\nl-NL", lpFilePart=0x0) returned 0x38 [0077.818] SetErrorMode (uMode=0x1) returned 0x0 [0077.818] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\nl-NL\\*", lpFindFileData=0x12d530 | out: lpFindFileData=0x12d530*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd812c74, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd812c74, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd812c74, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1af3b6b0 [0077.819] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd812c74, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd812c74, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd812c74, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0077.819] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4fe5f52, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe52213c5, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe5247522, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0077.819] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4fe5f52, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe52213c5, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe5247522, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0077.819] FindClose (in: hFindFile=0x1af3b6b0 | out: hFindFile=0x1af3b6b0) returned 1 [0077.819] SetErrorMode (uMode=0x0) returned 0x1 [0077.819] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\nl-NL\\Decrypt Instructions.txt", nBufferLength=0x105, lpBuffer=0x12d240, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\nl-NL\\Decrypt Instructions.txt", lpFilePart=0x0) returned 0x51 [0077.819] SetErrorMode (uMode=0x1) returned 0x0 [0077.819] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\nl-NL\\Decrypt Instructions.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\nl-nl\\decrypt instructions.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1f0 [0077.820] SetErrorMode (uMode=0x0) returned 0x1 [0077.820] GetFileType (hFile=0x1f0) returned 0x1 [0077.820] WriteFile (in: hFile=0x1f0, lpBuffer=0x276c918*, nNumberOfBytesToWrite=0x773, lpNumberOfBytesWritten=0x12d7a8, lpOverlapped=0x0 | out: lpBuffer=0x276c918*, lpNumberOfBytesWritten=0x12d7a8*=0x773, lpOverlapped=0x0) returned 1 [0077.821] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\nl-NL", nBufferLength=0x105, lpBuffer=0x12d430, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\nl-NL", lpFilePart=0x0) returned 0x38 [0077.821] SetErrorMode (uMode=0x1) returned 0x0 [0077.821] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\nl-NL\\*", lpFindFileData=0x12d5d0 | out: lpFindFileData=0x12d5d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd812c74, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x4e72ccf0, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x4e72ccf0, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1af3b6b0 [0077.821] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd812c74, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x4e72ccf0, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x4e72ccf0, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0077.821] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e72ccf0, ftCreationTime.dwHighDateTime=0x1d5e786, ftLastAccessTime.dwLowDateTime=0x4e72ccf0, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x4e72ccf0, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x773, dwReserved0=0x0, dwReserved1=0x0, cFileName="Decrypt Instructions.txt", cAlternateFileName="DECRYP~1.TXT")) returned 1 [0077.821] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4fe5f52, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe52213c5, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe5247522, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0077.822] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4fe5f52, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe52213c5, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe5247522, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0077.822] FindClose (in: hFindFile=0x1af3b6b0 | out: hFindFile=0x1af3b6b0) returned 1 [0077.822] SetErrorMode (uMode=0x0) returned 0x1 [0077.822] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\pl-PL", nBufferLength=0x105, lpBuffer=0x12d390, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\pl-PL", lpFilePart=0x0) returned 0x38 [0077.822] SetErrorMode (uMode=0x1) returned 0x0 [0077.822] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\pl-PL\\*", lpFindFileData=0x12d530 | out: lpFindFileData=0x12d530*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd812c74, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd812c74, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd812c74, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1af3b6b0 [0077.828] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd812c74, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd812c74, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd812c74, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0077.828] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe42361e6, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe44977b6, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe44977b6, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0077.828] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe42361e6, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe44977b6, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe44977b6, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0077.828] FindClose (in: hFindFile=0x1af3b6b0 | out: hFindFile=0x1af3b6b0) returned 1 [0077.828] SetErrorMode (uMode=0x0) returned 0x1 [0077.828] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\pl-PL\\Decrypt Instructions.txt", nBufferLength=0x105, lpBuffer=0x12d240, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\pl-PL\\Decrypt Instructions.txt", lpFilePart=0x0) returned 0x51 [0077.828] SetErrorMode (uMode=0x1) returned 0x0 [0077.829] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\pl-PL\\Decrypt Instructions.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\pl-pl\\decrypt instructions.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1f0 [0077.829] SetErrorMode (uMode=0x0) returned 0x1 [0077.829] GetFileType (hFile=0x1f0) returned 0x1 [0077.829] WriteFile (in: hFile=0x1f0, lpBuffer=0x2772ee0*, nNumberOfBytesToWrite=0x773, lpNumberOfBytesWritten=0x12d7a8, lpOverlapped=0x0 | out: lpBuffer=0x2772ee0*, lpNumberOfBytesWritten=0x12d7a8*=0x773, lpOverlapped=0x0) returned 1 [0077.830] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\pl-PL", nBufferLength=0x105, lpBuffer=0x12d430, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\pl-PL", lpFilePart=0x0) returned 0x38 [0077.830] SetErrorMode (uMode=0x1) returned 0x0 [0077.830] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\pl-PL\\*", lpFindFileData=0x12d5d0 | out: lpFindFileData=0x12d5d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd812c74, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x4e752e50, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x4e752e50, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1af3b6b0 [0077.830] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd812c74, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x4e752e50, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x4e752e50, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0077.831] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e752e50, ftCreationTime.dwHighDateTime=0x1d5e786, ftLastAccessTime.dwLowDateTime=0x4e752e50, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x4e752e50, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x773, dwReserved0=0x0, dwReserved1=0x0, cFileName="Decrypt Instructions.txt", cAlternateFileName="DECRYP~1.TXT")) returned 1 [0077.831] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe42361e6, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe44977b6, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe44977b6, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0077.831] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe42361e6, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe44977b6, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe44977b6, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0077.831] FindClose (in: hFindFile=0x1af3b6b0 | out: hFindFile=0x1af3b6b0) returned 1 [0077.831] SetErrorMode (uMode=0x0) returned 0x1 [0077.831] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\pt-BR", nBufferLength=0x105, lpBuffer=0x12d390, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\pt-BR", lpFilePart=0x0) returned 0x38 [0077.831] SetErrorMode (uMode=0x1) returned 0x0 [0077.831] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\pt-BR\\*", lpFindFileData=0x12d530 | out: lpFindFileData=0x12d530*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd812c74, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd812c74, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd812c74, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1af3b6b0 [0077.832] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd812c74, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd812c74, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd812c74, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0077.832] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe59917ef, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe5b809a8, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe5b809a8, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0077.832] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe59917ef, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe5b809a8, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe5b809a8, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0077.832] FindClose (in: hFindFile=0x1af3b6b0 | out: hFindFile=0x1af3b6b0) returned 1 [0077.832] SetErrorMode (uMode=0x0) returned 0x1 [0077.832] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\pt-BR\\Decrypt Instructions.txt", nBufferLength=0x105, lpBuffer=0x12d240, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\pt-BR\\Decrypt Instructions.txt", lpFilePart=0x0) returned 0x51 [0077.832] SetErrorMode (uMode=0x1) returned 0x0 [0077.832] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\pt-BR\\Decrypt Instructions.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\pt-br\\decrypt instructions.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1f0 [0077.833] SetErrorMode (uMode=0x0) returned 0x1 [0077.833] GetFileType (hFile=0x1f0) returned 0x1 [0077.833] WriteFile (in: hFile=0x1f0, lpBuffer=0x27794a8*, nNumberOfBytesToWrite=0x773, lpNumberOfBytesWritten=0x12d7a8, lpOverlapped=0x0 | out: lpBuffer=0x27794a8*, lpNumberOfBytesWritten=0x12d7a8*=0x773, lpOverlapped=0x0) returned 1 [0077.834] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\pt-BR", nBufferLength=0x105, lpBuffer=0x12d430, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\pt-BR", lpFilePart=0x0) returned 0x38 [0077.834] SetErrorMode (uMode=0x1) returned 0x0 [0077.834] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\pt-BR\\*", lpFindFileData=0x12d5d0 | out: lpFindFileData=0x12d5d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd812c74, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x4e752e50, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x4e752e50, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1af3b6b0 [0077.834] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd812c74, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x4e752e50, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x4e752e50, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0077.834] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e752e50, ftCreationTime.dwHighDateTime=0x1d5e786, ftLastAccessTime.dwLowDateTime=0x4e752e50, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x4e752e50, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x773, dwReserved0=0x0, dwReserved1=0x0, cFileName="Decrypt Instructions.txt", cAlternateFileName="DECRYP~1.TXT")) returned 1 [0077.834] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe59917ef, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe5b809a8, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe5b809a8, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0077.834] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe59917ef, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe5b809a8, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe5b809a8, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0077.835] FindClose (in: hFindFile=0x1af3b6b0 | out: hFindFile=0x1af3b6b0) returned 1 [0077.835] SetErrorMode (uMode=0x0) returned 0x1 [0077.835] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\pt-PT", nBufferLength=0x105, lpBuffer=0x12d390, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\pt-PT", lpFilePart=0x0) returned 0x38 [0077.835] SetErrorMode (uMode=0x1) returned 0x0 [0077.835] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\pt-PT\\*", lpFindFileData=0x12d530 | out: lpFindFileData=0x12d530*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd812c74, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd812c74, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd812c74, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1af3b6b0 [0077.835] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd812c74, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd812c74, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd812c74, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0077.835] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4bbb926, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe4dd0c3c, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe4dd0c3c, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0077.836] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4bbb926, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe4dd0c3c, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe4dd0c3c, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0077.836] FindClose (in: hFindFile=0x1af3b6b0 | out: hFindFile=0x1af3b6b0) returned 1 [0077.836] SetErrorMode (uMode=0x0) returned 0x1 [0077.836] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\pt-PT\\Decrypt Instructions.txt", nBufferLength=0x105, lpBuffer=0x12d240, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\pt-PT\\Decrypt Instructions.txt", lpFilePart=0x0) returned 0x51 [0077.836] SetErrorMode (uMode=0x1) returned 0x0 [0077.836] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\pt-PT\\Decrypt Instructions.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\pt-pt\\decrypt instructions.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1f0 [0077.841] SetErrorMode (uMode=0x0) returned 0x1 [0077.841] GetFileType (hFile=0x1f0) returned 0x1 [0077.841] WriteFile (in: hFile=0x1f0, lpBuffer=0x277fa70*, nNumberOfBytesToWrite=0x773, lpNumberOfBytesWritten=0x12d7a8, lpOverlapped=0x0 | out: lpBuffer=0x277fa70*, lpNumberOfBytesWritten=0x12d7a8*=0x773, lpOverlapped=0x0) returned 1 [0077.843] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\pt-PT", nBufferLength=0x105, lpBuffer=0x12d430, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\pt-PT", lpFilePart=0x0) returned 0x38 [0077.843] SetErrorMode (uMode=0x1) returned 0x0 [0077.843] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\pt-PT\\*", lpFindFileData=0x12d5d0 | out: lpFindFileData=0x12d5d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd812c74, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x4e778fb0, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x4e778fb0, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1af3b6b0 [0077.843] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd812c74, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x4e778fb0, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x4e778fb0, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0077.843] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e778fb0, ftCreationTime.dwHighDateTime=0x1d5e786, ftLastAccessTime.dwLowDateTime=0x4e778fb0, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x4e778fb0, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x773, dwReserved0=0x0, dwReserved1=0x0, cFileName="Decrypt Instructions.txt", cAlternateFileName="DECRYP~1.TXT")) returned 1 [0077.843] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4bbb926, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe4dd0c3c, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe4dd0c3c, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0077.843] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4bbb926, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe4dd0c3c, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe4dd0c3c, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0077.843] FindClose (in: hFindFile=0x1af3b6b0 | out: hFindFile=0x1af3b6b0) returned 1 [0077.843] SetErrorMode (uMode=0x0) returned 0x1 [0077.843] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ro-RO", nBufferLength=0x105, lpBuffer=0x12d390, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ro-RO", lpFilePart=0x0) returned 0x38 [0077.843] SetErrorMode (uMode=0x1) returned 0x0 [0077.844] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ro-RO\\*", lpFindFileData=0x12d530 | out: lpFindFileData=0x12d530*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd812c74, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd812c74, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd812c74, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1af3b6b0 [0077.844] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd812c74, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd812c74, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd812c74, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0077.844] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe215549d, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe2390910, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe2390910, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0077.844] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe215549d, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe2390910, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe2390910, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0077.844] FindClose (in: hFindFile=0x1af3b6b0 | out: hFindFile=0x1af3b6b0) returned 1 [0077.844] SetErrorMode (uMode=0x0) returned 0x1 [0077.845] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ro-RO\\Decrypt Instructions.txt", nBufferLength=0x105, lpBuffer=0x12d240, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ro-RO\\Decrypt Instructions.txt", lpFilePart=0x0) returned 0x51 [0077.845] SetErrorMode (uMode=0x1) returned 0x0 [0077.845] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ro-RO\\Decrypt Instructions.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ro-ro\\decrypt instructions.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1f0 [0077.845] SetErrorMode (uMode=0x0) returned 0x1 [0077.845] GetFileType (hFile=0x1f0) returned 0x1 [0077.846] WriteFile (in: hFile=0x1f0, lpBuffer=0x2786038*, nNumberOfBytesToWrite=0x773, lpNumberOfBytesWritten=0x12d7a8, lpOverlapped=0x0 | out: lpBuffer=0x2786038*, lpNumberOfBytesWritten=0x12d7a8*=0x773, lpOverlapped=0x0) returned 1 [0077.847] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ro-RO", nBufferLength=0x105, lpBuffer=0x12d430, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ro-RO", lpFilePart=0x0) returned 0x38 [0077.847] SetErrorMode (uMode=0x1) returned 0x0 [0077.847] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ro-RO\\*", lpFindFileData=0x12d5d0 | out: lpFindFileData=0x12d5d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd812c74, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x4e778fb0, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x4e778fb0, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1af3b6b0 [0077.847] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd812c74, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x4e778fb0, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x4e778fb0, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0077.847] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e778fb0, ftCreationTime.dwHighDateTime=0x1d5e786, ftLastAccessTime.dwLowDateTime=0x4e778fb0, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x4e778fb0, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x773, dwReserved0=0x0, dwReserved1=0x0, cFileName="Decrypt Instructions.txt", cAlternateFileName="DECRYP~1.TXT")) returned 1 [0077.847] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe215549d, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe2390910, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe2390910, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0077.847] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe215549d, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe2390910, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe2390910, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0077.847] FindClose (in: hFindFile=0x1af3b6b0 | out: hFindFile=0x1af3b6b0) returned 1 [0077.847] SetErrorMode (uMode=0x0) returned 0x1 [0077.847] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ru-RU", nBufferLength=0x105, lpBuffer=0x12d390, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ru-RU", lpFilePart=0x0) returned 0x38 [0077.848] SetErrorMode (uMode=0x1) returned 0x0 [0077.848] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ru-RU\\*", lpFindFileData=0x12d530 | out: lpFindFileData=0x12d530*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd812c74, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd838dce, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd838dce, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1af3b6b0 [0077.851] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd812c74, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd838dce, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd838dce, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0077.851] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea6a1a1d, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xea8dce90, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xea902fed, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0077.851] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea6a1a1d, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xea8dce90, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xea902fed, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0077.851] FindClose (in: hFindFile=0x1af3b6b0 | out: hFindFile=0x1af3b6b0) returned 1 [0077.851] SetErrorMode (uMode=0x0) returned 0x1 [0077.851] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ru-RU\\Decrypt Instructions.txt", nBufferLength=0x105, lpBuffer=0x12d240, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ru-RU\\Decrypt Instructions.txt", lpFilePart=0x0) returned 0x51 [0077.851] SetErrorMode (uMode=0x1) returned 0x0 [0077.852] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ru-RU\\Decrypt Instructions.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ru-ru\\decrypt instructions.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1f0 [0077.852] SetErrorMode (uMode=0x0) returned 0x1 [0077.852] GetFileType (hFile=0x1f0) returned 0x1 [0077.852] WriteFile (in: hFile=0x1f0, lpBuffer=0x278c600*, nNumberOfBytesToWrite=0x773, lpNumberOfBytesWritten=0x12d7a8, lpOverlapped=0x0 | out: lpBuffer=0x278c600*, lpNumberOfBytesWritten=0x12d7a8*=0x773, lpOverlapped=0x0) returned 1 [0077.853] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ru-RU", nBufferLength=0x105, lpBuffer=0x12d430, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ru-RU", lpFilePart=0x0) returned 0x38 [0077.853] SetErrorMode (uMode=0x1) returned 0x0 [0077.854] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ru-RU\\*", lpFindFileData=0x12d5d0 | out: lpFindFileData=0x12d5d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd812c74, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x4e778fb0, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x4e778fb0, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1af3b6b0 [0077.854] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd812c74, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x4e778fb0, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x4e778fb0, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0077.854] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e778fb0, ftCreationTime.dwHighDateTime=0x1d5e786, ftLastAccessTime.dwLowDateTime=0x4e778fb0, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x4e778fb0, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x773, dwReserved0=0x0, dwReserved1=0x0, cFileName="Decrypt Instructions.txt", cAlternateFileName="DECRYP~1.TXT")) returned 1 [0077.854] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea6a1a1d, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xea8dce90, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xea902fed, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0077.854] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea6a1a1d, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xea8dce90, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xea902fed, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0077.854] FindClose (in: hFindFile=0x1af3b6b0 | out: hFindFile=0x1af3b6b0) returned 1 [0077.854] SetErrorMode (uMode=0x0) returned 0x1 [0077.854] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\sk-SK", nBufferLength=0x105, lpBuffer=0x12d390, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\sk-SK", lpFilePart=0x0) returned 0x38 [0077.854] SetErrorMode (uMode=0x1) returned 0x0 [0077.854] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\sk-SK\\*", lpFindFileData=0x12d530 | out: lpFindFileData=0x12d530*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd838dce, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd838dce, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1af3b6b0 [0077.855] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd838dce, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd838dce, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0077.855] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe526d67f, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe54f4dac, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe54f4dac, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0077.855] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe526d67f, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe54f4dac, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe54f4dac, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0077.855] FindClose (in: hFindFile=0x1af3b6b0 | out: hFindFile=0x1af3b6b0) returned 1 [0077.855] SetErrorMode (uMode=0x0) returned 0x1 [0077.856] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\sk-SK\\Decrypt Instructions.txt", nBufferLength=0x105, lpBuffer=0x12d240, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\sk-SK\\Decrypt Instructions.txt", lpFilePart=0x0) returned 0x51 [0077.856] SetErrorMode (uMode=0x1) returned 0x0 [0077.856] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\sk-SK\\Decrypt Instructions.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\sk-sk\\decrypt instructions.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1f0 [0077.856] SetErrorMode (uMode=0x0) returned 0x1 [0077.856] GetFileType (hFile=0x1f0) returned 0x1 [0077.857] WriteFile (in: hFile=0x1f0, lpBuffer=0x2792bc8*, nNumberOfBytesToWrite=0x773, lpNumberOfBytesWritten=0x12d7a8, lpOverlapped=0x0 | out: lpBuffer=0x2792bc8*, lpNumberOfBytesWritten=0x12d7a8*=0x773, lpOverlapped=0x0) returned 1 [0077.858] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\sk-SK", nBufferLength=0x105, lpBuffer=0x12d430, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\sk-SK", lpFilePart=0x0) returned 0x38 [0077.858] SetErrorMode (uMode=0x1) returned 0x0 [0077.858] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\sk-SK\\*", lpFindFileData=0x12d5d0 | out: lpFindFileData=0x12d5d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x4e79f110, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x4e79f110, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1af3b6b0 [0077.858] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x4e79f110, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x4e79f110, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0077.858] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e79f110, ftCreationTime.dwHighDateTime=0x1d5e786, ftLastAccessTime.dwLowDateTime=0x4e79f110, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x4e79f110, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x773, dwReserved0=0x0, dwReserved1=0x0, cFileName="Decrypt Instructions.txt", cAlternateFileName="DECRYP~1.TXT")) returned 1 [0077.858] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe526d67f, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe54f4dac, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe54f4dac, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0077.858] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe526d67f, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe54f4dac, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe54f4dac, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0077.858] FindClose (in: hFindFile=0x1af3b6b0 | out: hFindFile=0x1af3b6b0) returned 1 [0077.858] SetErrorMode (uMode=0x0) returned 0x1 [0077.859] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\sl-SI", nBufferLength=0x105, lpBuffer=0x12d390, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\sl-SI", lpFilePart=0x0) returned 0x38 [0077.859] SetErrorMode (uMode=0x1) returned 0x0 [0077.859] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\sl-SI\\*", lpFindFileData=0x12d530 | out: lpFindFileData=0x12d530*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd838dce, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd838dce, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1af3b6b0 [0077.859] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd838dce, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd838dce, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0077.859] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe92d84cc, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe94ed7e2, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe94ed7e2, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0077.859] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe92d84cc, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe94ed7e2, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe94ed7e2, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0077.859] FindClose (in: hFindFile=0x1af3b6b0 | out: hFindFile=0x1af3b6b0) returned 1 [0077.859] SetErrorMode (uMode=0x0) returned 0x1 [0077.860] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\sl-SI\\Decrypt Instructions.txt", nBufferLength=0x105, lpBuffer=0x12d240, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\sl-SI\\Decrypt Instructions.txt", lpFilePart=0x0) returned 0x51 [0077.860] SetErrorMode (uMode=0x1) returned 0x0 [0077.860] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\sl-SI\\Decrypt Instructions.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\sl-si\\decrypt instructions.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1f0 [0077.860] SetErrorMode (uMode=0x0) returned 0x1 [0077.860] GetFileType (hFile=0x1f0) returned 0x1 [0077.861] WriteFile (in: hFile=0x1f0, lpBuffer=0x2799190*, nNumberOfBytesToWrite=0x773, lpNumberOfBytesWritten=0x12d7a8, lpOverlapped=0x0 | out: lpBuffer=0x2799190*, lpNumberOfBytesWritten=0x12d7a8*=0x773, lpOverlapped=0x0) returned 1 [0077.862] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\sl-SI", nBufferLength=0x105, lpBuffer=0x12d430, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\sl-SI", lpFilePart=0x0) returned 0x38 [0077.862] SetErrorMode (uMode=0x1) returned 0x0 [0077.862] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\sl-SI\\*", lpFindFileData=0x12d5d0 | out: lpFindFileData=0x12d5d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x4e79f110, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x4e79f110, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1af3b6b0 [0077.862] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x4e79f110, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x4e79f110, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0077.862] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e79f110, ftCreationTime.dwHighDateTime=0x1d5e786, ftLastAccessTime.dwLowDateTime=0x4e79f110, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x4e79f110, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x773, dwReserved0=0x0, dwReserved1=0x0, cFileName="Decrypt Instructions.txt", cAlternateFileName="DECRYP~1.TXT")) returned 1 [0077.862] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe92d84cc, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe94ed7e2, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe94ed7e2, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0077.862] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe92d84cc, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe94ed7e2, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe94ed7e2, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0077.862] FindClose (in: hFindFile=0x1af3b6b0 | out: hFindFile=0x1af3b6b0) returned 1 [0077.862] SetErrorMode (uMode=0x0) returned 0x1 [0077.862] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\sr-Latn-CS", nBufferLength=0x105, lpBuffer=0x12d390, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\sr-Latn-CS", lpFilePart=0x0) returned 0x3d [0077.862] SetErrorMode (uMode=0x1) returned 0x0 [0077.863] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\sr-Latn-CS\\*", lpFindFileData=0x12d530 | out: lpFindFileData=0x12d530*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd838dce, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd838dce, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1af3b6b0 [0077.863] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd838dce, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd838dce, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0077.863] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe3f3c6a2, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe4177b15, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe4177b15, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0077.863] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe3f3c6a2, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe4177b15, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe4177b15, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0077.863] FindClose (in: hFindFile=0x1af3b6b0 | out: hFindFile=0x1af3b6b0) returned 1 [0077.863] SetErrorMode (uMode=0x0) returned 0x1 [0077.864] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\sr-Latn-CS\\Decrypt Instructions.txt", nBufferLength=0x105, lpBuffer=0x12d240, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\sr-Latn-CS\\Decrypt Instructions.txt", lpFilePart=0x0) returned 0x56 [0077.864] SetErrorMode (uMode=0x1) returned 0x0 [0077.864] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\sr-Latn-CS\\Decrypt Instructions.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\sr-latn-cs\\decrypt instructions.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1f0 [0077.864] SetErrorMode (uMode=0x0) returned 0x1 [0077.864] GetFileType (hFile=0x1f0) returned 0x1 [0077.864] WriteFile (in: hFile=0x1f0, lpBuffer=0x279f7a8*, nNumberOfBytesToWrite=0x773, lpNumberOfBytesWritten=0x12d7a8, lpOverlapped=0x0 | out: lpBuffer=0x279f7a8*, lpNumberOfBytesWritten=0x12d7a8*=0x773, lpOverlapped=0x0) returned 1 [0077.865] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\sr-Latn-CS", nBufferLength=0x105, lpBuffer=0x12d430, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\sr-Latn-CS", lpFilePart=0x0) returned 0x3d [0077.866] SetErrorMode (uMode=0x1) returned 0x0 [0077.866] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\sr-Latn-CS\\*", lpFindFileData=0x12d5d0 | out: lpFindFileData=0x12d5d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x4e79f110, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x4e79f110, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1af3b6b0 [0077.866] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x4e79f110, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x4e79f110, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0077.866] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e79f110, ftCreationTime.dwHighDateTime=0x1d5e786, ftLastAccessTime.dwLowDateTime=0x4e79f110, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x4e79f110, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x773, dwReserved0=0x0, dwReserved1=0x0, cFileName="Decrypt Instructions.txt", cAlternateFileName="DECRYP~1.TXT")) returned 1 [0077.866] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe3f3c6a2, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe4177b15, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe4177b15, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0077.866] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe3f3c6a2, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe4177b15, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe4177b15, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0077.866] FindClose (in: hFindFile=0x1af3b6b0 | out: hFindFile=0x1af3b6b0) returned 1 [0077.866] SetErrorMode (uMode=0x0) returned 0x1 [0077.866] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\sv-SE", nBufferLength=0x105, lpBuffer=0x12d390, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\sv-SE", lpFilePart=0x0) returned 0x38 [0077.866] SetErrorMode (uMode=0x1) returned 0x0 [0077.866] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\sv-SE\\*", lpFindFileData=0x12d530 | out: lpFindFileData=0x12d530*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd838dce, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd838dce, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1af3b6b0 [0077.869] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd838dce, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd838dce, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0077.869] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe779eb51, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe79d9fc4, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe79d9fc4, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0077.869] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe779eb51, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe79d9fc4, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe79d9fc4, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0077.870] FindClose (in: hFindFile=0x1af3b6b0 | out: hFindFile=0x1af3b6b0) returned 1 [0077.870] SetErrorMode (uMode=0x0) returned 0x1 [0077.882] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\sv-SE\\Decrypt Instructions.txt", nBufferLength=0x105, lpBuffer=0x12d240, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\sv-SE\\Decrypt Instructions.txt", lpFilePart=0x0) returned 0x51 [0077.883] SetErrorMode (uMode=0x1) returned 0x0 [0077.883] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\sv-SE\\Decrypt Instructions.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\sv-se\\decrypt instructions.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1f0 [0077.935] SetErrorMode (uMode=0x0) returned 0x1 [0077.935] GetFileType (hFile=0x1f0) returned 0x1 [0077.935] WriteFile (in: hFile=0x1f0, lpBuffer=0x27a5da0*, nNumberOfBytesToWrite=0x773, lpNumberOfBytesWritten=0x12d7a8, lpOverlapped=0x0 | out: lpBuffer=0x27a5da0*, lpNumberOfBytesWritten=0x12d7a8*=0x773, lpOverlapped=0x0) returned 1 [0077.936] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\sv-SE", nBufferLength=0x105, lpBuffer=0x12d430, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\sv-SE", lpFilePart=0x0) returned 0x38 [0077.937] SetErrorMode (uMode=0x1) returned 0x0 [0077.937] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\sv-SE\\*", lpFindFileData=0x12d5d0 | out: lpFindFileData=0x12d5d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x4e85d7f0, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x4e85d7f0, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1af3b6b0 [0077.937] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x4e85d7f0, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x4e85d7f0, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0077.937] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e85d7f0, ftCreationTime.dwHighDateTime=0x1d5e786, ftLastAccessTime.dwLowDateTime=0x4e85d7f0, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x4e85d7f0, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x773, dwReserved0=0x0, dwReserved1=0x0, cFileName="Decrypt Instructions.txt", cAlternateFileName="DECRYP~1.TXT")) returned 1 [0077.937] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe779eb51, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe79d9fc4, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe79d9fc4, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0077.937] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe779eb51, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe79d9fc4, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe79d9fc4, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0077.937] FindClose (in: hFindFile=0x1af3b6b0 | out: hFindFile=0x1af3b6b0) returned 1 [0077.937] SetErrorMode (uMode=0x0) returned 0x1 [0077.937] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\th-TH", nBufferLength=0x105, lpBuffer=0x12d390, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\th-TH", lpFilePart=0x0) returned 0x38 [0077.937] SetErrorMode (uMode=0x1) returned 0x0 [0077.937] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\th-TH\\*", lpFindFileData=0x12d530 | out: lpFindFileData=0x12d530*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd838dce, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd838dce, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1af3b6b0 [0077.938] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd838dce, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd838dce, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0077.938] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe8f46414, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe91a79e4, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe91a79e4, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0077.938] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe8f46414, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe91a79e4, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe91a79e4, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0077.938] FindClose (in: hFindFile=0x1af3b6b0 | out: hFindFile=0x1af3b6b0) returned 1 [0077.938] SetErrorMode (uMode=0x0) returned 0x1 [0077.938] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\th-TH\\Decrypt Instructions.txt", nBufferLength=0x105, lpBuffer=0x12d240, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\th-TH\\Decrypt Instructions.txt", lpFilePart=0x0) returned 0x51 [0077.939] SetErrorMode (uMode=0x1) returned 0x0 [0077.939] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\th-TH\\Decrypt Instructions.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\th-th\\decrypt instructions.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1f0 [0077.939] SetErrorMode (uMode=0x0) returned 0x1 [0077.939] GetFileType (hFile=0x1f0) returned 0x1 [0077.939] WriteFile (in: hFile=0x1f0, lpBuffer=0x27ac368*, nNumberOfBytesToWrite=0x773, lpNumberOfBytesWritten=0x12d7a8, lpOverlapped=0x0 | out: lpBuffer=0x27ac368*, lpNumberOfBytesWritten=0x12d7a8*=0x773, lpOverlapped=0x0) returned 1 [0077.940] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\th-TH", nBufferLength=0x105, lpBuffer=0x12d430, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\th-TH", lpFilePart=0x0) returned 0x38 [0077.940] SetErrorMode (uMode=0x1) returned 0x0 [0077.940] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\th-TH\\*", lpFindFileData=0x12d5d0 | out: lpFindFileData=0x12d5d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x4e85d7f0, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x4e85d7f0, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1af3b6b0 [0077.940] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x4e85d7f0, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x4e85d7f0, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0077.941] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e85d7f0, ftCreationTime.dwHighDateTime=0x1d5e786, ftLastAccessTime.dwLowDateTime=0x4e85d7f0, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x4e85d7f0, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x773, dwReserved0=0x0, dwReserved1=0x0, cFileName="Decrypt Instructions.txt", cAlternateFileName="DECRYP~1.TXT")) returned 1 [0077.941] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe8f46414, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe91a79e4, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe91a79e4, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0077.941] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe8f46414, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe91a79e4, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe91a79e4, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0077.941] FindClose (in: hFindFile=0x1af3b6b0 | out: hFindFile=0x1af3b6b0) returned 1 [0077.941] SetErrorMode (uMode=0x0) returned 0x1 [0077.941] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\tr-TR", nBufferLength=0x105, lpBuffer=0x12d390, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\tr-TR", lpFilePart=0x0) returned 0x38 [0077.941] SetErrorMode (uMode=0x1) returned 0x0 [0077.941] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\tr-TR\\*", lpFindFileData=0x12d530 | out: lpFindFileData=0x12d530*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x980e725f, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x980e725f, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1af3b6b0 [0077.941] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x980e725f, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x980e725f, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0077.942] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8a6eb476, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8a6eb476, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8a6eb476, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0077.942] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8a6eb476, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8a6eb476, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8a6eb476, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0077.942] FindClose (in: hFindFile=0x1af3b6b0 | out: hFindFile=0x1af3b6b0) returned 1 [0077.942] SetErrorMode (uMode=0x0) returned 0x1 [0077.942] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\tr-TR\\Decrypt Instructions.txt", nBufferLength=0x105, lpBuffer=0x12d240, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\tr-TR\\Decrypt Instructions.txt", lpFilePart=0x0) returned 0x51 [0077.942] SetErrorMode (uMode=0x1) returned 0x0 [0077.942] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\tr-TR\\Decrypt Instructions.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\tr-tr\\decrypt instructions.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1f0 [0077.943] SetErrorMode (uMode=0x0) returned 0x1 [0077.943] GetFileType (hFile=0x1f0) returned 0x1 [0077.943] WriteFile (in: hFile=0x1f0, lpBuffer=0x27b2930*, nNumberOfBytesToWrite=0x773, lpNumberOfBytesWritten=0x12d7a8, lpOverlapped=0x0 | out: lpBuffer=0x27b2930*, lpNumberOfBytesWritten=0x12d7a8*=0x773, lpOverlapped=0x0) returned 1 [0077.944] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\tr-TR", nBufferLength=0x105, lpBuffer=0x12d430, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\tr-TR", lpFilePart=0x0) returned 0x38 [0077.944] SetErrorMode (uMode=0x1) returned 0x0 [0077.944] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\tr-TR\\*", lpFindFileData=0x12d5d0 | out: lpFindFileData=0x12d5d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x4e85d7f0, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x4e85d7f0, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1af3b6b0 [0077.944] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x4e85d7f0, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x4e85d7f0, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0077.944] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e85d7f0, ftCreationTime.dwHighDateTime=0x1d5e786, ftLastAccessTime.dwLowDateTime=0x4e85d7f0, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x4e85d7f0, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x773, dwReserved0=0x0, dwReserved1=0x0, cFileName="Decrypt Instructions.txt", cAlternateFileName="DECRYP~1.TXT")) returned 1 [0077.944] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8a6eb476, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8a6eb476, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8a6eb476, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0077.945] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8a6eb476, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8a6eb476, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8a6eb476, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0077.945] FindClose (in: hFindFile=0x1af3b6b0 | out: hFindFile=0x1af3b6b0) returned 1 [0077.945] SetErrorMode (uMode=0x0) returned 0x1 [0077.945] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\uk-UA", nBufferLength=0x105, lpBuffer=0x12d390, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\uk-UA", lpFilePart=0x0) returned 0x38 [0077.945] SetErrorMode (uMode=0x1) returned 0x0 [0077.945] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\uk-UA\\*", lpFindFileData=0x12d530 | out: lpFindFileData=0x12d530*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd838dce, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd838dce, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1af3b6b0 [0077.945] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd838dce, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd838dce, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0077.945] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe29f63af, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe2c31822, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe2c31822, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0077.946] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe29f63af, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe2c31822, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe2c31822, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0077.946] FindClose (in: hFindFile=0x1af3b6b0 | out: hFindFile=0x1af3b6b0) returned 1 [0077.946] SetErrorMode (uMode=0x0) returned 0x1 [0077.946] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\uk-UA\\Decrypt Instructions.txt", nBufferLength=0x105, lpBuffer=0x12d240, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\uk-UA\\Decrypt Instructions.txt", lpFilePart=0x0) returned 0x51 [0077.946] SetErrorMode (uMode=0x1) returned 0x0 [0077.946] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\uk-UA\\Decrypt Instructions.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\uk-ua\\decrypt instructions.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1f0 [0077.947] SetErrorMode (uMode=0x0) returned 0x1 [0077.947] GetFileType (hFile=0x1f0) returned 0x1 [0077.947] WriteFile (in: hFile=0x1f0, lpBuffer=0x27b8ef8*, nNumberOfBytesToWrite=0x773, lpNumberOfBytesWritten=0x12d7a8, lpOverlapped=0x0 | out: lpBuffer=0x27b8ef8*, lpNumberOfBytesWritten=0x12d7a8*=0x773, lpOverlapped=0x0) returned 1 [0077.948] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\uk-UA", nBufferLength=0x105, lpBuffer=0x12d430, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\uk-UA", lpFilePart=0x0) returned 0x38 [0077.948] SetErrorMode (uMode=0x1) returned 0x0 [0077.948] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\uk-UA\\*", lpFindFileData=0x12d5d0 | out: lpFindFileData=0x12d5d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x4e85d7f0, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x4e85d7f0, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1af3b6b0 [0077.949] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x4e85d7f0, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x4e85d7f0, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0077.949] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e85d7f0, ftCreationTime.dwHighDateTime=0x1d5e786, ftLastAccessTime.dwLowDateTime=0x4e85d7f0, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x4e883950, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x773, dwReserved0=0x0, dwReserved1=0x0, cFileName="Decrypt Instructions.txt", cAlternateFileName="DECRYP~1.TXT")) returned 1 [0077.949] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe29f63af, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe2c31822, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe2c31822, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0077.949] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe29f63af, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe2c31822, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe2c31822, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0077.949] FindClose (in: hFindFile=0x1af3b6b0 | out: hFindFile=0x1af3b6b0) returned 1 [0077.949] SetErrorMode (uMode=0x0) returned 0x1 [0077.949] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\zh-CN", nBufferLength=0x105, lpBuffer=0x12d390, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\zh-CN", lpFilePart=0x0) returned 0x38 [0077.949] SetErrorMode (uMode=0x1) returned 0x0 [0077.949] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\zh-CN\\*", lpFindFileData=0x12d530 | out: lpFindFileData=0x12d530*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x98074e3f, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x98074e3f, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1af3b6b0 [0077.971] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x98074e3f, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x98074e3f, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0077.971] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9d513f43, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x9d513f43, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x9d53a0a3, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0077.971] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9d513f43, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x9d513f43, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x9d53a0a3, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0077.972] FindClose (in: hFindFile=0x1af3b6b0 | out: hFindFile=0x1af3b6b0) returned 1 [0077.972] SetErrorMode (uMode=0x0) returned 0x1 [0077.972] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\zh-CN\\Decrypt Instructions.txt", nBufferLength=0x105, lpBuffer=0x12d240, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\zh-CN\\Decrypt Instructions.txt", lpFilePart=0x0) returned 0x51 [0077.972] SetErrorMode (uMode=0x1) returned 0x0 [0077.973] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\zh-CN\\Decrypt Instructions.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\zh-cn\\decrypt instructions.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1f0 [0078.222] SetErrorMode (uMode=0x0) returned 0x1 [0078.222] GetFileType (hFile=0x1f0) returned 0x1 [0078.222] WriteFile (in: hFile=0x1f0, lpBuffer=0x27bf4c0*, nNumberOfBytesToWrite=0x773, lpNumberOfBytesWritten=0x12d7a8, lpOverlapped=0x0 | out: lpBuffer=0x27bf4c0*, lpNumberOfBytesWritten=0x12d7a8*=0x773, lpOverlapped=0x0) returned 1 [0078.224] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\zh-CN", nBufferLength=0x105, lpBuffer=0x12d430, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\zh-CN", lpFilePart=0x0) returned 0x38 [0078.224] SetErrorMode (uMode=0x1) returned 0x0 [0078.224] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\zh-CN\\*", lpFindFileData=0x12d5d0 | out: lpFindFileData=0x12d5d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x4e8a9ab0, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x4e8a9ab0, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1af3b6b0 [0078.224] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x4e8a9ab0, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x4e8a9ab0, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0078.225] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e8a9ab0, ftCreationTime.dwHighDateTime=0x1d5e786, ftLastAccessTime.dwLowDateTime=0x4e8a9ab0, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x4eb0b0b0, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x773, dwReserved0=0x0, dwReserved1=0x0, cFileName="Decrypt Instructions.txt", cAlternateFileName="DECRYP~1.TXT")) returned 1 [0078.225] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9d513f43, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x9d513f43, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x9d53a0a3, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0078.225] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9d513f43, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x9d513f43, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x9d53a0a3, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0078.225] FindClose (in: hFindFile=0x1af3b6b0 | out: hFindFile=0x1af3b6b0) returned 1 [0078.225] SetErrorMode (uMode=0x0) returned 0x1 [0078.225] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\zh-TW", nBufferLength=0x105, lpBuffer=0x12d390, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\zh-TW", lpFilePart=0x0) returned 0x38 [0078.225] SetErrorMode (uMode=0x1) returned 0x0 [0078.225] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\zh-TW\\*", lpFindFileData=0x12d530 | out: lpFindFileData=0x12d530*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd838dce, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd838dce, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1af3b6b0 [0078.226] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd838dce, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd838dce, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0078.226] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe268a454, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe287960d, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe287960d, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0078.226] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe268a454, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe287960d, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe287960d, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0078.226] FindClose (in: hFindFile=0x1af3b6b0 | out: hFindFile=0x1af3b6b0) returned 1 [0078.226] SetErrorMode (uMode=0x0) returned 0x1 [0078.227] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\zh-TW\\Decrypt Instructions.txt", nBufferLength=0x105, lpBuffer=0x12d240, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\zh-TW\\Decrypt Instructions.txt", lpFilePart=0x0) returned 0x51 [0078.227] SetErrorMode (uMode=0x1) returned 0x0 [0078.227] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\zh-TW\\Decrypt Instructions.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\zh-tw\\decrypt instructions.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1f0 [0078.227] SetErrorMode (uMode=0x0) returned 0x1 [0078.228] GetFileType (hFile=0x1f0) returned 0x1 [0078.228] WriteFile (in: hFile=0x1f0, lpBuffer=0x27c5a88*, nNumberOfBytesToWrite=0x773, lpNumberOfBytesWritten=0x12d7a8, lpOverlapped=0x0 | out: lpBuffer=0x27c5a88*, lpNumberOfBytesWritten=0x12d7a8*=0x773, lpOverlapped=0x0) returned 1 [0078.229] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\zh-TW", nBufferLength=0x105, lpBuffer=0x12d430, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\zh-TW", lpFilePart=0x0) returned 0x38 [0078.229] SetErrorMode (uMode=0x1) returned 0x0 [0078.229] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\zh-TW\\*", lpFindFileData=0x12d5d0 | out: lpFindFileData=0x12d5d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x4eb0b0b0, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x4eb0b0b0, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1af3b6b0 [0078.230] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x4eb0b0b0, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x4eb0b0b0, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0078.230] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4eb0b0b0, ftCreationTime.dwHighDateTime=0x1d5e786, ftLastAccessTime.dwLowDateTime=0x4eb0b0b0, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x4eb31210, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x773, dwReserved0=0x0, dwReserved1=0x0, cFileName="Decrypt Instructions.txt", cAlternateFileName="DECRYP~1.TXT")) returned 1 [0078.230] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe268a454, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe287960d, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe287960d, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0078.230] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe268a454, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe287960d, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe287960d, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0078.230] FindClose (in: hFindFile=0x1af3b6b0 | out: hFindFile=0x1af3b6b0) returned 1 [0078.230] SetErrorMode (uMode=0x0) returned 0x1 [0078.230] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\MSClientDataMgr", nBufferLength=0x105, lpBuffer=0x12d3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\MSClientDataMgr", lpFilePart=0x0) returned 0x3e [0078.230] SetErrorMode (uMode=0x1) returned 0x0 [0078.230] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\MSClientDataMgr\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x69dc9750, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x69dc9750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x69dc9750, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1af3b6b0 [0078.250] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5a0 | out: lpFindFileData=0x12d5a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x69dc9750, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x69dc9750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x69dc9750, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0078.250] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5a0 | out: lpFindFileData=0x12d5a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xad59fd00, ftCreationTime.dwHighDateTime=0x1ca9454, ftLastAccessTime.dwLowDateTime=0x69dc9750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xad59fd00, ftLastWriteTime.dwHighDateTime=0x1ca9454, nFileSizeHigh=0x0, nFileSizeLow=0x665a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSCDM.DLL", cAlternateFileName="")) returned 1 [0078.250] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5a0 | out: lpFindFileData=0x12d5a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xad59fd00, ftCreationTime.dwHighDateTime=0x1ca9454, ftLastAccessTime.dwLowDateTime=0x69dc9750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xad59fd00, ftLastWriteTime.dwHighDateTime=0x1ca9454, nFileSizeHigh=0x0, nFileSizeLow=0x665a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSCDM.DLL", cAlternateFileName="")) returned 0 [0078.250] FindClose (in: hFindFile=0x1af3b6b0 | out: hFindFile=0x1af3b6b0) returned 1 [0078.250] SetErrorMode (uMode=0x0) returned 0x1 [0078.251] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\MSClientDataMgr\\Decrypt Instructions.txt", nBufferLength=0x105, lpBuffer=0x12d2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\MSClientDataMgr\\Decrypt Instructions.txt", lpFilePart=0x0) returned 0x57 [0078.251] SetErrorMode (uMode=0x1) returned 0x0 [0078.251] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\MSClientDataMgr\\Decrypt Instructions.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\msclientdatamgr\\decrypt instructions.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1f0 [0078.251] SetErrorMode (uMode=0x0) returned 0x1 [0078.252] GetFileType (hFile=0x1f0) returned 0x1 [0078.252] WriteFile (in: hFile=0x1f0, lpBuffer=0x27cc0b0*, nNumberOfBytesToWrite=0x773, lpNumberOfBytesWritten=0x12d808, lpOverlapped=0x0 | out: lpBuffer=0x27cc0b0*, lpNumberOfBytesWritten=0x12d808*=0x773, lpOverlapped=0x0) returned 1 [0078.253] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\MSClientDataMgr", nBufferLength=0x105, lpBuffer=0x12d490, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\MSClientDataMgr", lpFilePart=0x0) returned 0x3e [0078.253] SetErrorMode (uMode=0x1) returned 0x0 [0078.253] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\MSClientDataMgr\\*", lpFindFileData=0x12d630 | out: lpFindFileData=0x12d630*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x69dc9750, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x4eb57370, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x4eb57370, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1af3b6b0 [0078.253] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d640 | out: lpFindFileData=0x12d640*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x69dc9750, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x4eb57370, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x4eb57370, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0078.254] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d640 | out: lpFindFileData=0x12d640*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4eb57370, ftCreationTime.dwHighDateTime=0x1d5e786, ftLastAccessTime.dwLowDateTime=0x4eb57370, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x4eb57370, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x773, dwReserved0=0x0, dwReserved1=0x0, cFileName="Decrypt Instructions.txt", cAlternateFileName="DECRYP~1.TXT")) returned 1 [0078.254] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d640 | out: lpFindFileData=0x12d640*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xad59fd00, ftCreationTime.dwHighDateTime=0x1ca9454, ftLastAccessTime.dwLowDateTime=0x69dc9750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xad59fd00, ftLastWriteTime.dwHighDateTime=0x1ca9454, nFileSizeHigh=0x0, nFileSizeLow=0x665a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSCDM.DLL", cAlternateFileName="")) returned 1 [0078.254] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d640 | out: lpFindFileData=0x12d640*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xad59fd00, ftCreationTime.dwHighDateTime=0x1ca9454, ftLastAccessTime.dwLowDateTime=0x69dc9750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xad59fd00, ftLastWriteTime.dwHighDateTime=0x1ca9454, nFileSizeHigh=0x0, nFileSizeLow=0x665a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSCDM.DLL", cAlternateFileName="")) returned 0 [0078.254] FindClose (in: hFindFile=0x1af3b6b0 | out: hFindFile=0x1af3b6b0) returned 1 [0078.254] SetErrorMode (uMode=0x0) returned 0x1 [0078.254] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\MSInfo", nBufferLength=0x105, lpBuffer=0x12d3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\MSInfo", lpFilePart=0x0) returned 0x35 [0078.254] SetErrorMode (uMode=0x1) returned 0x0 [0078.254] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\MSInfo\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1eab37af, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1af3b6b0 [0078.255] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5a0 | out: lpFindFileData=0x12d5a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1eab37af, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0078.255] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5a0 | out: lpFindFileData=0x12d5a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23ecb743, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0078.255] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5a0 | out: lpFindFileData=0x12d5a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x830a4e7c, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x830a4e7c, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x830cafdd, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x5c800, dwReserved0=0x0, dwReserved1=0x0, cFileName="msinfo32.exe", cAlternateFileName="")) returned 1 [0078.255] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5a0 | out: lpFindFileData=0x12d5a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x830a4e7c, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x830a4e7c, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x830cafdd, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x5c800, dwReserved0=0x0, dwReserved1=0x0, cFileName="msinfo32.exe", cAlternateFileName="")) returned 0 [0078.255] FindClose (in: hFindFile=0x1af3b6b0 | out: hFindFile=0x1af3b6b0) returned 1 [0078.255] SetErrorMode (uMode=0x0) returned 0x1 [0078.256] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\MSInfo\\Decrypt Instructions.txt", nBufferLength=0x105, lpBuffer=0x12d2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\MSInfo\\Decrypt Instructions.txt", lpFilePart=0x0) returned 0x4e [0078.256] SetErrorMode (uMode=0x1) returned 0x0 [0078.256] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\MSInfo\\Decrypt Instructions.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\msinfo\\decrypt instructions.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1f0 [0078.256] SetErrorMode (uMode=0x0) returned 0x1 [0078.256] GetFileType (hFile=0x1f0) returned 0x1 [0078.257] WriteFile (in: hFile=0x1f0, lpBuffer=0x27d2688*, nNumberOfBytesToWrite=0x773, lpNumberOfBytesWritten=0x12d808, lpOverlapped=0x0 | out: lpBuffer=0x27d2688*, lpNumberOfBytesWritten=0x12d808*=0x773, lpOverlapped=0x0) returned 1 [0078.332] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\MSInfo", nBufferLength=0x105, lpBuffer=0x12d490, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\MSInfo", lpFilePart=0x0) returned 0x35 [0078.332] SetErrorMode (uMode=0x1) returned 0x0 [0078.332] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\MSInfo\\*", lpFindFileData=0x12d630 | out: lpFindFileData=0x12d630*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x4eb57370, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x4eb57370, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1af3b6b0 [0078.332] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d640 | out: lpFindFileData=0x12d640*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x4eb57370, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x4eb57370, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0078.332] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d640 | out: lpFindFileData=0x12d640*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4eb57370, ftCreationTime.dwHighDateTime=0x1d5e786, ftLastAccessTime.dwLowDateTime=0x4eb57370, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x4ec15a50, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x773, dwReserved0=0x0, dwReserved1=0x0, cFileName="Decrypt Instructions.txt", cAlternateFileName="DECRYP~1.TXT")) returned 1 [0078.332] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d640 | out: lpFindFileData=0x12d640*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23ecb743, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0078.332] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d640 | out: lpFindFileData=0x12d640*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x830a4e7c, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x830a4e7c, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x830cafdd, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x5c800, dwReserved0=0x0, dwReserved1=0x0, cFileName="msinfo32.exe", cAlternateFileName="")) returned 1 [0078.332] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d640 | out: lpFindFileData=0x12d640*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x830a4e7c, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x830a4e7c, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x830cafdd, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x5c800, dwReserved0=0x0, dwReserved1=0x0, cFileName="msinfo32.exe", cAlternateFileName="")) returned 0 [0078.333] FindClose (in: hFindFile=0x1af3b6b0 | out: hFindFile=0x1af3b6b0) returned 1 [0078.333] SetErrorMode (uMode=0x0) returned 0x1 [0078.333] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\MSInfo\\en-US", nBufferLength=0x105, lpBuffer=0x12d390, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\MSInfo\\en-US", lpFilePart=0x0) returned 0x3b [0078.333] SetErrorMode (uMode=0x1) returned 0x0 [0078.333] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\MSInfo\\en-US\\*", lpFindFileData=0x12d530 | out: lpFindFileData=0x12d530*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23ecb743, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1af3b6b0 [0078.333] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23ecb743, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0078.334] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0a09f, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xccb91a1, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xca0a09f, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x6800, dwReserved0=0x0, dwReserved1=0x0, cFileName="msinfo32.exe.mui", cAlternateFileName="")) returned 1 [0078.334] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0a09f, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xccb91a1, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xca0a09f, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x6800, dwReserved0=0x0, dwReserved1=0x0, cFileName="msinfo32.exe.mui", cAlternateFileName="")) returned 0 [0078.334] FindClose (in: hFindFile=0x1af3b6b0 | out: hFindFile=0x1af3b6b0) returned 1 [0078.334] SetErrorMode (uMode=0x0) returned 0x1 [0078.334] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\MSInfo\\en-US\\Decrypt Instructions.txt", nBufferLength=0x105, lpBuffer=0x12d240, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\MSInfo\\en-US\\Decrypt Instructions.txt", lpFilePart=0x0) returned 0x54 [0078.334] SetErrorMode (uMode=0x1) returned 0x0 [0078.335] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\MSInfo\\en-US\\Decrypt Instructions.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\msinfo\\en-us\\decrypt instructions.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1f0 [0078.335] SetErrorMode (uMode=0x0) returned 0x1 [0078.335] GetFileType (hFile=0x1f0) returned 0x1 [0078.335] WriteFile (in: hFile=0x1f0, lpBuffer=0x27d9068*, nNumberOfBytesToWrite=0x773, lpNumberOfBytesWritten=0x12d7a8, lpOverlapped=0x0 | out: lpBuffer=0x27d9068*, lpNumberOfBytesWritten=0x12d7a8*=0x773, lpOverlapped=0x0) returned 1 [0078.337] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\MSInfo\\en-US", nBufferLength=0x105, lpBuffer=0x12d430, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\MSInfo\\en-US", lpFilePart=0x0) returned 0x3b [0078.337] SetErrorMode (uMode=0x1) returned 0x0 [0078.337] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\MSInfo\\en-US\\*", lpFindFileData=0x12d5d0 | out: lpFindFileData=0x12d5d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x4ec15a50, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x4ec15a50, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1af3b6b0 [0078.337] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x4ec15a50, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x4ec15a50, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0078.337] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4ec15a50, ftCreationTime.dwHighDateTime=0x1d5e786, ftLastAccessTime.dwLowDateTime=0x4ec15a50, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x4ec15a50, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x773, dwReserved0=0x0, dwReserved1=0x0, cFileName="Decrypt Instructions.txt", cAlternateFileName="DECRYP~1.TXT")) returned 1 [0078.337] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0a09f, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xccb91a1, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xca0a09f, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x6800, dwReserved0=0x0, dwReserved1=0x0, cFileName="msinfo32.exe.mui", cAlternateFileName="")) returned 1 [0078.337] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0a09f, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xccb91a1, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xca0a09f, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x6800, dwReserved0=0x0, dwReserved1=0x0, cFileName="msinfo32.exe.mui", cAlternateFileName="")) returned 0 [0078.337] FindClose (in: hFindFile=0x1af3b6b0 | out: hFindFile=0x1af3b6b0) returned 1 [0078.337] SetErrorMode (uMode=0x0) returned 0x1 [0078.337] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14", nBufferLength=0x105, lpBuffer=0x12d3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14", lpFilePart=0x0) returned 0x37 [0078.338] SetErrorMode (uMode=0x1) returned 0x0 [0078.338] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee282250, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xe5d93940, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xe5d93940, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1af3b6b0 [0078.338] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5a0 | out: lpFindFileData=0x12d5a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee282250, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xe5d93940, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xe5d93940, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0078.338] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5a0 | out: lpFindFileData=0x12d5a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee282250, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xc24d0020, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xc24d0020, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 1 [0078.338] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5a0 | out: lpFindFileData=0x12d5a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x703dbc00, ftCreationTime.dwHighDateTime=0x1cbdfc0, ftLastAccessTime.dwLowDateTime=0xd80a4ee0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x703dbc00, ftLastWriteTime.dwHighDateTime=0x1cbdfc0, nFileSizeHigh=0x0, nFileSizeLow=0x310788, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACECORE.DLL", cAlternateFileName="")) returned 1 [0078.338] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5a0 | out: lpFindFileData=0x12d5a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3706ca00, ftCreationTime.dwHighDateTime=0x1cba5d5, ftLastAccessTime.dwLowDateTime=0xd80f11a0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x3706ca00, ftLastWriteTime.dwHighDateTime=0x1cba5d5, nFileSizeHigh=0x0, nFileSizeLow=0xb5db8, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACEDAO.DLL", cAlternateFileName="")) returned 1 [0078.338] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5a0 | out: lpFindFileData=0x12d5a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x81925f00, ftCreationTime.dwHighDateTime=0x1caca23, ftLastAccessTime.dwLowDateTime=0x51128590, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x81925f00, ftLastWriteTime.dwHighDateTime=0x1caca23, nFileSizeHigh=0x0, nFileSizeLow=0xa990, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACEERR.DLL", cAlternateFileName="")) returned 1 [0078.338] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5a0 | out: lpFindFileData=0x12d5a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3706ca00, ftCreationTime.dwHighDateTime=0x1cba5d5, ftLastAccessTime.dwLowDateTime=0xd8117300, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x3706ca00, ftLastWriteTime.dwHighDateTime=0x1cba5d5, nFileSizeHigh=0x0, nFileSizeLow=0xf73a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACEES.DLL", cAlternateFileName="")) returned 1 [0078.338] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5a0 | out: lpFindFileData=0x12d5a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3706ca00, ftCreationTime.dwHighDateTime=0x1cba5d5, ftLastAccessTime.dwLowDateTime=0xd8117300, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x3706ca00, ftLastWriteTime.dwHighDateTime=0x1cba5d5, nFileSizeHigh=0x0, nFileSizeLow=0x6bfa0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACEEXCH.DLL", cAlternateFileName="")) returned 1 [0078.338] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5a0 | out: lpFindFileData=0x12d5a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3706ca00, ftCreationTime.dwHighDateTime=0x1cba5d5, ftLastAccessTime.dwLowDateTime=0xd813d460, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x3706ca00, ftLastWriteTime.dwHighDateTime=0x1cba5d5, nFileSizeHigh=0x0, nFileSizeLow=0xdbb98, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACEEXCL.DLL", cAlternateFileName="")) returned 1 [0078.338] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5a0 | out: lpFindFileData=0x12d5a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x95c9c200, ftCreationTime.dwHighDateTime=0x1cba070, ftLastAccessTime.dwLowDateTime=0xd813d460, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x95c9c200, ftLastWriteTime.dwHighDateTime=0x1cba070, nFileSizeHigh=0x0, nFileSizeLow=0x53bb0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACEODBC.DLL", cAlternateFileName="")) returned 1 [0078.339] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5a0 | out: lpFindFileData=0x12d5a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77357e00, ftCreationTime.dwHighDateTime=0x1cac9ad, ftLastAccessTime.dwLowDateTime=0x51128590, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77357e00, ftLastWriteTime.dwHighDateTime=0x1cac9ad, nFileSizeHigh=0x0, nFileSizeLow=0x3db8, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACEODDBS.DLL", cAlternateFileName="")) returned 1 [0078.339] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5a0 | out: lpFindFileData=0x12d5a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77357e00, ftCreationTime.dwHighDateTime=0x1cac9ad, ftLastAccessTime.dwLowDateTime=0x5e99f630, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77357e00, ftLastWriteTime.dwHighDateTime=0x1cac9ad, nFileSizeHigh=0x0, nFileSizeLow=0x3db8, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACEODEXL.DLL", cAlternateFileName="")) returned 1 [0078.339] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5a0 | out: lpFindFileData=0x12d5a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77357e00, ftCreationTime.dwHighDateTime=0x1cac9ad, ftLastAccessTime.dwLowDateTime=0x5e99f630, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77357e00, ftLastWriteTime.dwHighDateTime=0x1cac9ad, nFileSizeHigh=0x0, nFileSizeLow=0x3db8, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACEODTXT.DLL", cAlternateFileName="")) returned 1 [0078.339] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5a0 | out: lpFindFileData=0x12d5a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3706ca00, ftCreationTime.dwHighDateTime=0x1cba5d5, ftLastAccessTime.dwLowDateTime=0xd8189720, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x3706ca00, ftLastWriteTime.dwHighDateTime=0x1cba5d5, nFileSizeHigh=0x0, nFileSizeLow=0x833a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACEOLEDB.DLL", cAlternateFileName="")) returned 1 [0078.339] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5a0 | out: lpFindFileData=0x12d5a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96faef00, ftCreationTime.dwHighDateTime=0x1cba070, ftLastAccessTime.dwLowDateTime=0xd8247e00, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x96faef00, ftLastWriteTime.dwHighDateTime=0x1cba070, nFileSizeHigh=0x0, nFileSizeLow=0x6e398, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACER3X.DLL", cAlternateFileName="")) returned 1 [0078.339] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5a0 | out: lpFindFileData=0x12d5a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x95c9c200, ftCreationTime.dwHighDateTime=0x1cba070, ftLastAccessTime.dwLowDateTime=0xd826df60, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x95c9c200, ftLastWriteTime.dwHighDateTime=0x1cba070, nFileSizeHigh=0x0, nFileSizeLow=0xd9c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACERCLR.DLL", cAlternateFileName="")) returned 1 [0078.339] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5a0 | out: lpFindFileData=0x12d5a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x35d59d00, ftCreationTime.dwHighDateTime=0x1cba5d5, ftLastAccessTime.dwLowDateTime=0xd826df60, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x35d59d00, ftLastWriteTime.dwHighDateTime=0x1cba5d5, nFileSizeHigh=0x0, nFileSizeLow=0xa8da0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACEREP.DLL", cAlternateFileName="")) returned 1 [0078.339] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5a0 | out: lpFindFileData=0x12d5a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x35d59d00, ftCreationTime.dwHighDateTime=0x1cba5d5, ftLastAccessTime.dwLowDateTime=0xd82940c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x35d59d00, ftLastWriteTime.dwHighDateTime=0x1cba5d5, nFileSizeHigh=0x0, nFileSizeLow=0x48990, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACETXT.DLL", cAlternateFileName="")) returned 1 [0078.339] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5a0 | out: lpFindFileData=0x12d5a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1092c00, ftCreationTime.dwHighDateTime=0x1cb71c7, ftLastAccessTime.dwLowDateTime=0xd82ba220, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x1092c00, ftLastWriteTime.dwHighDateTime=0x1cb71c7, nFileSizeHigh=0x0, nFileSizeLow=0x2e8da0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACEWDAT.DLL", cAlternateFileName="")) returned 1 [0078.339] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5a0 | out: lpFindFileData=0x12d5a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e0c9f00, ftCreationTime.dwHighDateTime=0x1cba5d5, ftLastAccessTime.dwLowDateTime=0xcf0c7d40, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x8e0c9f00, ftLastWriteTime.dwHighDateTime=0x1cba5d5, nFileSizeHigh=0x0, nFileSizeLow=0x4dba0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACEWSS.DLL", cAlternateFileName="")) returned 1 [0078.339] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5a0 | out: lpFindFileData=0x12d5a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x35d59d00, ftCreationTime.dwHighDateTime=0x1cba5d5, ftLastAccessTime.dwLowDateTime=0xd82e0380, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x35d59d00, ftLastWriteTime.dwHighDateTime=0x1cba5d5, nFileSizeHigh=0x0, nFileSizeLow=0x7a998, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACEXBE.DLL", cAlternateFileName="")) returned 1 [0078.339] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5a0 | out: lpFindFileData=0x12d5a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67c38700, ftCreationTime.dwHighDateTime=0x1cbc9fc, ftLastAccessTime.dwLowDateTime=0xe5d21520, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x67c38700, ftLastWriteTime.dwHighDateTime=0x1cbc9fc, nFileSizeHigh=0x0, nFileSizeLow=0x5e158, dwReserved0=0x0, dwReserved1=0x0, cFileName="ATLCONV.DLL", cAlternateFileName="")) returned 1 [0078.339] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5a0 | out: lpFindFileData=0x12d5a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb10f7500, ftCreationTime.dwHighDateTime=0x1cbe56c, ftLastAccessTime.dwLowDateTime=0xda5b0540, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xb10f7500, ftLastWriteTime.dwHighDateTime=0x1cbe56c, nFileSizeHigh=0x0, nFileSizeLow=0x4d67b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Csi.dll", cAlternateFileName="")) returned 1 [0078.339] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5a0 | out: lpFindFileData=0x12d5a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef87d800, ftCreationTime.dwHighDateTime=0x1cb8cce, ftLastAccessTime.dwLowDateTime=0xda5d66a0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xef87d800, ftLastWriteTime.dwHighDateTime=0x1cb8cce, nFileSizeHigh=0x0, nFileSizeLow=0x1b3980, dwReserved0=0x0, dwReserved1=0x0, cFileName="CsiSoap.dll", cAlternateFileName="")) returned 1 [0078.339] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5a0 | out: lpFindFileData=0x12d5a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xceefecc0, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xceefecc0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xceefecc0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Cultures", cAlternateFileName="")) returned 1 [0078.339] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5a0 | out: lpFindFileData=0x12d5a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x520efa00, ftCreationTime.dwHighDateTime=0x1cbc41d, ftLastAccessTime.dwLowDateTime=0xd83064e0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x520efa00, ftLastWriteTime.dwHighDateTime=0x1cbc41d, nFileSizeHigh=0x0, nFileSizeLow=0x7eb48, dwReserved0=0x0, dwReserved1=0x0, cFileName="EXPSRV.DLL", cAlternateFileName="")) returned 1 [0078.340] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5a0 | out: lpFindFileData=0x12d5a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3ebd7300, ftCreationTime.dwHighDateTime=0x1cba5c3, ftLastAccessTime.dwLowDateTime=0xcef710e0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x3ebd7300, ftLastWriteTime.dwHighDateTime=0x1cba5c3, nFileSizeHigh=0x0, nFileSizeLow=0x21d78, dwReserved0=0x0, dwReserved1=0x0, cFileName="EXP_PDF.DLL", cAlternateFileName="")) returned 1 [0078.340] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5a0 | out: lpFindFileData=0x12d5a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf5bf6900, ftCreationTime.dwHighDateTime=0x1cba06e, ftLastAccessTime.dwLowDateTime=0xcf5b0aa0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xf5bf6900, ftLastWriteTime.dwHighDateTime=0x1cba06e, nFileSizeHigh=0x0, nFileSizeLow=0x11578, dwReserved0=0x0, dwReserved1=0x0, cFileName="EXP_XPS.DLL", cAlternateFileName="")) returned 1 [0078.340] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5a0 | out: lpFindFileData=0x12d5a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd66e7600, ftCreationTime.dwHighDateTime=0x1cb7002, ftLastAccessTime.dwLowDateTime=0xe572de20, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xd66e7600, ftLastWriteTime.dwHighDateTime=0x1cb7002, nFileSizeHigh=0x0, nFileSizeLow=0x26560, dwReserved0=0x0, dwReserved1=0x0, cFileName="FLTLDR.EXE", cAlternateFileName="")) returned 1 [0078.340] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5a0 | out: lpFindFileData=0x12d5a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf7bf3f00, ftCreationTime.dwHighDateTime=0x1ca911f, ftLastAccessTime.dwLowDateTime=0x53907610, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf7bf3f00, ftLastWriteTime.dwHighDateTime=0x1ca911f, nFileSizeHigh=0x0, nFileSizeLow=0x417360, dwReserved0=0x0, dwReserved1=0x0, cFileName="IACOM2.DLL", cAlternateFileName="")) returned 1 [0078.340] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5a0 | out: lpFindFileData=0x12d5a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe164800, ftCreationTime.dwHighDateTime=0x1cac048, ftLastAccessTime.dwLowDateTime=0x6626d2b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe164800, ftLastWriteTime.dwHighDateTime=0x1cac048, nFileSizeHigh=0x0, nFileSizeLow=0x31d88, dwReserved0=0x0, dwReserved1=0x0, cFileName="LICLUA.EXE", cAlternateFileName="")) returned 1 [0078.340] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5a0 | out: lpFindFileData=0x12d5a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc821f600, ftCreationTime.dwHighDateTime=0x1cbdfb3, ftLastAccessTime.dwLowDateTime=0xd776b9a0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xc821f600, ftLastWriteTime.dwHighDateTime=0x1cbdfb3, nFileSizeHigh=0x0, nFileSizeLow=0x183d780, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSO.DLL", cAlternateFileName="")) returned 1 [0078.340] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5a0 | out: lpFindFileData=0x12d5a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee94c400, ftCreationTime.dwHighDateTime=0x1cb7007, ftLastAccessTime.dwLowDateTime=0xd6225500, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xee94c400, ftLastWriteTime.dwHighDateTime=0x1cb7007, nFileSizeHigh=0x0, nFileSizeLow=0x73b60, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOICONS.EXE", cAlternateFileName="")) returned 1 [0078.340] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5a0 | out: lpFindFileData=0x12d5a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe5e15000, ftCreationTime.dwHighDateTime=0x1cbf3e5, ftLastAccessTime.dwLowDateTime=0xec32f3e0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xe5e15000, ftLastWriteTime.dwHighDateTime=0x1cbf3e5, nFileSizeHigh=0x0, nFileSizeLow=0x4529780, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSORES.DLL", cAlternateFileName="")) returned 1 [0078.340] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5a0 | out: lpFindFileData=0x12d5a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa4293d00, ftCreationTime.dwHighDateTime=0x1cbc468, ftLastAccessTime.dwLowDateTime=0xd77dddc0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xa4293d00, ftLastWriteTime.dwHighDateTime=0x1cbc468, nFileSizeHigh=0x0, nFileSizeLow=0x135f90, dwReserved0=0x0, dwReserved1=0x0, cFileName="msoshext.dll", cAlternateFileName="")) returned 1 [0078.340] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5a0 | out: lpFindFileData=0x12d5a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc276d800, ftCreationTime.dwHighDateTime=0x1cab8aa, ftLastAccessTime.dwLowDateTime=0x6a050eb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc276d800, ftLastWriteTime.dwHighDateTime=0x1cab8aa, nFileSizeHigh=0x0, nFileSizeLow=0xdb50, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOXEV.DLL", cAlternateFileName="")) returned 1 [0078.340] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5a0 | out: lpFindFileData=0x12d5a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x553f4600, ftCreationTime.dwHighDateTime=0x1cab7c9, ftLastAccessTime.dwLowDateTime=0x593ede30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x553f4600, ftLastWriteTime.dwHighDateTime=0x1cab7c9, nFileSizeHigh=0x0, nFileSizeLow=0x1d950, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOXMLED.EXE", cAlternateFileName="")) returned 1 [0078.340] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5a0 | out: lpFindFileData=0x12d5a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x553f4600, ftCreationTime.dwHighDateTime=0x1cab7c9, ftLastAccessTime.dwLowDateTime=0x593ede30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x553f4600, ftLastWriteTime.dwHighDateTime=0x1cab7c9, nFileSizeHigh=0x0, nFileSizeLow=0xdb80, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOXMLMF.DLL", cAlternateFileName="")) returned 1 [0078.340] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5a0 | out: lpFindFileData=0x12d5a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf3922200, ftCreationTime.dwHighDateTime=0x1ca911d, ftLastAccessTime.dwLowDateTime=0x59413f90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf3922200, ftLastWriteTime.dwHighDateTime=0x1ca911d, nFileSizeHigh=0x0, nFileSizeLow=0x124980, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSPTLS.DLL", cAlternateFileName="")) returned 1 [0078.340] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5a0 | out: lpFindFileData=0x12d5a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x15d97a00, ftCreationTime.dwHighDateTime=0x1caa6a1, ftLastAccessTime.dwLowDateTime=0x6a1819b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x15d97a00, ftLastWriteTime.dwHighDateTime=0x1caa6a1, nFileSizeHigh=0x0, nFileSizeLow=0xac370, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSSOAP30.DLL", cAlternateFileName="")) returned 1 [0078.340] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5a0 | out: lpFindFileData=0x12d5a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8054ff00, ftCreationTime.dwHighDateTime=0x1cb7011, ftLastAccessTime.dwLowDateTime=0xcf459e40, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x8054ff00, ftLastWriteTime.dwHighDateTime=0x1cb7011, nFileSizeHigh=0x0, nFileSizeLow=0x1a5b, dwReserved0=0x0, dwReserved1=0x0, cFileName="MUAUTH.CAB", cAlternateFileName="")) returned 1 [0078.340] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5a0 | out: lpFindFileData=0x12d5a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8054ff00, ftCreationTime.dwHighDateTime=0x1cb7011, ftLastAccessTime.dwLowDateTime=0xcf47ffa0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x8054ff00, ftLastWriteTime.dwHighDateTime=0x1cb7011, nFileSizeHigh=0x0, nFileSizeLow=0x6190, dwReserved0=0x0, dwReserved1=0x0, cFileName="MUOPTIN.DLL", cAlternateFileName="")) returned 1 [0078.341] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5a0 | out: lpFindFileData=0x12d5a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x161d5800, ftCreationTime.dwHighDateTime=0x1cbd856, ftLastAccessTime.dwLowDateTime=0xd63a22c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x161d5800, ftLastWriteTime.dwHighDateTime=0x1cbd856, nFileSizeHigh=0x0, nFileSizeLow=0x38d88, dwReserved0=0x0, dwReserved1=0x0, cFileName="Oarpmany.exe", cAlternateFileName="")) returned 1 [0078.341] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5a0 | out: lpFindFileData=0x12d5a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f9d2900, ftCreationTime.dwHighDateTime=0x1cab9ac, ftLastAccessTime.dwLowDateTime=0xbe0f9da0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x7f9d2900, ftLastWriteTime.dwHighDateTime=0x1cab9ac, nFileSizeHigh=0x0, nFileSizeLow=0x7568, dwReserved0=0x0, dwReserved1=0x0, cFileName="ODBCMON.DLL", cAlternateFileName="")) returned 1 [0078.341] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5a0 | out: lpFindFileData=0x12d5a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee2ce510, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xbe974c00, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xbe974c00, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office Setup Controller", cAlternateFileName="OFFICE~1")) returned 1 [0078.341] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5a0 | out: lpFindFileData=0x12d5a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5de00200, ftCreationTime.dwHighDateTime=0x1cac9ac, ftLastAccessTime.dwLowDateTime=0x6bc953f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5de00200, ftLastWriteTime.dwHighDateTime=0x1cac9ac, nFileSizeHigh=0x0, nFileSizeLow=0x2560, dwReserved0=0x0, dwReserved1=0x0, cFileName="OFFREL.DLL", cAlternateFileName="")) returned 1 [0078.341] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5a0 | out: lpFindFileData=0x12d5a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5de00200, ftCreationTime.dwHighDateTime=0x1cac9ac, ftLastAccessTime.dwLowDateTime=0x6c2166d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5de00200, ftLastWriteTime.dwHighDateTime=0x1cac9ac, nFileSizeHigh=0x0, nFileSizeLow=0x4d88, dwReserved0=0x0, dwReserved1=0x0, cFileName="OPHPROXY.DLL", cAlternateFileName="")) returned 1 [0078.341] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5a0 | out: lpFindFileData=0x12d5a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf6a43200, ftCreationTime.dwHighDateTime=0x1cb700e, ftLastAccessTime.dwLowDateTime=0xcf47ffa0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xf6a43200, ftLastWriteTime.dwHighDateTime=0x1cb700e, nFileSizeHigh=0x0, nFileSizeLow=0x47a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="OPTINPS.DLL", cAlternateFileName="")) returned 1 [0078.341] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5a0 | out: lpFindFileData=0x12d5a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1570ec00, ftCreationTime.dwHighDateTime=0x1cbc479, ftLastAccessTime.dwLowDateTime=0xe5d21520, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x1570ec00, ftLastWriteTime.dwHighDateTime=0x1cbc479, nFileSizeHigh=0x0, nFileSizeLow=0xb7ba8, dwReserved0=0x0, dwReserved1=0x0, cFileName="PJ11OD11.DLL", cAlternateFileName="")) returned 1 [0078.341] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5a0 | out: lpFindFileData=0x12d5a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9a461000, ftCreationTime.dwHighDateTime=0x1cb7018, ftLastAccessTime.dwLowDateTime=0xe5d47680, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x9a461000, ftLastWriteTime.dwHighDateTime=0x1cb7018, nFileSizeHigh=0x0, nFileSizeLow=0x3fb90, dwReserved0=0x0, dwReserved1=0x0, cFileName="PJRESC.DLL", cAlternateFileName="")) returned 1 [0078.341] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5a0 | out: lpFindFileData=0x12d5a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74bd800, ftCreationTime.dwHighDateTime=0x1cb71c8, ftLastAccessTime.dwLowDateTime=0xe5d93940, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x74bd800, ftLastWriteTime.dwHighDateTime=0x1cb71c8, nFileSizeHigh=0x0, nFileSizeLow=0x3c2b90, dwReserved0=0x0, dwReserved1=0x0, cFileName="PRJRES.DLL", cAlternateFileName="")) returned 1 [0078.341] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5a0 | out: lpFindFileData=0x12d5a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4a199a00, ftCreationTime.dwHighDateTime=0x1cba5d5, ftLastAccessTime.dwLowDateTime=0xdac16060, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x4a199a00, ftLastWriteTime.dwHighDateTime=0x1cba5d5, nFileSizeHigh=0x0, nFileSizeLow=0x1c8b68, dwReserved0=0x0, dwReserved1=0x0, cFileName="RICHED20.DLL", cAlternateFileName="")) returned 1 [0078.341] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5a0 | out: lpFindFileData=0x12d5a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7339ac00, ftCreationTime.dwHighDateTime=0x1cbdfc2, ftLastAccessTime.dwLowDateTime=0xe5d93940, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x7339ac00, ftLastWriteTime.dwHighDateTime=0x1cbdfc2, nFileSizeHigh=0x0, nFileSizeLow=0x90778, dwReserved0=0x0, dwReserved1=0x0, cFileName="SERCONV.DLL", cAlternateFileName="")) returned 1 [0078.341] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5a0 | out: lpFindFileData=0x12d5a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xded68100, ftCreationTime.dwHighDateTime=0x1cb5970, ftLastAccessTime.dwLowDateTime=0xd68d72e0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xded68100, ftLastWriteTime.dwHighDateTime=0x1cb5970, nFileSizeHigh=0x0, nFileSizeLow=0xc6b00, dwReserved0=0x0, dwReserved1=0x0, cFileName="USP10.DLL", cAlternateFileName="")) returned 1 [0078.341] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5a0 | out: lpFindFileData=0x12d5a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x520efa00, ftCreationTime.dwHighDateTime=0x1cbc41d, ftLastAccessTime.dwLowDateTime=0xd83064e0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x520efa00, ftLastWriteTime.dwHighDateTime=0x1cbc41d, nFileSizeHigh=0x0, nFileSizeLow=0xc150, dwReserved0=0x0, dwReserved1=0x0, cFileName="VBAJET32.DLL", cAlternateFileName="")) returned 1 [0078.341] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5a0 | out: lpFindFileData=0x12d5a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x14a84d00, ftCreationTime.dwHighDateTime=0x1caa6a1, ftLastAccessTime.dwLowDateTime=0x5e5e73d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x14a84d00, ftLastWriteTime.dwHighDateTime=0x1caa6a1, nFileSizeHigh=0x0, nFileSizeLow=0x23f90, dwReserved0=0x0, dwReserved1=0x0, cFileName="WISC30.DLL", cAlternateFileName="")) returned 1 [0078.341] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5a0 | out: lpFindFileData=0x12d5a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x14a84d00, ftCreationTime.dwHighDateTime=0x1caa6a1, ftLastAccessTime.dwLowDateTime=0x5e5e73d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x14a84d00, ftLastWriteTime.dwHighDateTime=0x1caa6a1, nFileSizeHigh=0x0, nFileSizeLow=0x23f90, dwReserved0=0x0, dwReserved1=0x0, cFileName="WISC30.DLL", cAlternateFileName="")) returned 0 [0078.341] FindClose (in: hFindFile=0x1af3b6b0 | out: hFindFile=0x1af3b6b0) returned 1 [0078.342] SetErrorMode (uMode=0x0) returned 0x1 [0079.803] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Decrypt Instructions.txt", nBufferLength=0x105, lpBuffer=0x12d2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Decrypt Instructions.txt", lpFilePart=0x0) returned 0x50 [0079.803] SetErrorMode (uMode=0x1) returned 0x0 [0079.803] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Decrypt Instructions.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\decrypt instructions.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1f0 [0079.843] SetErrorMode (uMode=0x0) returned 0x1 [0079.844] GetFileType (hFile=0x1f0) returned 0x1 [0079.844] WriteFile (in: hFile=0x1f0, lpBuffer=0x27e4140*, nNumberOfBytesToWrite=0x773, lpNumberOfBytesWritten=0x12d808, lpOverlapped=0x0 | out: lpBuffer=0x27e4140*, lpNumberOfBytesWritten=0x12d808*=0x773, lpOverlapped=0x0) returned 1 [0079.847] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14", nBufferLength=0x105, lpBuffer=0x12d490, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14", lpFilePart=0x0) returned 0x37 [0079.847] SetErrorMode (uMode=0x1) returned 0x0 [0079.847] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\*", lpFindFileData=0x12d630 | out: lpFindFileData=0x12d630*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee282250, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x4fa83fb0, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x4fa83fb0, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1af3b6b0 [0079.847] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d640 | out: lpFindFileData=0x12d640*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee282250, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x4fa83fb0, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x4fa83fb0, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0079.847] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d640 | out: lpFindFileData=0x12d640*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee282250, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xc24d0020, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xc24d0020, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 1 [0079.847] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d640 | out: lpFindFileData=0x12d640*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x703dbc00, ftCreationTime.dwHighDateTime=0x1cbdfc0, ftLastAccessTime.dwLowDateTime=0xd80a4ee0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x703dbc00, ftLastWriteTime.dwHighDateTime=0x1cbdfc0, nFileSizeHigh=0x0, nFileSizeLow=0x310788, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACECORE.DLL", cAlternateFileName="")) returned 1 [0079.847] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d640 | out: lpFindFileData=0x12d640*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3706ca00, ftCreationTime.dwHighDateTime=0x1cba5d5, ftLastAccessTime.dwLowDateTime=0xd80f11a0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x3706ca00, ftLastWriteTime.dwHighDateTime=0x1cba5d5, nFileSizeHigh=0x0, nFileSizeLow=0xb5db8, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACEDAO.DLL", cAlternateFileName="")) returned 1 [0079.848] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d640 | out: lpFindFileData=0x12d640*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x81925f00, ftCreationTime.dwHighDateTime=0x1caca23, ftLastAccessTime.dwLowDateTime=0x51128590, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x81925f00, ftLastWriteTime.dwHighDateTime=0x1caca23, nFileSizeHigh=0x0, nFileSizeLow=0xa990, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACEERR.DLL", cAlternateFileName="")) returned 1 [0079.848] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d640 | out: lpFindFileData=0x12d640*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3706ca00, ftCreationTime.dwHighDateTime=0x1cba5d5, ftLastAccessTime.dwLowDateTime=0xd8117300, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x3706ca00, ftLastWriteTime.dwHighDateTime=0x1cba5d5, nFileSizeHigh=0x0, nFileSizeLow=0xf73a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACEES.DLL", cAlternateFileName="")) returned 1 [0079.848] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d640 | out: lpFindFileData=0x12d640*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3706ca00, ftCreationTime.dwHighDateTime=0x1cba5d5, ftLastAccessTime.dwLowDateTime=0xd8117300, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x3706ca00, ftLastWriteTime.dwHighDateTime=0x1cba5d5, nFileSizeHigh=0x0, nFileSizeLow=0x6bfa0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACEEXCH.DLL", cAlternateFileName="")) returned 1 [0079.848] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d640 | out: lpFindFileData=0x12d640*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3706ca00, ftCreationTime.dwHighDateTime=0x1cba5d5, ftLastAccessTime.dwLowDateTime=0xd813d460, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x3706ca00, ftLastWriteTime.dwHighDateTime=0x1cba5d5, nFileSizeHigh=0x0, nFileSizeLow=0xdbb98, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACEEXCL.DLL", cAlternateFileName="")) returned 1 [0079.848] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d640 | out: lpFindFileData=0x12d640*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x95c9c200, ftCreationTime.dwHighDateTime=0x1cba070, ftLastAccessTime.dwLowDateTime=0xd813d460, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x95c9c200, ftLastWriteTime.dwHighDateTime=0x1cba070, nFileSizeHigh=0x0, nFileSizeLow=0x53bb0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACEODBC.DLL", cAlternateFileName="")) returned 1 [0079.848] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d640 | out: lpFindFileData=0x12d640*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77357e00, ftCreationTime.dwHighDateTime=0x1cac9ad, ftLastAccessTime.dwLowDateTime=0x51128590, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77357e00, ftLastWriteTime.dwHighDateTime=0x1cac9ad, nFileSizeHigh=0x0, nFileSizeLow=0x3db8, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACEODDBS.DLL", cAlternateFileName="")) returned 1 [0079.848] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d640 | out: lpFindFileData=0x12d640*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77357e00, ftCreationTime.dwHighDateTime=0x1cac9ad, ftLastAccessTime.dwLowDateTime=0x5e99f630, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77357e00, ftLastWriteTime.dwHighDateTime=0x1cac9ad, nFileSizeHigh=0x0, nFileSizeLow=0x3db8, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACEODEXL.DLL", cAlternateFileName="")) returned 1 [0079.848] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d640 | out: lpFindFileData=0x12d640*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77357e00, ftCreationTime.dwHighDateTime=0x1cac9ad, ftLastAccessTime.dwLowDateTime=0x5e99f630, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77357e00, ftLastWriteTime.dwHighDateTime=0x1cac9ad, nFileSizeHigh=0x0, nFileSizeLow=0x3db8, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACEODTXT.DLL", cAlternateFileName="")) returned 1 [0079.848] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d640 | out: lpFindFileData=0x12d640*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3706ca00, ftCreationTime.dwHighDateTime=0x1cba5d5, ftLastAccessTime.dwLowDateTime=0xd8189720, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x3706ca00, ftLastWriteTime.dwHighDateTime=0x1cba5d5, nFileSizeHigh=0x0, nFileSizeLow=0x833a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACEOLEDB.DLL", cAlternateFileName="")) returned 1 [0079.848] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d640 | out: lpFindFileData=0x12d640*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96faef00, ftCreationTime.dwHighDateTime=0x1cba070, ftLastAccessTime.dwLowDateTime=0xd8247e00, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x96faef00, ftLastWriteTime.dwHighDateTime=0x1cba070, nFileSizeHigh=0x0, nFileSizeLow=0x6e398, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACER3X.DLL", cAlternateFileName="")) returned 1 [0079.848] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d640 | out: lpFindFileData=0x12d640*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x95c9c200, ftCreationTime.dwHighDateTime=0x1cba070, ftLastAccessTime.dwLowDateTime=0xd826df60, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x95c9c200, ftLastWriteTime.dwHighDateTime=0x1cba070, nFileSizeHigh=0x0, nFileSizeLow=0xd9c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACERCLR.DLL", cAlternateFileName="")) returned 1 [0079.848] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d640 | out: lpFindFileData=0x12d640*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x35d59d00, ftCreationTime.dwHighDateTime=0x1cba5d5, ftLastAccessTime.dwLowDateTime=0xd826df60, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x35d59d00, ftLastWriteTime.dwHighDateTime=0x1cba5d5, nFileSizeHigh=0x0, nFileSizeLow=0xa8da0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACEREP.DLL", cAlternateFileName="")) returned 1 [0079.849] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d640 | out: lpFindFileData=0x12d640*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x35d59d00, ftCreationTime.dwHighDateTime=0x1cba5d5, ftLastAccessTime.dwLowDateTime=0xd82940c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x35d59d00, ftLastWriteTime.dwHighDateTime=0x1cba5d5, nFileSizeHigh=0x0, nFileSizeLow=0x48990, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACETXT.DLL", cAlternateFileName="")) returned 1 [0079.849] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d640 | out: lpFindFileData=0x12d640*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1092c00, ftCreationTime.dwHighDateTime=0x1cb71c7, ftLastAccessTime.dwLowDateTime=0xd82ba220, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x1092c00, ftLastWriteTime.dwHighDateTime=0x1cb71c7, nFileSizeHigh=0x0, nFileSizeLow=0x2e8da0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACEWDAT.DLL", cAlternateFileName="")) returned 1 [0079.849] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d640 | out: lpFindFileData=0x12d640*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e0c9f00, ftCreationTime.dwHighDateTime=0x1cba5d5, ftLastAccessTime.dwLowDateTime=0xcf0c7d40, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x8e0c9f00, ftLastWriteTime.dwHighDateTime=0x1cba5d5, nFileSizeHigh=0x0, nFileSizeLow=0x4dba0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACEWSS.DLL", cAlternateFileName="")) returned 1 [0079.849] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d640 | out: lpFindFileData=0x12d640*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x35d59d00, ftCreationTime.dwHighDateTime=0x1cba5d5, ftLastAccessTime.dwLowDateTime=0xd82e0380, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x35d59d00, ftLastWriteTime.dwHighDateTime=0x1cba5d5, nFileSizeHigh=0x0, nFileSizeLow=0x7a998, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACEXBE.DLL", cAlternateFileName="")) returned 1 [0079.849] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d640 | out: lpFindFileData=0x12d640*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67c38700, ftCreationTime.dwHighDateTime=0x1cbc9fc, ftLastAccessTime.dwLowDateTime=0xe5d21520, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x67c38700, ftLastWriteTime.dwHighDateTime=0x1cbc9fc, nFileSizeHigh=0x0, nFileSizeLow=0x5e158, dwReserved0=0x0, dwReserved1=0x0, cFileName="ATLCONV.DLL", cAlternateFileName="")) returned 1 [0079.849] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d640 | out: lpFindFileData=0x12d640*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb10f7500, ftCreationTime.dwHighDateTime=0x1cbe56c, ftLastAccessTime.dwLowDateTime=0xda5b0540, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xb10f7500, ftLastWriteTime.dwHighDateTime=0x1cbe56c, nFileSizeHigh=0x0, nFileSizeLow=0x4d67b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Csi.dll", cAlternateFileName="")) returned 1 [0079.849] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d640 | out: lpFindFileData=0x12d640*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef87d800, ftCreationTime.dwHighDateTime=0x1cb8cce, ftLastAccessTime.dwLowDateTime=0xda5d66a0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xef87d800, ftLastWriteTime.dwHighDateTime=0x1cb8cce, nFileSizeHigh=0x0, nFileSizeLow=0x1b3980, dwReserved0=0x0, dwReserved1=0x0, cFileName="CsiSoap.dll", cAlternateFileName="")) returned 1 [0079.849] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d640 | out: lpFindFileData=0x12d640*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xceefecc0, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xceefecc0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xceefecc0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Cultures", cAlternateFileName="")) returned 1 [0079.849] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d640 | out: lpFindFileData=0x12d640*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4fa83fb0, ftCreationTime.dwHighDateTime=0x1d5e786, ftLastAccessTime.dwLowDateTime=0x4fa83fb0, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x4fa83fb0, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x773, dwReserved0=0x0, dwReserved1=0x0, cFileName="Decrypt Instructions.txt", cAlternateFileName="DECRYP~1.TXT")) returned 1 [0079.849] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d640 | out: lpFindFileData=0x12d640*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x520efa00, ftCreationTime.dwHighDateTime=0x1cbc41d, ftLastAccessTime.dwLowDateTime=0xd83064e0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x520efa00, ftLastWriteTime.dwHighDateTime=0x1cbc41d, nFileSizeHigh=0x0, nFileSizeLow=0x7eb48, dwReserved0=0x0, dwReserved1=0x0, cFileName="EXPSRV.DLL", cAlternateFileName="")) returned 1 [0079.849] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d640 | out: lpFindFileData=0x12d640*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3ebd7300, ftCreationTime.dwHighDateTime=0x1cba5c3, ftLastAccessTime.dwLowDateTime=0xcef710e0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x3ebd7300, ftLastWriteTime.dwHighDateTime=0x1cba5c3, nFileSizeHigh=0x0, nFileSizeLow=0x21d78, dwReserved0=0x0, dwReserved1=0x0, cFileName="EXP_PDF.DLL", cAlternateFileName="")) returned 1 [0079.849] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d640 | out: lpFindFileData=0x12d640*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf5bf6900, ftCreationTime.dwHighDateTime=0x1cba06e, ftLastAccessTime.dwLowDateTime=0xcf5b0aa0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xf5bf6900, ftLastWriteTime.dwHighDateTime=0x1cba06e, nFileSizeHigh=0x0, nFileSizeLow=0x11578, dwReserved0=0x0, dwReserved1=0x0, cFileName="EXP_XPS.DLL", cAlternateFileName="")) returned 1 [0079.849] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d640 | out: lpFindFileData=0x12d640*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd66e7600, ftCreationTime.dwHighDateTime=0x1cb7002, ftLastAccessTime.dwLowDateTime=0xe572de20, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xd66e7600, ftLastWriteTime.dwHighDateTime=0x1cb7002, nFileSizeHigh=0x0, nFileSizeLow=0x26560, dwReserved0=0x0, dwReserved1=0x0, cFileName="FLTLDR.EXE", cAlternateFileName="")) returned 1 [0079.849] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d640 | out: lpFindFileData=0x12d640*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf7bf3f00, ftCreationTime.dwHighDateTime=0x1ca911f, ftLastAccessTime.dwLowDateTime=0x53907610, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf7bf3f00, ftLastWriteTime.dwHighDateTime=0x1ca911f, nFileSizeHigh=0x0, nFileSizeLow=0x417360, dwReserved0=0x0, dwReserved1=0x0, cFileName="IACOM2.DLL", cAlternateFileName="")) returned 1 [0079.849] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d640 | out: lpFindFileData=0x12d640*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe164800, ftCreationTime.dwHighDateTime=0x1cac048, ftLastAccessTime.dwLowDateTime=0x6626d2b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe164800, ftLastWriteTime.dwHighDateTime=0x1cac048, nFileSizeHigh=0x0, nFileSizeLow=0x31d88, dwReserved0=0x0, dwReserved1=0x0, cFileName="LICLUA.EXE", cAlternateFileName="")) returned 1 [0079.849] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d640 | out: lpFindFileData=0x12d640*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc821f600, ftCreationTime.dwHighDateTime=0x1cbdfb3, ftLastAccessTime.dwLowDateTime=0xd776b9a0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xc821f600, ftLastWriteTime.dwHighDateTime=0x1cbdfb3, nFileSizeHigh=0x0, nFileSizeLow=0x183d780, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSO.DLL", cAlternateFileName="")) returned 1 [0079.850] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d640 | out: lpFindFileData=0x12d640*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee94c400, ftCreationTime.dwHighDateTime=0x1cb7007, ftLastAccessTime.dwLowDateTime=0xd6225500, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xee94c400, ftLastWriteTime.dwHighDateTime=0x1cb7007, nFileSizeHigh=0x0, nFileSizeLow=0x73b60, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOICONS.EXE", cAlternateFileName="")) returned 1 [0079.850] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d640 | out: lpFindFileData=0x12d640*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe5e15000, ftCreationTime.dwHighDateTime=0x1cbf3e5, ftLastAccessTime.dwLowDateTime=0xec32f3e0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xe5e15000, ftLastWriteTime.dwHighDateTime=0x1cbf3e5, nFileSizeHigh=0x0, nFileSizeLow=0x4529780, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSORES.DLL", cAlternateFileName="")) returned 1 [0079.850] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d640 | out: lpFindFileData=0x12d640*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa4293d00, ftCreationTime.dwHighDateTime=0x1cbc468, ftLastAccessTime.dwLowDateTime=0xd77dddc0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xa4293d00, ftLastWriteTime.dwHighDateTime=0x1cbc468, nFileSizeHigh=0x0, nFileSizeLow=0x135f90, dwReserved0=0x0, dwReserved1=0x0, cFileName="msoshext.dll", cAlternateFileName="")) returned 1 [0079.850] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d640 | out: lpFindFileData=0x12d640*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc276d800, ftCreationTime.dwHighDateTime=0x1cab8aa, ftLastAccessTime.dwLowDateTime=0x6a050eb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc276d800, ftLastWriteTime.dwHighDateTime=0x1cab8aa, nFileSizeHigh=0x0, nFileSizeLow=0xdb50, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOXEV.DLL", cAlternateFileName="")) returned 1 [0079.850] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d640 | out: lpFindFileData=0x12d640*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x553f4600, ftCreationTime.dwHighDateTime=0x1cab7c9, ftLastAccessTime.dwLowDateTime=0x593ede30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x553f4600, ftLastWriteTime.dwHighDateTime=0x1cab7c9, nFileSizeHigh=0x0, nFileSizeLow=0x1d950, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOXMLED.EXE", cAlternateFileName="")) returned 1 [0079.850] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d640 | out: lpFindFileData=0x12d640*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x553f4600, ftCreationTime.dwHighDateTime=0x1cab7c9, ftLastAccessTime.dwLowDateTime=0x593ede30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x553f4600, ftLastWriteTime.dwHighDateTime=0x1cab7c9, nFileSizeHigh=0x0, nFileSizeLow=0xdb80, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOXMLMF.DLL", cAlternateFileName="")) returned 1 [0079.850] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d640 | out: lpFindFileData=0x12d640*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf3922200, ftCreationTime.dwHighDateTime=0x1ca911d, ftLastAccessTime.dwLowDateTime=0x59413f90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf3922200, ftLastWriteTime.dwHighDateTime=0x1ca911d, nFileSizeHigh=0x0, nFileSizeLow=0x124980, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSPTLS.DLL", cAlternateFileName="")) returned 1 [0079.850] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d640 | out: lpFindFileData=0x12d640*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x15d97a00, ftCreationTime.dwHighDateTime=0x1caa6a1, ftLastAccessTime.dwLowDateTime=0x6a1819b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x15d97a00, ftLastWriteTime.dwHighDateTime=0x1caa6a1, nFileSizeHigh=0x0, nFileSizeLow=0xac370, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSSOAP30.DLL", cAlternateFileName="")) returned 1 [0079.850] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d640 | out: lpFindFileData=0x12d640*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8054ff00, ftCreationTime.dwHighDateTime=0x1cb7011, ftLastAccessTime.dwLowDateTime=0xcf459e40, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x8054ff00, ftLastWriteTime.dwHighDateTime=0x1cb7011, nFileSizeHigh=0x0, nFileSizeLow=0x1a5b, dwReserved0=0x0, dwReserved1=0x0, cFileName="MUAUTH.CAB", cAlternateFileName="")) returned 1 [0079.851] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d640 | out: lpFindFileData=0x12d640*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8054ff00, ftCreationTime.dwHighDateTime=0x1cb7011, ftLastAccessTime.dwLowDateTime=0xcf47ffa0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x8054ff00, ftLastWriteTime.dwHighDateTime=0x1cb7011, nFileSizeHigh=0x0, nFileSizeLow=0x6190, dwReserved0=0x0, dwReserved1=0x0, cFileName="MUOPTIN.DLL", cAlternateFileName="")) returned 1 [0079.851] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d640 | out: lpFindFileData=0x12d640*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x161d5800, ftCreationTime.dwHighDateTime=0x1cbd856, ftLastAccessTime.dwLowDateTime=0xd63a22c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x161d5800, ftLastWriteTime.dwHighDateTime=0x1cbd856, nFileSizeHigh=0x0, nFileSizeLow=0x38d88, dwReserved0=0x0, dwReserved1=0x0, cFileName="Oarpmany.exe", cAlternateFileName="")) returned 1 [0079.851] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d640 | out: lpFindFileData=0x12d640*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f9d2900, ftCreationTime.dwHighDateTime=0x1cab9ac, ftLastAccessTime.dwLowDateTime=0xbe0f9da0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x7f9d2900, ftLastWriteTime.dwHighDateTime=0x1cab9ac, nFileSizeHigh=0x0, nFileSizeLow=0x7568, dwReserved0=0x0, dwReserved1=0x0, cFileName="ODBCMON.DLL", cAlternateFileName="")) returned 1 [0079.851] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d640 | out: lpFindFileData=0x12d640*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee2ce510, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xbe974c00, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xbe974c00, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office Setup Controller", cAlternateFileName="OFFICE~1")) returned 1 [0079.851] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d640 | out: lpFindFileData=0x12d640*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5de00200, ftCreationTime.dwHighDateTime=0x1cac9ac, ftLastAccessTime.dwLowDateTime=0x6bc953f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5de00200, ftLastWriteTime.dwHighDateTime=0x1cac9ac, nFileSizeHigh=0x0, nFileSizeLow=0x2560, dwReserved0=0x0, dwReserved1=0x0, cFileName="OFFREL.DLL", cAlternateFileName="")) returned 1 [0079.851] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d640 | out: lpFindFileData=0x12d640*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5de00200, ftCreationTime.dwHighDateTime=0x1cac9ac, ftLastAccessTime.dwLowDateTime=0x6c2166d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5de00200, ftLastWriteTime.dwHighDateTime=0x1cac9ac, nFileSizeHigh=0x0, nFileSizeLow=0x4d88, dwReserved0=0x0, dwReserved1=0x0, cFileName="OPHPROXY.DLL", cAlternateFileName="")) returned 1 [0079.851] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d640 | out: lpFindFileData=0x12d640*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf6a43200, ftCreationTime.dwHighDateTime=0x1cb700e, ftLastAccessTime.dwLowDateTime=0xcf47ffa0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xf6a43200, ftLastWriteTime.dwHighDateTime=0x1cb700e, nFileSizeHigh=0x0, nFileSizeLow=0x47a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="OPTINPS.DLL", cAlternateFileName="")) returned 1 [0079.854] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d640 | out: lpFindFileData=0x12d640*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1570ec00, ftCreationTime.dwHighDateTime=0x1cbc479, ftLastAccessTime.dwLowDateTime=0xe5d21520, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x1570ec00, ftLastWriteTime.dwHighDateTime=0x1cbc479, nFileSizeHigh=0x0, nFileSizeLow=0xb7ba8, dwReserved0=0x0, dwReserved1=0x0, cFileName="PJ11OD11.DLL", cAlternateFileName="")) returned 1 [0079.854] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d640 | out: lpFindFileData=0x12d640*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9a461000, ftCreationTime.dwHighDateTime=0x1cb7018, ftLastAccessTime.dwLowDateTime=0xe5d47680, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x9a461000, ftLastWriteTime.dwHighDateTime=0x1cb7018, nFileSizeHigh=0x0, nFileSizeLow=0x3fb90, dwReserved0=0x0, dwReserved1=0x0, cFileName="PJRESC.DLL", cAlternateFileName="")) returned 1 [0079.854] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d640 | out: lpFindFileData=0x12d640*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74bd800, ftCreationTime.dwHighDateTime=0x1cb71c8, ftLastAccessTime.dwLowDateTime=0xe5d93940, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x74bd800, ftLastWriteTime.dwHighDateTime=0x1cb71c8, nFileSizeHigh=0x0, nFileSizeLow=0x3c2b90, dwReserved0=0x0, dwReserved1=0x0, cFileName="PRJRES.DLL", cAlternateFileName="")) returned 1 [0079.854] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d640 | out: lpFindFileData=0x12d640*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4a199a00, ftCreationTime.dwHighDateTime=0x1cba5d5, ftLastAccessTime.dwLowDateTime=0xdac16060, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x4a199a00, ftLastWriteTime.dwHighDateTime=0x1cba5d5, nFileSizeHigh=0x0, nFileSizeLow=0x1c8b68, dwReserved0=0x0, dwReserved1=0x0, cFileName="RICHED20.DLL", cAlternateFileName="")) returned 1 [0079.854] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d640 | out: lpFindFileData=0x12d640*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7339ac00, ftCreationTime.dwHighDateTime=0x1cbdfc2, ftLastAccessTime.dwLowDateTime=0xe5d93940, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x7339ac00, ftLastWriteTime.dwHighDateTime=0x1cbdfc2, nFileSizeHigh=0x0, nFileSizeLow=0x90778, dwReserved0=0x0, dwReserved1=0x0, cFileName="SERCONV.DLL", cAlternateFileName="")) returned 1 [0079.854] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d640 | out: lpFindFileData=0x12d640*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xded68100, ftCreationTime.dwHighDateTime=0x1cb5970, ftLastAccessTime.dwLowDateTime=0xd68d72e0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xded68100, ftLastWriteTime.dwHighDateTime=0x1cb5970, nFileSizeHigh=0x0, nFileSizeLow=0xc6b00, dwReserved0=0x0, dwReserved1=0x0, cFileName="USP10.DLL", cAlternateFileName="")) returned 1 [0079.854] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d640 | out: lpFindFileData=0x12d640*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x520efa00, ftCreationTime.dwHighDateTime=0x1cbc41d, ftLastAccessTime.dwLowDateTime=0xd83064e0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x520efa00, ftLastWriteTime.dwHighDateTime=0x1cbc41d, nFileSizeHigh=0x0, nFileSizeLow=0xc150, dwReserved0=0x0, dwReserved1=0x0, cFileName="VBAJET32.DLL", cAlternateFileName="")) returned 1 [0079.854] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d640 | out: lpFindFileData=0x12d640*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x14a84d00, ftCreationTime.dwHighDateTime=0x1caa6a1, ftLastAccessTime.dwLowDateTime=0x5e5e73d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x14a84d00, ftLastWriteTime.dwHighDateTime=0x1caa6a1, nFileSizeHigh=0x0, nFileSizeLow=0x23f90, dwReserved0=0x0, dwReserved1=0x0, cFileName="WISC30.DLL", cAlternateFileName="")) returned 1 [0079.854] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d640 | out: lpFindFileData=0x12d640*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x14a84d00, ftCreationTime.dwHighDateTime=0x1caa6a1, ftLastAccessTime.dwLowDateTime=0x5e5e73d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x14a84d00, ftLastWriteTime.dwHighDateTime=0x1caa6a1, nFileSizeHigh=0x0, nFileSizeLow=0x23f90, dwReserved0=0x0, dwReserved1=0x0, cFileName="WISC30.DLL", cAlternateFileName="")) returned 0 [0079.854] FindClose (in: hFindFile=0x1af3b6b0 | out: hFindFile=0x1af3b6b0) returned 1 [0079.854] SetErrorMode (uMode=0x0) returned 0x1 [0079.855] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033", nBufferLength=0x105, lpBuffer=0x12d390, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033", lpFilePart=0x0) returned 0x3c [0079.855] SetErrorMode (uMode=0x1) returned 0x0 [0079.855] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\*", lpFindFileData=0x12d530 | out: lpFindFileData=0x12d530*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee282250, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xc24d0020, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xc24d0020, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1af3b6b0 [0079.856] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee282250, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xc24d0020, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xc24d0020, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0079.856] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x81925f00, ftCreationTime.dwHighDateTime=0x1caca23, ftLastAccessTime.dwLowDateTime=0xee2a83b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x81925f00, ftLastWriteTime.dwHighDateTime=0x1caca23, nFileSizeHigh=0x0, nFileSizeLow=0x305a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACEINTL.DLL", cAlternateFileName="")) returned 1 [0079.857] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77357e00, ftCreationTime.dwHighDateTime=0x1cac9ad, ftLastAccessTime.dwLowDateTime=0xee2a83b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x77357e00, ftLastWriteTime.dwHighDateTime=0x1cac9ad, nFileSizeHigh=0x0, nFileSizeLow=0xcdb0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACEODBCI.DLL", cAlternateFileName="")) returned 1 [0079.857] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77357e00, ftCreationTime.dwHighDateTime=0x1cac9ad, ftLastAccessTime.dwLowDateTime=0xee2a83b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x77357e00, ftLastWriteTime.dwHighDateTime=0x1cac9ad, nFileSizeHigh=0x0, nFileSizeLow=0x51d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACERECR.DLL", cAlternateFileName="")) returned 1 [0079.857] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x81925f00, ftCreationTime.dwHighDateTime=0x1caca23, ftLastAccessTime.dwLowDateTime=0xee2a83b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x81925f00, ftLastWriteTime.dwHighDateTime=0x1caca23, nFileSizeHigh=0x0, nFileSizeLow=0xd2990, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACEWSTR.DLL", cAlternateFileName="")) returned 1 [0079.857] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f139500, ftCreationTime.dwHighDateTime=0x1c69359, ftLastAccessTime.dwLowDateTime=0xee2ce510, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x7f139500, ftLastWriteTime.dwHighDateTime=0x1c69359, nFileSizeHigh=0x0, nFileSizeLow=0x19a3ff, dwReserved0=0x0, dwReserved1=0x0, cFileName="ADO210.CHM", cAlternateFileName="")) returned 1 [0079.857] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4b06d00, ftCreationTime.dwHighDateTime=0x1ca9127, ftLastAccessTime.dwLowDateTime=0xee2ce510, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe4b06d00, ftLastWriteTime.dwHighDateTime=0x1ca9127, nFileSizeHigh=0x0, nFileSizeLow=0x25b50, dwReserved0=0x0, dwReserved1=0x0, cFileName="ALRTINTL.DLL", cAlternateFileName="")) returned 1 [0079.857] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe5e15000, ftCreationTime.dwHighDateTime=0x1cbf3e5, ftLastAccessTime.dwLowDateTime=0xc24a9ec0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xe5e15000, ftLastWriteTime.dwHighDateTime=0x1cbf3e5, nFileSizeHigh=0x0, nFileSizeLow=0x269380, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOINTL.DLL", cAlternateFileName="")) returned 1 [0079.857] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5b30dd00, ftCreationTime.dwHighDateTime=0x1cac9ab, ftLastAccessTime.dwLowDateTime=0xeee42ef0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x5b30dd00, ftLastWriteTime.dwHighDateTime=0x1cac9ab, nFileSizeHigh=0x0, nFileSizeLow=0xd980, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOINTL.DLL.IDX_DLL", cAlternateFileName="MSOINT~1.IDX")) returned 1 [0079.857] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5c620a00, ftCreationTime.dwHighDateTime=0x1cac9ab, ftLastAccessTime.dwLowDateTime=0xeee8f1b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x5c620a00, ftLastWriteTime.dwHighDateTime=0x1cac9ab, nFileSizeHigh=0x0, nFileSizeLow=0x152f80, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOINTL.REST.IDX_DLL", cAlternateFileName="MSOINT~2.IDX")) returned 1 [0079.857] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x15d97a00, ftCreationTime.dwHighDateTime=0x1caa6a1, ftLastAccessTime.dwLowDateTime=0xeeedb470, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x15d97a00, ftLastWriteTime.dwHighDateTime=0x1caa6a1, nFileSizeHigh=0x0, nFileSizeLow=0xa388, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSSOAPR3.DLL", cAlternateFileName="")) returned 1 [0079.857] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x356f9800, ftCreationTime.dwHighDateTime=0x1ca911f, ftLastAccessTime.dwLowDateTime=0xeef015d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x356f9800, ftLastWriteTime.dwHighDateTime=0x1ca911f, nFileSizeHigh=0x0, nFileSizeLow=0x2d88, dwReserved0=0x0, dwReserved1=0x0, cFileName="OARPMANR.DLL", cAlternateFileName="")) returned 1 [0079.857] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4d183e00, ftCreationTime.dwHighDateTime=0x1ca520c, ftLastAccessTime.dwLowDateTime=0xef0320d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x4d183e00, ftLastWriteTime.dwHighDateTime=0x1ca520c, nFileSizeHigh=0x0, nFileSizeLow=0x795, dwReserved0=0x0, dwReserved1=0x0, cFileName="README.HTM", cAlternateFileName="")) returned 1 [0079.857] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb401ca00, ftCreationTime.dwHighDateTime=0x1cbdec9, ftLastAccessTime.dwLowDateTime=0xc24d0020, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xb401ca00, ftLastWriteTime.dwHighDateTime=0x1cbdec9, nFileSizeHigh=0x0, nFileSizeLow=0x19b80, dwReserved0=0x0, dwReserved1=0x0, cFileName="xlsrvintl.dll", cAlternateFileName="XLSRVI~1.DLL")) returned 1 [0079.857] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb401ca00, ftCreationTime.dwHighDateTime=0x1cbdec9, ftLastAccessTime.dwLowDateTime=0xc24d0020, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xb401ca00, ftLastWriteTime.dwHighDateTime=0x1cbdec9, nFileSizeHigh=0x0, nFileSizeLow=0x19b80, dwReserved0=0x0, dwReserved1=0x0, cFileName="xlsrvintl.dll", cAlternateFileName="XLSRVI~1.DLL")) returned 0 [0079.857] FindClose (in: hFindFile=0x1af3b6b0 | out: hFindFile=0x1af3b6b0) returned 1 [0079.858] SetErrorMode (uMode=0x0) returned 0x1 [0079.862] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\Decrypt Instructions.txt", nBufferLength=0x105, lpBuffer=0x12d240, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\Decrypt Instructions.txt", lpFilePart=0x0) returned 0x55 [0079.862] SetErrorMode (uMode=0x1) returned 0x0 [0079.862] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\Decrypt Instructions.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\1033\\decrypt instructions.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1f0 [0079.864] SetErrorMode (uMode=0x0) returned 0x1 [0079.864] GetFileType (hFile=0x1f0) returned 0x1 [0079.864] WriteFile (in: hFile=0x1f0, lpBuffer=0x27ecad0*, nNumberOfBytesToWrite=0x773, lpNumberOfBytesWritten=0x12d7a8, lpOverlapped=0x0 | out: lpBuffer=0x27ecad0*, lpNumberOfBytesWritten=0x12d7a8*=0x773, lpOverlapped=0x0) returned 1 [0079.865] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033", nBufferLength=0x105, lpBuffer=0x12d430, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033", lpFilePart=0x0) returned 0x3c [0079.865] SetErrorMode (uMode=0x1) returned 0x0 [0079.865] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\*", lpFindFileData=0x12d5d0 | out: lpFindFileData=0x12d5d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee282250, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x4faaa110, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x4faaa110, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1af3b6b0 [0079.866] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee282250, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x4faaa110, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x4faaa110, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0079.866] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x81925f00, ftCreationTime.dwHighDateTime=0x1caca23, ftLastAccessTime.dwLowDateTime=0xee2a83b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x81925f00, ftLastWriteTime.dwHighDateTime=0x1caca23, nFileSizeHigh=0x0, nFileSizeLow=0x305a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACEINTL.DLL", cAlternateFileName="")) returned 1 [0079.866] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77357e00, ftCreationTime.dwHighDateTime=0x1cac9ad, ftLastAccessTime.dwLowDateTime=0xee2a83b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x77357e00, ftLastWriteTime.dwHighDateTime=0x1cac9ad, nFileSizeHigh=0x0, nFileSizeLow=0xcdb0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACEODBCI.DLL", cAlternateFileName="")) returned 1 [0079.866] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77357e00, ftCreationTime.dwHighDateTime=0x1cac9ad, ftLastAccessTime.dwLowDateTime=0xee2a83b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x77357e00, ftLastWriteTime.dwHighDateTime=0x1cac9ad, nFileSizeHigh=0x0, nFileSizeLow=0x51d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACERECR.DLL", cAlternateFileName="")) returned 1 [0079.866] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x81925f00, ftCreationTime.dwHighDateTime=0x1caca23, ftLastAccessTime.dwLowDateTime=0xee2a83b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x81925f00, ftLastWriteTime.dwHighDateTime=0x1caca23, nFileSizeHigh=0x0, nFileSizeLow=0xd2990, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACEWSTR.DLL", cAlternateFileName="")) returned 1 [0079.866] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f139500, ftCreationTime.dwHighDateTime=0x1c69359, ftLastAccessTime.dwLowDateTime=0xee2ce510, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x7f139500, ftLastWriteTime.dwHighDateTime=0x1c69359, nFileSizeHigh=0x0, nFileSizeLow=0x19a3ff, dwReserved0=0x0, dwReserved1=0x0, cFileName="ADO210.CHM", cAlternateFileName="")) returned 1 [0079.866] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4b06d00, ftCreationTime.dwHighDateTime=0x1ca9127, ftLastAccessTime.dwLowDateTime=0xee2ce510, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe4b06d00, ftLastWriteTime.dwHighDateTime=0x1ca9127, nFileSizeHigh=0x0, nFileSizeLow=0x25b50, dwReserved0=0x0, dwReserved1=0x0, cFileName="ALRTINTL.DLL", cAlternateFileName="")) returned 1 [0079.866] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4faaa110, ftCreationTime.dwHighDateTime=0x1d5e786, ftLastAccessTime.dwLowDateTime=0x4faaa110, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x4faaa110, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x773, dwReserved0=0x0, dwReserved1=0x0, cFileName="Decrypt Instructions.txt", cAlternateFileName="DECRYP~1.TXT")) returned 1 [0079.866] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe5e15000, ftCreationTime.dwHighDateTime=0x1cbf3e5, ftLastAccessTime.dwLowDateTime=0xc24a9ec0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xe5e15000, ftLastWriteTime.dwHighDateTime=0x1cbf3e5, nFileSizeHigh=0x0, nFileSizeLow=0x269380, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOINTL.DLL", cAlternateFileName="")) returned 1 [0079.866] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5b30dd00, ftCreationTime.dwHighDateTime=0x1cac9ab, ftLastAccessTime.dwLowDateTime=0xeee42ef0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x5b30dd00, ftLastWriteTime.dwHighDateTime=0x1cac9ab, nFileSizeHigh=0x0, nFileSizeLow=0xd980, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOINTL.DLL.IDX_DLL", cAlternateFileName="MSOINT~1.IDX")) returned 1 [0079.866] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5c620a00, ftCreationTime.dwHighDateTime=0x1cac9ab, ftLastAccessTime.dwLowDateTime=0xeee8f1b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x5c620a00, ftLastWriteTime.dwHighDateTime=0x1cac9ab, nFileSizeHigh=0x0, nFileSizeLow=0x152f80, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOINTL.REST.IDX_DLL", cAlternateFileName="MSOINT~2.IDX")) returned 1 [0079.866] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x15d97a00, ftCreationTime.dwHighDateTime=0x1caa6a1, ftLastAccessTime.dwLowDateTime=0xeeedb470, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x15d97a00, ftLastWriteTime.dwHighDateTime=0x1caa6a1, nFileSizeHigh=0x0, nFileSizeLow=0xa388, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSSOAPR3.DLL", cAlternateFileName="")) returned 1 [0079.866] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x356f9800, ftCreationTime.dwHighDateTime=0x1ca911f, ftLastAccessTime.dwLowDateTime=0xeef015d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x356f9800, ftLastWriteTime.dwHighDateTime=0x1ca911f, nFileSizeHigh=0x0, nFileSizeLow=0x2d88, dwReserved0=0x0, dwReserved1=0x0, cFileName="OARPMANR.DLL", cAlternateFileName="")) returned 1 [0079.867] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4d183e00, ftCreationTime.dwHighDateTime=0x1ca520c, ftLastAccessTime.dwLowDateTime=0xef0320d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x4d183e00, ftLastWriteTime.dwHighDateTime=0x1ca520c, nFileSizeHigh=0x0, nFileSizeLow=0x795, dwReserved0=0x0, dwReserved1=0x0, cFileName="README.HTM", cAlternateFileName="")) returned 1 [0079.867] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb401ca00, ftCreationTime.dwHighDateTime=0x1cbdec9, ftLastAccessTime.dwLowDateTime=0xc24d0020, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xb401ca00, ftLastWriteTime.dwHighDateTime=0x1cbdec9, nFileSizeHigh=0x0, nFileSizeLow=0x19b80, dwReserved0=0x0, dwReserved1=0x0, cFileName="xlsrvintl.dll", cAlternateFileName="XLSRVI~1.DLL")) returned 1 [0079.867] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb401ca00, ftCreationTime.dwHighDateTime=0x1cbdec9, ftLastAccessTime.dwLowDateTime=0xc24d0020, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xb401ca00, ftLastWriteTime.dwHighDateTime=0x1cbdec9, nFileSizeHigh=0x0, nFileSizeLow=0x19b80, dwReserved0=0x0, dwReserved1=0x0, cFileName="xlsrvintl.dll", cAlternateFileName="XLSRVI~1.DLL")) returned 0 [0079.868] FindClose (in: hFindFile=0x1af3b6b0 | out: hFindFile=0x1af3b6b0) returned 1 [0079.868] SetErrorMode (uMode=0x0) returned 0x1 [0079.868] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Cultures", nBufferLength=0x105, lpBuffer=0x12d390, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Cultures", lpFilePart=0x0) returned 0x40 [0079.868] SetErrorMode (uMode=0x1) returned 0x0 [0079.868] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Cultures\\*", lpFindFileData=0x12d530 | out: lpFindFileData=0x12d530*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xceefecc0, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xceefecc0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xceefecc0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1af3b6b0 [0079.869] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xceefecc0, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xceefecc0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xceefecc0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0079.869] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7cbc7d00, ftCreationTime.dwHighDateTime=0x1cbe3e3, ftLastAccessTime.dwLowDateTime=0xcef24e20, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x7cbc7d00, ftLastWriteTime.dwHighDateTime=0x1cbe3e3, nFileSizeHigh=0x0, nFileSizeLow=0x419360, dwReserved0=0x0, dwReserved1=0x0, cFileName="OFFICE.ODF", cAlternateFileName="")) returned 1 [0079.869] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7cbc7d00, ftCreationTime.dwHighDateTime=0x1cbe3e3, ftLastAccessTime.dwLowDateTime=0xcef24e20, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x7cbc7d00, ftLastWriteTime.dwHighDateTime=0x1cbe3e3, nFileSizeHigh=0x0, nFileSizeLow=0x419360, dwReserved0=0x0, dwReserved1=0x0, cFileName="OFFICE.ODF", cAlternateFileName="")) returned 0 [0079.869] FindClose (in: hFindFile=0x1af3b6b0 | out: hFindFile=0x1af3b6b0) returned 1 [0079.869] SetErrorMode (uMode=0x0) returned 0x1 [0079.870] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Cultures\\Decrypt Instructions.txt", nBufferLength=0x105, lpBuffer=0x12d240, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Cultures\\Decrypt Instructions.txt", lpFilePart=0x0) returned 0x59 [0079.870] SetErrorMode (uMode=0x1) returned 0x0 [0079.870] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Cultures\\Decrypt Instructions.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\cultures\\decrypt instructions.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1f0 [0079.870] SetErrorMode (uMode=0x0) returned 0x1 [0079.871] GetFileType (hFile=0x1f0) returned 0x1 [0079.871] WriteFile (in: hFile=0x1f0, lpBuffer=0x27f34b0*, nNumberOfBytesToWrite=0x773, lpNumberOfBytesWritten=0x12d7a8, lpOverlapped=0x0 | out: lpBuffer=0x27f34b0*, lpNumberOfBytesWritten=0x12d7a8*=0x773, lpOverlapped=0x0) returned 1 [0079.872] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Cultures", nBufferLength=0x105, lpBuffer=0x12d430, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Cultures", lpFilePart=0x0) returned 0x40 [0079.872] SetErrorMode (uMode=0x1) returned 0x0 [0079.872] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Cultures\\*", lpFindFileData=0x12d5d0 | out: lpFindFileData=0x12d5d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xceefecc0, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x4fad0270, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x4fad0270, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1af3b6b0 [0079.872] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xceefecc0, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x4fad0270, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x4fad0270, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0079.873] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4fad0270, ftCreationTime.dwHighDateTime=0x1d5e786, ftLastAccessTime.dwLowDateTime=0x4fad0270, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x4fad0270, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x773, dwReserved0=0x0, dwReserved1=0x0, cFileName="Decrypt Instructions.txt", cAlternateFileName="DECRYP~1.TXT")) returned 1 [0079.873] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7cbc7d00, ftCreationTime.dwHighDateTime=0x1cbe3e3, ftLastAccessTime.dwLowDateTime=0xcef24e20, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x7cbc7d00, ftLastWriteTime.dwHighDateTime=0x1cbe3e3, nFileSizeHigh=0x0, nFileSizeLow=0x419360, dwReserved0=0x0, dwReserved1=0x0, cFileName="OFFICE.ODF", cAlternateFileName="")) returned 1 [0079.873] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7cbc7d00, ftCreationTime.dwHighDateTime=0x1cbe3e3, ftLastAccessTime.dwLowDateTime=0xcef24e20, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x7cbc7d00, ftLastWriteTime.dwHighDateTime=0x1cbe3e3, nFileSizeHigh=0x0, nFileSizeLow=0x419360, dwReserved0=0x0, dwReserved1=0x0, cFileName="OFFICE.ODF", cAlternateFileName="")) returned 0 [0079.873] FindClose (in: hFindFile=0x1af3b6b0 | out: hFindFile=0x1af3b6b0) returned 1 [0079.873] SetErrorMode (uMode=0x0) returned 0x1 [0079.873] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller", nBufferLength=0x105, lpBuffer=0x12d390, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller", lpFilePart=0x0) returned 0x4f [0079.873] SetErrorMode (uMode=0x1) returned 0x0 [0079.873] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\*", lpFindFileData=0x12d530 | out: lpFindFileData=0x12d530*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee2ce510, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xbe974c00, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xbe974c00, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1af3b6b0 [0079.881] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee2ce510, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xbe974c00, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xbe974c00, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0079.930] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x15419830, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x17bd2750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x17bd2750, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Access.en-us", cAlternateFileName="ACCESS~1.EN-")) returned 1 [0079.930] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa64b3d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa64b3d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfa64b3d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Excel.en-us", cAlternateFileName="EXCEL~1.EN-")) returned 1 [0079.930] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd658ff0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfd67f150, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfd67f150, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Groove.en-us", cAlternateFileName="GROOVE~1.EN-")) returned 1 [0079.930] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x112a3b30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x112a3b30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x112a3b30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="InfoPath.en-us", cAlternateFileName="INFOPA~1.EN-")) returned 1 [0079.930] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe164800, ftCreationTime.dwHighDateTime=0x1cac048, ftLastAccessTime.dwLowDateTime=0x6b277670, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe164800, ftLastWriteTime.dwHighDateTime=0x1cac048, nFileSizeHigh=0x0, nFileSizeLow=0x8b7b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="ODeploy.exe", cAlternateFileName="")) returned 1 [0079.931] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee2ce510, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xc2600b20, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xc2600b20, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office.en-us", cAlternateFileName="OFFICE~1.EN-")) returned 1 [0079.931] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x19b82c30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x19b82c30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x19b82c30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office32.en-us", cAlternateFileName="OFFICE~2.EN-")) returned 1 [0079.931] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x22200730, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x22200730, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x22200730, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office32.WW", cAlternateFileName="")) returned 1 [0079.931] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc840bb0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xc8d9130, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc8d9130, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="OneNote.en-us", cAlternateFileName="ONENOT~1.EN-")) returned 1 [0079.931] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x302b0500, ftCreationTime.dwHighDateTime=0x1cba073, ftLastAccessTime.dwLowDateTime=0xcf459e40, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x302b0500, ftLastWriteTime.dwHighDateTime=0x1cba073, nFileSizeHigh=0x0, nFileSizeLow=0x709b68, dwReserved0=0x0, dwReserved1=0x0, cFileName="OSETUP.DLL", cAlternateFileName="")) returned 1 [0079.931] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5de00200, ftCreationTime.dwHighDateTime=0x1cac9ac, ftLastAccessTime.dwLowDateTime=0x598fccf0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5de00200, ftLastWriteTime.dwHighDateTime=0x1cac9ac, nFileSizeHigh=0x0, nFileSizeLow=0xb9a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="OSetupPS.dll", cAlternateFileName="")) returned 1 [0079.931] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x14af010, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x2095e10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x2095e10, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Outlook.en-us", cAlternateFileName="OUTLOO~1.EN-")) returned 1 [0079.931] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb169e000, ftCreationTime.dwHighDateTime=0x1ca911f, ftLastAccessTime.dwLowDateTime=0x6cee1d10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb169e000, ftLastWriteTime.dwHighDateTime=0x1ca911f, nFileSizeHigh=0x0, nFileSizeLow=0x165510, dwReserved0=0x0, dwReserved1=0x0, cFileName="pidgenx.dll", cAlternateFileName="")) returned 1 [0079.931] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x17eefe00, ftCreationTime.dwHighDateTime=0x1ca9120, ftLastAccessTime.dwLowDateTime=0xbe99ad60, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x17eefe00, ftLastWriteTime.dwHighDateTime=0x1ca9120, nFileSizeHigh=0x0, nFileSizeLow=0xaec3a, dwReserved0=0x0, dwReserved1=0x0, cFileName="pkeyconfig-office.xrm-ms", cAlternateFileName="PKEYCO~1.XRM")) returned 1 [0079.931] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6904ef00, ftCreationTime.dwHighDateTime=0x1ca912c, ftLastAccessTime.dwLowDateTime=0x6cf07e70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6904ef00, ftLastWriteTime.dwHighDateTime=0x1ca912c, nFileSizeHigh=0x0, nFileSizeLow=0x3d78, dwReserved0=0x0, dwReserved1=0x0, cFileName="pkeyconfig.companion.dll", cAlternateFileName="PKEYCO~1.DLL")) returned 1 [0079.931] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf5db14d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf5e95d10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf5e95d10, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerPoint.en-us", cAlternateFileName="POWERP~1.EN-")) returned 1 [0079.931] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbe2e8f80, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0xbec48620, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xbec48620, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PRJPROR", cAlternateFileName="")) returned 1 [0079.931] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaf551ba0, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0xaf577d00, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xaf577d00, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Project.en-us", cAlternateFileName="PROJEC~1.EN-")) returned 1 [0079.931] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x99177d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x99177d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x99177d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.en", cAlternateFileName="")) returned 1 [0079.931] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5b7fe90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x5b7fe90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5b7fe90, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.es", cAlternateFileName="")) returned 1 [0079.931] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7941190, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x7941190, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7941190, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.fr", cAlternateFileName="")) returned 1 [0079.931] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xab640f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xab8a250, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xab8a250, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proofing.en-us", cAlternateFileName="PROOFI~1.EN-")) returned 1 [0079.931] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a95a430, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6cd64f50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6cd64f50, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PROPLUSR", cAlternateFileName="")) returned 1 [0079.932] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ba9ab90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x1bc89d70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1bc89d70, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Publisher.en-us", cAlternateFileName="PUBLIS~1.EN-")) returned 1 [0079.932] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8cba0700, ftCreationTime.dwHighDateTime=0x1cb7664, ftLastAccessTime.dwLowDateTime=0xd78c2600, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x8cba0700, ftLastWriteTime.dwHighDateTime=0x1cb7664, nFileSizeHigh=0x0, nFileSizeLow=0x150378, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.exe", cAlternateFileName="")) returned 1 [0079.932] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50b66320, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x50da17c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x50da17c0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Visio.en-us", cAlternateFileName="VISIO~1.EN-")) returned 1 [0079.932] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x83258520, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x84c615c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x84c615c0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="VISIOR", cAlternateFileName="")) returned 1 [0079.932] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1e501370, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x1e501370, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1e501370, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Word.en-us", cAlternateFileName="WORD~1.EN-")) returned 1 [0079.932] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1e501370, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x1e501370, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1e501370, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Word.en-us", cAlternateFileName="WORD~1.EN-")) returned 0 [0079.932] FindClose (in: hFindFile=0x1af3b6b0 | out: hFindFile=0x1af3b6b0) returned 1 [0079.933] SetErrorMode (uMode=0x0) returned 0x1 [0079.935] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Decrypt Instructions.txt", nBufferLength=0x105, lpBuffer=0x12d240, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Decrypt Instructions.txt", lpFilePart=0x0) returned 0x68 [0079.935] SetErrorMode (uMode=0x1) returned 0x0 [0079.935] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Decrypt Instructions.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\decrypt instructions.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1f0 [0079.936] SetErrorMode (uMode=0x0) returned 0x1 [0079.937] GetFileType (hFile=0x1f0) returned 0x1 [0079.937] WriteFile (in: hFile=0x1f0, lpBuffer=0x27fae40*, nNumberOfBytesToWrite=0x773, lpNumberOfBytesWritten=0x12d7a8, lpOverlapped=0x0 | out: lpBuffer=0x27fae40*, lpNumberOfBytesWritten=0x12d7a8*=0x773, lpOverlapped=0x0) returned 1 [0079.940] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller", nBufferLength=0x105, lpBuffer=0x12d430, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller", lpFilePart=0x0) returned 0x4f [0079.941] SetErrorMode (uMode=0x1) returned 0x0 [0079.941] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\*", lpFindFileData=0x12d5d0 | out: lpFindFileData=0x12d5d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee2ce510, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x4fb687f0, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x4fb687f0, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1af3b6b0 [0079.941] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee2ce510, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x4fb687f0, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x4fb687f0, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0079.941] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x15419830, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x17bd2750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x17bd2750, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Access.en-us", cAlternateFileName="ACCESS~1.EN-")) returned 1 [0079.941] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4fb687f0, ftCreationTime.dwHighDateTime=0x1d5e786, ftLastAccessTime.dwLowDateTime=0x4fb687f0, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x4fb687f0, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x773, dwReserved0=0x0, dwReserved1=0x0, cFileName="Decrypt Instructions.txt", cAlternateFileName="DECRYP~1.TXT")) returned 1 [0079.941] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa64b3d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa64b3d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfa64b3d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Excel.en-us", cAlternateFileName="EXCEL~1.EN-")) returned 1 [0079.941] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd658ff0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfd67f150, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfd67f150, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Groove.en-us", cAlternateFileName="GROOVE~1.EN-")) returned 1 [0079.941] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x112a3b30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x112a3b30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x112a3b30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="InfoPath.en-us", cAlternateFileName="INFOPA~1.EN-")) returned 1 [0079.941] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe164800, ftCreationTime.dwHighDateTime=0x1cac048, ftLastAccessTime.dwLowDateTime=0x6b277670, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe164800, ftLastWriteTime.dwHighDateTime=0x1cac048, nFileSizeHigh=0x0, nFileSizeLow=0x8b7b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="ODeploy.exe", cAlternateFileName="")) returned 1 [0079.941] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee2ce510, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xc2600b20, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xc2600b20, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office.en-us", cAlternateFileName="OFFICE~1.EN-")) returned 1 [0079.941] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x19b82c30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x19b82c30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x19b82c30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office32.en-us", cAlternateFileName="OFFICE~2.EN-")) returned 1 [0079.941] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x22200730, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x22200730, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x22200730, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office32.WW", cAlternateFileName="")) returned 1 [0079.942] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc840bb0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xc8d9130, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc8d9130, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="OneNote.en-us", cAlternateFileName="ONENOT~1.EN-")) returned 1 [0079.942] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x302b0500, ftCreationTime.dwHighDateTime=0x1cba073, ftLastAccessTime.dwLowDateTime=0xcf459e40, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x302b0500, ftLastWriteTime.dwHighDateTime=0x1cba073, nFileSizeHigh=0x0, nFileSizeLow=0x709b68, dwReserved0=0x0, dwReserved1=0x0, cFileName="OSETUP.DLL", cAlternateFileName="")) returned 1 [0079.942] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5de00200, ftCreationTime.dwHighDateTime=0x1cac9ac, ftLastAccessTime.dwLowDateTime=0x598fccf0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5de00200, ftLastWriteTime.dwHighDateTime=0x1cac9ac, nFileSizeHigh=0x0, nFileSizeLow=0xb9a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="OSetupPS.dll", cAlternateFileName="")) returned 1 [0079.942] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x14af010, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x2095e10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x2095e10, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Outlook.en-us", cAlternateFileName="OUTLOO~1.EN-")) returned 1 [0079.942] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb169e000, ftCreationTime.dwHighDateTime=0x1ca911f, ftLastAccessTime.dwLowDateTime=0x6cee1d10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb169e000, ftLastWriteTime.dwHighDateTime=0x1ca911f, nFileSizeHigh=0x0, nFileSizeLow=0x165510, dwReserved0=0x0, dwReserved1=0x0, cFileName="pidgenx.dll", cAlternateFileName="")) returned 1 [0079.942] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x17eefe00, ftCreationTime.dwHighDateTime=0x1ca9120, ftLastAccessTime.dwLowDateTime=0xbe99ad60, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x17eefe00, ftLastWriteTime.dwHighDateTime=0x1ca9120, nFileSizeHigh=0x0, nFileSizeLow=0xaec3a, dwReserved0=0x0, dwReserved1=0x0, cFileName="pkeyconfig-office.xrm-ms", cAlternateFileName="PKEYCO~1.XRM")) returned 1 [0079.942] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6904ef00, ftCreationTime.dwHighDateTime=0x1ca912c, ftLastAccessTime.dwLowDateTime=0x6cf07e70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6904ef00, ftLastWriteTime.dwHighDateTime=0x1ca912c, nFileSizeHigh=0x0, nFileSizeLow=0x3d78, dwReserved0=0x0, dwReserved1=0x0, cFileName="pkeyconfig.companion.dll", cAlternateFileName="PKEYCO~1.DLL")) returned 1 [0079.942] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf5db14d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf5e95d10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf5e95d10, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerPoint.en-us", cAlternateFileName="POWERP~1.EN-")) returned 1 [0079.942] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbe2e8f80, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0xbec48620, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xbec48620, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PRJPROR", cAlternateFileName="")) returned 1 [0079.942] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaf551ba0, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0xaf577d00, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xaf577d00, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Project.en-us", cAlternateFileName="PROJEC~1.EN-")) returned 1 [0079.942] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x99177d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x99177d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x99177d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.en", cAlternateFileName="")) returned 1 [0079.943] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5b7fe90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x5b7fe90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5b7fe90, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.es", cAlternateFileName="")) returned 1 [0079.943] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7941190, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x7941190, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7941190, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.fr", cAlternateFileName="")) returned 1 [0079.943] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xab640f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xab8a250, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xab8a250, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proofing.en-us", cAlternateFileName="PROOFI~1.EN-")) returned 1 [0079.943] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a95a430, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6cd64f50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6cd64f50, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PROPLUSR", cAlternateFileName="")) returned 1 [0079.943] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ba9ab90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x1bc89d70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1bc89d70, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Publisher.en-us", cAlternateFileName="PUBLIS~1.EN-")) returned 1 [0079.943] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8cba0700, ftCreationTime.dwHighDateTime=0x1cb7664, ftLastAccessTime.dwLowDateTime=0xd78c2600, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x8cba0700, ftLastWriteTime.dwHighDateTime=0x1cb7664, nFileSizeHigh=0x0, nFileSizeLow=0x150378, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.exe", cAlternateFileName="")) returned 1 [0079.943] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50b66320, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x50da17c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x50da17c0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Visio.en-us", cAlternateFileName="VISIO~1.EN-")) returned 1 [0079.943] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x83258520, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x84c615c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x84c615c0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="VISIOR", cAlternateFileName="")) returned 1 [0079.943] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1e501370, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x1e501370, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1e501370, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Word.en-us", cAlternateFileName="WORD~1.EN-")) returned 1 [0079.944] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1e501370, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x1e501370, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1e501370, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Word.en-us", cAlternateFileName="WORD~1.EN-")) returned 0 [0079.944] FindClose (in: hFindFile=0x1af3b6b0 | out: hFindFile=0x1af3b6b0) returned 1 [0079.944] SetErrorMode (uMode=0x0) returned 0x1 [0079.944] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Access.en-us", nBufferLength=0x105, lpBuffer=0x12d330, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Access.en-us", lpFilePart=0x0) returned 0x5c [0079.944] SetErrorMode (uMode=0x1) returned 0x0 [0079.944] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Access.en-us\\*", lpFindFileData=0x12d4d0 | out: lpFindFileData=0x12d4d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x15419830, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x17bd2750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x17bd2750, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1af3b6b0 [0079.974] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d4e0 | out: lpFindFileData=0x12d4e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x15419830, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x17bd2750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x17bd2750, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0079.974] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d4e0 | out: lpFindFileData=0x12d4e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfa5fe940, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x15419830, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfa5fe940, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x545, dwReserved0=0x0, dwReserved1=0x0, cFileName="AccessMUI.XML", cAlternateFileName="ACCESS~1.XML")) returned 1 [0079.974] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d4e0 | out: lpFindFileData=0x12d4e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfa13c510, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x17bd2750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfa13c510, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x333, dwReserved0=0x0, dwReserved1=0x0, cFileName="AccessMUISet.XML", cAlternateFileName="ACCESS~2.XML")) returned 1 [0079.974] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d4e0 | out: lpFindFileData=0x12d4e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfc111bb0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x17bd2750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfc111bb0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xa40, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 1 [0079.974] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d4e0 | out: lpFindFileData=0x12d4e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfc111bb0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x17bd2750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfc111bb0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xa40, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 0 [0079.975] FindClose (in: hFindFile=0x1af3b6b0 | out: hFindFile=0x1af3b6b0) returned 1 [0079.975] SetErrorMode (uMode=0x0) returned 0x1 [0079.977] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Access.en-us\\Decrypt Instructions.txt", nBufferLength=0x105, lpBuffer=0x12d1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Access.en-us\\Decrypt Instructions.txt", lpFilePart=0x0) returned 0x75 [0079.977] SetErrorMode (uMode=0x1) returned 0x0 [0079.977] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Access.en-us\\Decrypt Instructions.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\access.en-us\\decrypt instructions.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1f0 [0080.425] SetErrorMode (uMode=0x0) returned 0x1 [0080.425] GetFileType (hFile=0x1f0) returned 0x1 [0080.425] WriteFile (in: hFile=0x1f0, lpBuffer=0x28040e0*, nNumberOfBytesToWrite=0x773, lpNumberOfBytesWritten=0x12d748, lpOverlapped=0x0 | out: lpBuffer=0x28040e0*, lpNumberOfBytesWritten=0x12d748*=0x773, lpOverlapped=0x0) returned 1 [0080.426] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Access.en-us", nBufferLength=0x105, lpBuffer=0x12d3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Access.en-us", lpFilePart=0x0) returned 0x5c [0080.426] SetErrorMode (uMode=0x1) returned 0x0 [0080.426] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Access.en-us\\*", lpFindFileData=0x12d570 | out: lpFindFileData=0x12d570*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x15419830, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x50005290, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x50005290, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1af3b6b0 [0080.427] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d580 | out: lpFindFileData=0x12d580*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x15419830, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x50005290, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x50005290, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0080.427] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d580 | out: lpFindFileData=0x12d580*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfa5fe940, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x15419830, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfa5fe940, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x545, dwReserved0=0x0, dwReserved1=0x0, cFileName="AccessMUI.XML", cAlternateFileName="ACCESS~1.XML")) returned 1 [0080.427] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d580 | out: lpFindFileData=0x12d580*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfa13c510, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x17bd2750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfa13c510, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x333, dwReserved0=0x0, dwReserved1=0x0, cFileName="AccessMUISet.XML", cAlternateFileName="ACCESS~2.XML")) returned 1 [0080.427] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d580 | out: lpFindFileData=0x12d580*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50005290, ftCreationTime.dwHighDateTime=0x1d5e786, ftLastAccessTime.dwLowDateTime=0x50005290, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x50005290, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x773, dwReserved0=0x0, dwReserved1=0x0, cFileName="Decrypt Instructions.txt", cAlternateFileName="DECRYP~1.TXT")) returned 1 [0080.427] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d580 | out: lpFindFileData=0x12d580*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfc111bb0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x17bd2750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfc111bb0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xa40, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 1 [0080.427] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d580 | out: lpFindFileData=0x12d580*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfc111bb0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x17bd2750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfc111bb0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xa40, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 0 [0080.427] FindClose (in: hFindFile=0x1af3b6b0 | out: hFindFile=0x1af3b6b0) returned 1 [0080.427] SetErrorMode (uMode=0x0) returned 0x1 [0080.427] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Excel.en-us", nBufferLength=0x105, lpBuffer=0x12d330, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Excel.en-us", lpFilePart=0x0) returned 0x5b [0080.427] SetErrorMode (uMode=0x1) returned 0x0 [0080.428] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Excel.en-us\\*", lpFindFileData=0x12d4d0 | out: lpFindFileData=0x12d4d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa64b3d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa64b3d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfa64b3d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1af3b6b0 [0081.216] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d4e0 | out: lpFindFileData=0x12d4e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa64b3d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa64b3d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfa64b3d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0081.217] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d4e0 | out: lpFindFileData=0x12d4e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xecdfa490, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa64b3d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xecdfa490, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x61d, dwReserved0=0x0, dwReserved1=0x0, cFileName="ExcelMUI.XML", cAlternateFileName="")) returned 1 [0081.217] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d4e0 | out: lpFindFileData=0x12d4e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee38cbf0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa671530, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xee38cbf0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x8f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 1 [0081.234] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d4e0 | out: lpFindFileData=0x12d4e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee38cbf0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa671530, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xee38cbf0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x8f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 0 [0081.234] FindClose (in: hFindFile=0x1af3b6b0 | out: hFindFile=0x1af3b6b0) returned 1 [0081.235] SetErrorMode (uMode=0x0) returned 0x1 [0081.257] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Excel.en-us\\Decrypt Instructions.txt", nBufferLength=0x105, lpBuffer=0x12d1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Excel.en-us\\Decrypt Instructions.txt", lpFilePart=0x0) returned 0x74 [0081.297] SetErrorMode (uMode=0x1) returned 0x0 [0081.421] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Excel.en-us\\Decrypt Instructions.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\excel.en-us\\decrypt instructions.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1f0 [0081.696] SetErrorMode (uMode=0x0) returned 0x1 [0081.699] GetFileType (hFile=0x1f0) returned 0x1 [0081.701] WriteFile (in: hFile=0x1f0, lpBuffer=0x280ad88*, nNumberOfBytesToWrite=0x773, lpNumberOfBytesWritten=0x12d748, lpOverlapped=0x0 | out: lpBuffer=0x280ad88*, lpNumberOfBytesWritten=0x12d748*=0x773, lpOverlapped=0x0) returned 1 [0081.714] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Excel.en-us", nBufferLength=0x105, lpBuffer=0x12d3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Excel.en-us", lpFilePart=0x0) returned 0x5b [0081.714] SetErrorMode (uMode=0x1) returned 0x0 [0081.714] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Excel.en-us\\*", lpFindFileData=0x12d570 | out: lpFindFileData=0x12d570*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa64b3d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x50c121f0, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x50c121f0, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1af3b6b0 [0081.714] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d580 | out: lpFindFileData=0x12d580*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa64b3d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x50c121f0, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x50c121f0, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0081.714] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d580 | out: lpFindFileData=0x12d580*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50b9fdd0, ftCreationTime.dwHighDateTime=0x1d5e786, ftLastAccessTime.dwLowDateTime=0x50b9fdd0, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x50c5e4b0, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x773, dwReserved0=0x0, dwReserved1=0x0, cFileName="Decrypt Instructions.txt", cAlternateFileName="DECRYP~1.TXT")) returned 1 [0081.715] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d580 | out: lpFindFileData=0x12d580*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xecdfa490, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa64b3d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xecdfa490, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x61d, dwReserved0=0x0, dwReserved1=0x0, cFileName="ExcelMUI.XML", cAlternateFileName="")) returned 1 [0081.715] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d580 | out: lpFindFileData=0x12d580*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee38cbf0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa671530, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xee38cbf0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x8f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 1 [0081.715] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d580 | out: lpFindFileData=0x12d580*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee38cbf0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa671530, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xee38cbf0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x8f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 0 [0081.715] FindClose (in: hFindFile=0x1af3b6b0 | out: hFindFile=0x1af3b6b0) returned 1 [0081.715] SetErrorMode (uMode=0x0) returned 0x1 [0081.715] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Groove.en-us", nBufferLength=0x105, lpBuffer=0x12d330, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Groove.en-us", lpFilePart=0x0) returned 0x5c [0081.715] SetErrorMode (uMode=0x1) returned 0x0 [0081.715] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Groove.en-us\\*", lpFindFileData=0x12d4d0 | out: lpFindFileData=0x12d4d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd658ff0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfd67f150, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfd67f150, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1af3b6b0 [0081.767] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d4e0 | out: lpFindFileData=0x12d4e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd658ff0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfd67f150, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfd67f150, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0081.767] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d4e0 | out: lpFindFileData=0x12d4e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee38cbf0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfd658ff0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xee38cbf0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x391, dwReserved0=0x0, dwReserved1=0x0, cFileName="GrooveMUI.XML", cAlternateFileName="GROOVE~1.XML")) returned 1 [0081.767] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d4e0 | out: lpFindFileData=0x12d4e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee803530, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfd67f150, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xee803530, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x5ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 1 [0081.767] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d4e0 | out: lpFindFileData=0x12d4e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee803530, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfd67f150, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xee803530, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x5ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 0 [0081.767] FindClose (in: hFindFile=0x1af3b6b0 | out: hFindFile=0x1af3b6b0) returned 1 [0081.767] SetErrorMode (uMode=0x0) returned 0x1 [0081.768] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Groove.en-us\\Decrypt Instructions.txt", nBufferLength=0x105, lpBuffer=0x12d1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Groove.en-us\\Decrypt Instructions.txt", lpFilePart=0x0) returned 0x75 [0081.768] SetErrorMode (uMode=0x1) returned 0x0 [0081.768] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Groove.en-us\\Decrypt Instructions.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\groove.en-us\\decrypt instructions.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1f0 [0081.828] SetErrorMode (uMode=0x0) returned 0x1 [0081.828] GetFileType (hFile=0x1f0) returned 0x1 [0081.828] WriteFile (in: hFile=0x1f0, lpBuffer=0x28119b8*, nNumberOfBytesToWrite=0x773, lpNumberOfBytesWritten=0x12d748, lpOverlapped=0x0 | out: lpBuffer=0x28119b8*, lpNumberOfBytesWritten=0x12d748*=0x773, lpOverlapped=0x0) returned 1 [0081.830] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Groove.en-us", nBufferLength=0x105, lpBuffer=0x12d3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Groove.en-us", lpFilePart=0x0) returned 0x5c [0081.830] SetErrorMode (uMode=0x1) returned 0x0 [0081.830] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Groove.en-us\\*", lpFindFileData=0x12d570 | out: lpFindFileData=0x12d570*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd658ff0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x50d68e50, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x50d68e50, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1af3b6b0 [0081.830] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d580 | out: lpFindFileData=0x12d580*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd658ff0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x50d68e50, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x50d68e50, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0081.830] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d580 | out: lpFindFileData=0x12d580*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50cd08d0, ftCreationTime.dwHighDateTime=0x1d5e786, ftLastAccessTime.dwLowDateTime=0x50cd08d0, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x50d68e50, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x773, dwReserved0=0x0, dwReserved1=0x0, cFileName="Decrypt Instructions.txt", cAlternateFileName="DECRYP~1.TXT")) returned 1 [0081.830] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d580 | out: lpFindFileData=0x12d580*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee38cbf0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfd658ff0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xee38cbf0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x391, dwReserved0=0x0, dwReserved1=0x0, cFileName="GrooveMUI.XML", cAlternateFileName="GROOVE~1.XML")) returned 1 [0081.830] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d580 | out: lpFindFileData=0x12d580*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee803530, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfd67f150, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xee803530, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x5ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 1 [0081.830] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d580 | out: lpFindFileData=0x12d580*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee803530, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfd67f150, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xee803530, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x5ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 0 [0081.831] FindClose (in: hFindFile=0x1af3b6b0 | out: hFindFile=0x1af3b6b0) returned 1 [0081.831] SetErrorMode (uMode=0x0) returned 0x1 [0081.831] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\InfoPath.en-us", nBufferLength=0x105, lpBuffer=0x12d330, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\InfoPath.en-us", lpFilePart=0x0) returned 0x5e [0081.831] SetErrorMode (uMode=0x1) returned 0x0 [0081.831] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\InfoPath.en-us\\*", lpFindFileData=0x12d4d0 | out: lpFindFileData=0x12d4d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x112a3b30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x112a3b30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x112a3b30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1af3b6b0 [0081.840] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d4e0 | out: lpFindFileData=0x12d4e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x112a3b30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x112a3b30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x112a3b30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0081.840] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d4e0 | out: lpFindFileData=0x12d4e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf6e345a0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x112a3b30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf6e345a0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x4cf, dwReserved0=0x0, dwReserved1=0x0, cFileName="InfoPathMUI.XML", cAlternateFileName="INFOPA~1.XML")) returned 1 [0081.840] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d4e0 | out: lpFindFileData=0x12d4e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfa13c510, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x112a3b30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfa13c510, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x73c, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 1 [0081.840] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d4e0 | out: lpFindFileData=0x12d4e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfa13c510, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x112a3b30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfa13c510, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x73c, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 0 [0081.840] FindClose (in: hFindFile=0x1af3b6b0 | out: hFindFile=0x1af3b6b0) returned 1 [0081.840] SetErrorMode (uMode=0x0) returned 0x1 [0081.841] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\InfoPath.en-us\\Decrypt Instructions.txt", nBufferLength=0x105, lpBuffer=0x12d1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\InfoPath.en-us\\Decrypt Instructions.txt", lpFilePart=0x0) returned 0x77 [0081.841] SetErrorMode (uMode=0x1) returned 0x0 [0081.841] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\InfoPath.en-us\\Decrypt Instructions.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\infopath.en-us\\decrypt instructions.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1f0 [0081.872] SetErrorMode (uMode=0x0) returned 0x1 [0081.872] GetFileType (hFile=0x1f0) returned 0x1 [0081.873] WriteFile (in: hFile=0x1f0, lpBuffer=0x2818668*, nNumberOfBytesToWrite=0x773, lpNumberOfBytesWritten=0x12d748, lpOverlapped=0x0 | out: lpBuffer=0x2818668*, lpNumberOfBytesWritten=0x12d748*=0x773, lpOverlapped=0x0) returned 1 [0081.874] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\InfoPath.en-us", nBufferLength=0x105, lpBuffer=0x12d3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\InfoPath.en-us", lpFilePart=0x0) returned 0x5e [0081.874] SetErrorMode (uMode=0x1) returned 0x0 [0081.875] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\InfoPath.en-us\\*", lpFindFileData=0x12d570 | out: lpFindFileData=0x12d570*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x112a3b30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x50ddb270, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x50ddb270, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1af3b6b0 [0081.875] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d580 | out: lpFindFileData=0x12d580*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x112a3b30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x50ddb270, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x50ddb270, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0081.875] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d580 | out: lpFindFileData=0x12d580*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50d8efb0, ftCreationTime.dwHighDateTime=0x1d5e786, ftLastAccessTime.dwLowDateTime=0x50d8efb0, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x50ddb270, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x773, dwReserved0=0x0, dwReserved1=0x0, cFileName="Decrypt Instructions.txt", cAlternateFileName="DECRYP~1.TXT")) returned 1 [0081.875] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d580 | out: lpFindFileData=0x12d580*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf6e345a0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x112a3b30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf6e345a0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x4cf, dwReserved0=0x0, dwReserved1=0x0, cFileName="InfoPathMUI.XML", cAlternateFileName="INFOPA~1.XML")) returned 1 [0081.875] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d580 | out: lpFindFileData=0x12d580*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfa13c510, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x112a3b30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfa13c510, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x73c, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 1 [0081.875] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d580 | out: lpFindFileData=0x12d580*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfa13c510, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x112a3b30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfa13c510, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x73c, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 0 [0081.875] FindClose (in: hFindFile=0x1af3b6b0 | out: hFindFile=0x1af3b6b0) returned 1 [0081.875] SetErrorMode (uMode=0x0) returned 0x1 [0081.876] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us", nBufferLength=0x105, lpBuffer=0x12d330, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us", lpFilePart=0x0) returned 0x5c [0081.876] SetErrorMode (uMode=0x1) returned 0x0 [0081.876] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\*", lpFindFileData=0x12d4d0 | out: lpFindFileData=0x12d4d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee2ce510, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xc2600b20, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xc2600b20, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1af3b6b0 [0081.940] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d4e0 | out: lpFindFileData=0x12d4e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee2ce510, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xc2600b20, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xc2600b20, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0081.941] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d4e0 | out: lpFindFileData=0x12d4e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e9fff00, ftCreationTime.dwHighDateTime=0x1cba028, ftLastAccessTime.dwLowDateTime=0xc2600b20, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x3e9fff00, ftLastWriteTime.dwHighDateTime=0x1cba028, nFileSizeHigh=0x0, nFileSizeLow=0x3b78, dwReserved0=0x0, dwReserved1=0x0, cFileName="BRANDING.DLL", cAlternateFileName="")) returned 1 [0081.941] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d4e0 | out: lpFindFileData=0x12d4e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x470e1800, ftCreationTime.dwHighDateTime=0x1caccea, ftLastAccessTime.dwLowDateTime=0x15334ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x470e1800, ftLastWriteTime.dwHighDateTime=0x1caccea, nFileSizeHigh=0x0, nFileSizeLow=0x91975, dwReserved0=0x0, dwReserved1=0x0, cFileName="BRANDING.XML", cAlternateFileName="")) returned 1 [0081.941] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d4e0 | out: lpFindFileData=0x12d4e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4114ea00, ftCreationTime.dwHighDateTime=0x1ca6af2, ftLastAccessTime.dwLowDateTime=0xeef015d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x4114ea00, ftLastWriteTime.dwHighDateTime=0x1ca6af2, nFileSizeHigh=0x0, nFileSizeLow=0x11644, dwReserved0=0x0, dwReserved1=0x0, cFileName="OCT.CHM", cAlternateFileName="")) returned 1 [0081.941] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d4e0 | out: lpFindFileData=0x12d4e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe7c27050, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeefe5e10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe7c27050, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x15b5, dwReserved0=0x0, dwReserved1=0x0, cFileName="OfficeMUI.XML", cAlternateFileName="OFFICE~1.XML")) returned 1 [0081.941] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d4e0 | out: lpFindFileData=0x12d4e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe7b68970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf2b422b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe7b68970, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x333, dwReserved0=0x0, dwReserved1=0x0, cFileName="OfficeMUISet.XML", cAlternateFileName="OFFICE~2.XML")) returned 1 [0081.941] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d4e0 | out: lpFindFileData=0x12d4e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe164800, ftCreationTime.dwHighDateTime=0x1cac048, ftLastAccessTime.dwLowDateTime=0xeef4d890, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe164800, ftLastWriteTime.dwHighDateTime=0x1cac048, nFileSizeHigh=0x0, nFileSizeLow=0x2ed80, dwReserved0=0x0, dwReserved1=0x0, cFileName="OSETUPUI.DLL", cAlternateFileName="")) returned 1 [0081.941] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d4e0 | out: lpFindFileData=0x12d4e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd4804a00, ftCreationTime.dwHighDateTime=0x1cab7c8, ftLastAccessTime.dwLowDateTime=0xef00bf70, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xd4804a00, ftLastWriteTime.dwHighDateTime=0x1cab7c8, nFileSizeHigh=0x0, nFileSizeLow=0x3d90, dwReserved0=0x0, dwReserved1=0x0, cFileName="promointl.dll", cAlternateFileName="PROMOI~1.DLL")) returned 1 [0081.941] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d4e0 | out: lpFindFileData=0x12d4e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2d0b6300, ftCreationTime.dwHighDateTime=0x1ca9107, ftLastAccessTime.dwLowDateTime=0xef00bf70, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x2d0b6300, ftLastWriteTime.dwHighDateTime=0x1ca9107, nFileSizeHigh=0x0, nFileSizeLow=0x9339, dwReserved0=0x0, dwReserved1=0x0, cFileName="PSCONFIG.CHM", cAlternateFileName="")) returned 1 [0081.941] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d4e0 | out: lpFindFileData=0x12d4e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7a8bce00, ftCreationTime.dwHighDateTime=0x1ca910f, ftLastAccessTime.dwLowDateTime=0xef00bf70, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x7a8bce00, ftLastWriteTime.dwHighDateTime=0x1ca910f, nFileSizeHigh=0x0, nFileSizeLow=0x6931, dwReserved0=0x0, dwReserved1=0x0, cFileName="PSS10O.CHM", cAlternateFileName="")) returned 1 [0081.941] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d4e0 | out: lpFindFileData=0x12d4e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7d4800, ftCreationTime.dwHighDateTime=0x1ca910f, ftLastAccessTime.dwLowDateTime=0xef00bf70, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xa7d4800, ftLastWriteTime.dwHighDateTime=0x1ca910f, nFileSizeHigh=0x0, nFileSizeLow=0x6a3b, dwReserved0=0x0, dwReserved1=0x0, cFileName="PSS10R.CHM", cAlternateFileName="")) returned 1 [0081.941] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d4e0 | out: lpFindFileData=0x12d4e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x49087c00, ftCreationTime.dwHighDateTime=0x1ca95c1, ftLastAccessTime.dwLowDateTime=0xef058230, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x49087c00, ftLastWriteTime.dwHighDateTime=0x1ca95c1, nFileSizeHigh=0x0, nFileSizeLow=0x10676, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.CHM", cAlternateFileName="")) returned 1 [0081.941] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d4e0 | out: lpFindFileData=0x12d4e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe8728670, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf2b422b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe8728670, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x2488, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 1 [0081.941] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d4e0 | out: lpFindFileData=0x12d4e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe8728670, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf2b422b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe8728670, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x2488, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 0 [0081.942] FindClose (in: hFindFile=0x1af3b6b0 | out: hFindFile=0x1af3b6b0) returned 1 [0081.943] SetErrorMode (uMode=0x0) returned 0x1 [0081.946] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\Decrypt Instructions.txt", nBufferLength=0x105, lpBuffer=0x12d1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\Decrypt Instructions.txt", lpFilePart=0x0) returned 0x75 [0081.946] SetErrorMode (uMode=0x1) returned 0x0 [0081.946] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\Decrypt Instructions.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\office.en-us\\decrypt instructions.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1f0 [0081.947] SetErrorMode (uMode=0x0) returned 0x1 [0081.947] GetFileType (hFile=0x1f0) returned 0x1 [0081.947] WriteFile (in: hFile=0x1f0, lpBuffer=0x2820528*, nNumberOfBytesToWrite=0x773, lpNumberOfBytesWritten=0x12d748, lpOverlapped=0x0 | out: lpBuffer=0x2820528*, lpNumberOfBytesWritten=0x12d748*=0x773, lpOverlapped=0x0) returned 1 [0081.949] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us", nBufferLength=0x105, lpBuffer=0x12d3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us", lpFilePart=0x0) returned 0x5c [0081.949] SetErrorMode (uMode=0x1) returned 0x0 [0081.949] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\*", lpFindFileData=0x12d570 | out: lpFindFileData=0x12d570*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee2ce510, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x50e99950, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x50e99950, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1af3b6b0 [0081.949] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d580 | out: lpFindFileData=0x12d580*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee2ce510, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x50e99950, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x50e99950, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0081.949] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d580 | out: lpFindFileData=0x12d580*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e9fff00, ftCreationTime.dwHighDateTime=0x1cba028, ftLastAccessTime.dwLowDateTime=0xc2600b20, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x3e9fff00, ftLastWriteTime.dwHighDateTime=0x1cba028, nFileSizeHigh=0x0, nFileSizeLow=0x3b78, dwReserved0=0x0, dwReserved1=0x0, cFileName="BRANDING.DLL", cAlternateFileName="")) returned 1 [0081.949] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d580 | out: lpFindFileData=0x12d580*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x470e1800, ftCreationTime.dwHighDateTime=0x1caccea, ftLastAccessTime.dwLowDateTime=0x15334ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x470e1800, ftLastWriteTime.dwHighDateTime=0x1caccea, nFileSizeHigh=0x0, nFileSizeLow=0x91975, dwReserved0=0x0, dwReserved1=0x0, cFileName="BRANDING.XML", cAlternateFileName="")) returned 1 [0081.949] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d580 | out: lpFindFileData=0x12d580*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50e99950, ftCreationTime.dwHighDateTime=0x1d5e786, ftLastAccessTime.dwLowDateTime=0x50e99950, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x50e99950, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x773, dwReserved0=0x0, dwReserved1=0x0, cFileName="Decrypt Instructions.txt", cAlternateFileName="DECRYP~1.TXT")) returned 1 [0081.949] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d580 | out: lpFindFileData=0x12d580*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4114ea00, ftCreationTime.dwHighDateTime=0x1ca6af2, ftLastAccessTime.dwLowDateTime=0xeef015d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x4114ea00, ftLastWriteTime.dwHighDateTime=0x1ca6af2, nFileSizeHigh=0x0, nFileSizeLow=0x11644, dwReserved0=0x0, dwReserved1=0x0, cFileName="OCT.CHM", cAlternateFileName="")) returned 1 [0081.949] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d580 | out: lpFindFileData=0x12d580*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe7c27050, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeefe5e10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe7c27050, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x15b5, dwReserved0=0x0, dwReserved1=0x0, cFileName="OfficeMUI.XML", cAlternateFileName="OFFICE~1.XML")) returned 1 [0081.949] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d580 | out: lpFindFileData=0x12d580*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe7b68970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf2b422b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe7b68970, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x333, dwReserved0=0x0, dwReserved1=0x0, cFileName="OfficeMUISet.XML", cAlternateFileName="OFFICE~2.XML")) returned 1 [0081.949] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d580 | out: lpFindFileData=0x12d580*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe164800, ftCreationTime.dwHighDateTime=0x1cac048, ftLastAccessTime.dwLowDateTime=0xeef4d890, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe164800, ftLastWriteTime.dwHighDateTime=0x1cac048, nFileSizeHigh=0x0, nFileSizeLow=0x2ed80, dwReserved0=0x0, dwReserved1=0x0, cFileName="OSETUPUI.DLL", cAlternateFileName="")) returned 1 [0081.949] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d580 | out: lpFindFileData=0x12d580*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd4804a00, ftCreationTime.dwHighDateTime=0x1cab7c8, ftLastAccessTime.dwLowDateTime=0xef00bf70, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xd4804a00, ftLastWriteTime.dwHighDateTime=0x1cab7c8, nFileSizeHigh=0x0, nFileSizeLow=0x3d90, dwReserved0=0x0, dwReserved1=0x0, cFileName="promointl.dll", cAlternateFileName="PROMOI~1.DLL")) returned 1 [0081.949] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d580 | out: lpFindFileData=0x12d580*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2d0b6300, ftCreationTime.dwHighDateTime=0x1ca9107, ftLastAccessTime.dwLowDateTime=0xef00bf70, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x2d0b6300, ftLastWriteTime.dwHighDateTime=0x1ca9107, nFileSizeHigh=0x0, nFileSizeLow=0x9339, dwReserved0=0x0, dwReserved1=0x0, cFileName="PSCONFIG.CHM", cAlternateFileName="")) returned 1 [0081.950] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d580 | out: lpFindFileData=0x12d580*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7a8bce00, ftCreationTime.dwHighDateTime=0x1ca910f, ftLastAccessTime.dwLowDateTime=0xef00bf70, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x7a8bce00, ftLastWriteTime.dwHighDateTime=0x1ca910f, nFileSizeHigh=0x0, nFileSizeLow=0x6931, dwReserved0=0x0, dwReserved1=0x0, cFileName="PSS10O.CHM", cAlternateFileName="")) returned 1 [0081.950] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d580 | out: lpFindFileData=0x12d580*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7d4800, ftCreationTime.dwHighDateTime=0x1ca910f, ftLastAccessTime.dwLowDateTime=0xef00bf70, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xa7d4800, ftLastWriteTime.dwHighDateTime=0x1ca910f, nFileSizeHigh=0x0, nFileSizeLow=0x6a3b, dwReserved0=0x0, dwReserved1=0x0, cFileName="PSS10R.CHM", cAlternateFileName="")) returned 1 [0081.950] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d580 | out: lpFindFileData=0x12d580*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x49087c00, ftCreationTime.dwHighDateTime=0x1ca95c1, ftLastAccessTime.dwLowDateTime=0xef058230, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x49087c00, ftLastWriteTime.dwHighDateTime=0x1ca95c1, nFileSizeHigh=0x0, nFileSizeLow=0x10676, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.CHM", cAlternateFileName="")) returned 1 [0081.950] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d580 | out: lpFindFileData=0x12d580*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe8728670, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf2b422b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe8728670, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x2488, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 1 [0081.950] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d580 | out: lpFindFileData=0x12d580*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe8728670, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf2b422b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe8728670, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x2488, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 0 [0081.950] FindClose (in: hFindFile=0x1af3b6b0 | out: hFindFile=0x1af3b6b0) returned 1 [0081.950] SetErrorMode (uMode=0x0) returned 0x1 [0081.950] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.en-us", nBufferLength=0x105, lpBuffer=0x12d330, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.en-us", lpFilePart=0x0) returned 0x5e [0081.950] SetErrorMode (uMode=0x1) returned 0x0 [0081.950] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.en-us\\*", lpFindFileData=0x12d4d0 | out: lpFindFileData=0x12d4d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x19b82c30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x19b82c30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x19b82c30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1af3b6b0 [0082.005] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d4e0 | out: lpFindFileData=0x12d4e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x19b82c30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x19b82c30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x19b82c30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0082.005] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d4e0 | out: lpFindFileData=0x12d4e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfc138cb0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x19b82c30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfc138cb0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x567, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office32MUI.XML", cAlternateFileName="OFFICE~1.XML")) returned 1 [0082.005] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d4e0 | out: lpFindFileData=0x12d4e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfc3e4630, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x19b82c30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfc3e4630, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x93a, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 1 [0082.005] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d4e0 | out: lpFindFileData=0x12d4e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfc3e4630, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x19b82c30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfc3e4630, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x93a, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 0 [0082.005] FindClose (in: hFindFile=0x1af3b6b0 | out: hFindFile=0x1af3b6b0) returned 1 [0082.007] SetErrorMode (uMode=0x0) returned 0x1 [0082.008] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.en-us\\Decrypt Instructions.txt", nBufferLength=0x105, lpBuffer=0x12d1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.en-us\\Decrypt Instructions.txt", lpFilePart=0x0) returned 0x77 [0082.008] SetErrorMode (uMode=0x1) returned 0x0 [0082.008] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.en-us\\Decrypt Instructions.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\office32.en-us\\decrypt instructions.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1f0 [0083.040] SetErrorMode (uMode=0x0) returned 0x1 [0083.040] GetFileType (hFile=0x1f0) returned 0x1 [0083.040] WriteFile (in: hFile=0x1f0, lpBuffer=0x2827458*, nNumberOfBytesToWrite=0x773, lpNumberOfBytesWritten=0x12d748, lpOverlapped=0x0 | out: lpBuffer=0x2827458*, lpNumberOfBytesWritten=0x12d748*=0x773, lpOverlapped=0x0) returned 1 [0083.052] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.en-us", nBufferLength=0x105, lpBuffer=0x12d3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.en-us", lpFilePart=0x0) returned 0x5e [0083.052] SetErrorMode (uMode=0x1) returned 0x0 [0083.052] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.en-us\\*", lpFindFileData=0x12d570 | out: lpFindFileData=0x12d570*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x19b82c30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x51903990, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x51903990, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1af3b6b0 [0083.052] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d580 | out: lpFindFileData=0x12d580*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x19b82c30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x51903990, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x51903990, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0083.052] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d580 | out: lpFindFileData=0x12d580*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50f58030, ftCreationTime.dwHighDateTime=0x1d5e786, ftLastAccessTime.dwLowDateTime=0x50f58030, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x51929af0, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x773, dwReserved0=0x0, dwReserved1=0x0, cFileName="Decrypt Instructions.txt", cAlternateFileName="DECRYP~1.TXT")) returned 1 [0083.052] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d580 | out: lpFindFileData=0x12d580*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfc138cb0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x19b82c30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfc138cb0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x567, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office32MUI.XML", cAlternateFileName="OFFICE~1.XML")) returned 1 [0083.053] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d580 | out: lpFindFileData=0x12d580*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfc3e4630, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x19b82c30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfc3e4630, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x93a, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 1 [0083.053] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d580 | out: lpFindFileData=0x12d580*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfc3e4630, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x19b82c30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfc3e4630, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x93a, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 0 [0083.053] FindClose (in: hFindFile=0x1af3b6b0 | out: hFindFile=0x1af3b6b0) returned 1 [0083.053] SetErrorMode (uMode=0x0) returned 0x1 [0083.053] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.WW", nBufferLength=0x105, lpBuffer=0x12d330, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.WW", lpFilePart=0x0) returned 0x5b [0083.053] SetErrorMode (uMode=0x1) returned 0x0 [0083.053] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.WW\\*", lpFindFileData=0x12d4d0 | out: lpFindFileData=0x12d4d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x22200730, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x22200730, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x22200730, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1af3b6b0 [0083.855] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d4e0 | out: lpFindFileData=0x12d4e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x22200730, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x22200730, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x22200730, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0083.855] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d4e0 | out: lpFindFileData=0x12d4e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfe09b760, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x22200730, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfe09b760, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x10b2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office32WW.XML", cAlternateFileName="OFFICE~1.XML")) returned 1 [0083.855] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d4e0 | out: lpFindFileData=0x12d4e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfe09b760, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x22200730, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfe09b760, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x10b2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office32WW.XML", cAlternateFileName="OFFICE~1.XML")) returned 0 [0083.855] FindClose (in: hFindFile=0x1af3b6b0 | out: hFindFile=0x1af3b6b0) returned 1 [0083.856] SetErrorMode (uMode=0x0) returned 0x1 [0083.856] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.WW\\Decrypt Instructions.txt", nBufferLength=0x105, lpBuffer=0x12d1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.WW\\Decrypt Instructions.txt", lpFilePart=0x0) returned 0x74 [0083.856] SetErrorMode (uMode=0x1) returned 0x0 [0083.856] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.WW\\Decrypt Instructions.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\office32.ww\\decrypt instructions.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1f0 [0083.857] SetErrorMode (uMode=0x0) returned 0x1 [0083.857] GetFileType (hFile=0x1f0) returned 0x1 [0083.857] WriteFile (in: hFile=0x1f0, lpBuffer=0x282df78*, nNumberOfBytesToWrite=0x773, lpNumberOfBytesWritten=0x12d748, lpOverlapped=0x0 | out: lpBuffer=0x282df78*, lpNumberOfBytesWritten=0x12d748*=0x773, lpOverlapped=0x0) returned 1 [0083.858] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.WW", nBufferLength=0x105, lpBuffer=0x12d3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.WW", lpFilePart=0x0) returned 0x5b [0083.858] SetErrorMode (uMode=0x1) returned 0x0 [0083.858] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.WW\\*", lpFindFileData=0x12d570 | out: lpFindFileData=0x12d570*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x22200730, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x520c0110, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x520c0110, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1af3b6b0 [0083.859] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d580 | out: lpFindFileData=0x12d580*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x22200730, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x520c0110, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x520c0110, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0083.859] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d580 | out: lpFindFileData=0x12d580*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x520c0110, ftCreationTime.dwHighDateTime=0x1d5e786, ftLastAccessTime.dwLowDateTime=0x520c0110, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x520c0110, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x773, dwReserved0=0x0, dwReserved1=0x0, cFileName="Decrypt Instructions.txt", cAlternateFileName="DECRYP~1.TXT")) returned 1 [0083.859] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d580 | out: lpFindFileData=0x12d580*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfe09b760, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x22200730, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfe09b760, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x10b2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office32WW.XML", cAlternateFileName="OFFICE~1.XML")) returned 1 [0083.859] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d580 | out: lpFindFileData=0x12d580*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfe09b760, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x22200730, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfe09b760, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x10b2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office32WW.XML", cAlternateFileName="OFFICE~1.XML")) returned 0 [0083.859] FindClose (in: hFindFile=0x1af3b6b0 | out: hFindFile=0x1af3b6b0) returned 1 [0083.859] SetErrorMode (uMode=0x0) returned 0x1 [0083.859] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\OneNote.en-us", nBufferLength=0x105, lpBuffer=0x12d330, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\OneNote.en-us", lpFilePart=0x0) returned 0x5d [0083.859] SetErrorMode (uMode=0x1) returned 0x0 [0083.859] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\OneNote.en-us\\*", lpFindFileData=0x12d4d0 | out: lpFindFileData=0x12d4d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc840bb0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xc8d9130, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc8d9130, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1af3b6b0 [0083.901] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d4e0 | out: lpFindFileData=0x12d4e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc840bb0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xc8d9130, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc8d9130, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0083.901] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d4e0 | out: lpFindFileData=0x12d4e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf58ed930, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xc840bb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf58ed930, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x646, dwReserved0=0x0, dwReserved1=0x0, cFileName="OneNoteMUI.XML", cAlternateFileName="ONENOT~1.XML")) returned 1 [0083.901] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d4e0 | out: lpFindFileData=0x12d4e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf6e0d4a0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xc8d9130, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf6e0d4a0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x7c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 1 [0083.901] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d4e0 | out: lpFindFileData=0x12d4e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf6e0d4a0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xc8d9130, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf6e0d4a0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x7c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 0 [0083.901] FindClose (in: hFindFile=0x1af3b6b0 | out: hFindFile=0x1af3b6b0) returned 1 [0083.901] SetErrorMode (uMode=0x0) returned 0x1 [0083.902] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\OneNote.en-us\\Decrypt Instructions.txt", nBufferLength=0x105, lpBuffer=0x12d1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\OneNote.en-us\\Decrypt Instructions.txt", lpFilePart=0x0) returned 0x76 [0083.902] SetErrorMode (uMode=0x1) returned 0x0 [0083.902] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\OneNote.en-us\\Decrypt Instructions.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\onenote.en-us\\decrypt instructions.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1f0 [0083.938] SetErrorMode (uMode=0x0) returned 0x1 [0083.938] GetFileType (hFile=0x1f0) returned 0x1 [0083.938] WriteFile (in: hFile=0x1f0, lpBuffer=0x2834bf8*, nNumberOfBytesToWrite=0x773, lpNumberOfBytesWritten=0x12d748, lpOverlapped=0x0 | out: lpBuffer=0x2834bf8*, lpNumberOfBytesWritten=0x12d748*=0x773, lpOverlapped=0x0) returned 1 [0083.940] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\OneNote.en-us", nBufferLength=0x105, lpBuffer=0x12d3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\OneNote.en-us", lpFilePart=0x0) returned 0x5d [0083.940] SetErrorMode (uMode=0x1) returned 0x0 [0083.940] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\OneNote.en-us\\*", lpFindFileData=0x12d570 | out: lpFindFileData=0x12d570*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc840bb0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x5217e7f0, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x5217e7f0, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1af3b6b0 [0083.940] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d580 | out: lpFindFileData=0x12d580*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc840bb0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x5217e7f0, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x5217e7f0, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0083.940] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d580 | out: lpFindFileData=0x12d580*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x52132530, ftCreationTime.dwHighDateTime=0x1d5e786, ftLastAccessTime.dwLowDateTime=0x52132530, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x521a4950, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x773, dwReserved0=0x0, dwReserved1=0x0, cFileName="Decrypt Instructions.txt", cAlternateFileName="DECRYP~1.TXT")) returned 1 [0083.940] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d580 | out: lpFindFileData=0x12d580*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf58ed930, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xc840bb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf58ed930, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x646, dwReserved0=0x0, dwReserved1=0x0, cFileName="OneNoteMUI.XML", cAlternateFileName="ONENOT~1.XML")) returned 1 [0083.940] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d580 | out: lpFindFileData=0x12d580*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf6e0d4a0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xc8d9130, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf6e0d4a0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x7c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 1 [0083.940] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d580 | out: lpFindFileData=0x12d580*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf6e0d4a0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xc8d9130, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf6e0d4a0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x7c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 0 [0083.940] FindClose (in: hFindFile=0x1af3b6b0 | out: hFindFile=0x1af3b6b0) returned 1 [0083.940] SetErrorMode (uMode=0x0) returned 0x1 [0083.941] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Outlook.en-us", nBufferLength=0x105, lpBuffer=0x12d330, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Outlook.en-us", lpFilePart=0x0) returned 0x5d [0083.941] SetErrorMode (uMode=0x1) returned 0x0 [0083.941] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Outlook.en-us\\*", lpFindFileData=0x12d4d0 | out: lpFindFileData=0x12d4d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x14af010, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x2095e10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x2095e10, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1af3b6b0 [0083.944] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d4e0 | out: lpFindFileData=0x12d4e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x14af010, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x2095e10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x2095e10, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0083.944] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d4e0 | out: lpFindFileData=0x12d4e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee827f20, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x14af010, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xee827f20, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xc72, dwReserved0=0x0, dwReserved1=0x0, cFileName="OutlookMUI.XML", cAlternateFileName="OUTLOO~1.XML")) returned 1 [0083.944] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d4e0 | out: lpFindFileData=0x12d4e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf00db300, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x2095e10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf00db300, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x106f, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 1 [0083.944] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d4e0 | out: lpFindFileData=0x12d4e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf00db300, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x2095e10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf00db300, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x106f, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 0 [0083.944] FindClose (in: hFindFile=0x1af3b6b0 | out: hFindFile=0x1af3b6b0) returned 1 [0083.944] SetErrorMode (uMode=0x0) returned 0x1 [0083.945] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Outlook.en-us\\Decrypt Instructions.txt", nBufferLength=0x105, lpBuffer=0x12d1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Outlook.en-us\\Decrypt Instructions.txt", lpFilePart=0x0) returned 0x76 [0083.945] SetErrorMode (uMode=0x1) returned 0x0 [0083.945] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Outlook.en-us\\Decrypt Instructions.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\outlook.en-us\\decrypt instructions.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1f0 [0083.949] SetErrorMode (uMode=0x0) returned 0x1 [0083.949] GetFileType (hFile=0x1f0) returned 0x1 [0083.949] WriteFile (in: hFile=0x1f0, lpBuffer=0x283b878*, nNumberOfBytesToWrite=0x773, lpNumberOfBytesWritten=0x12d748, lpOverlapped=0x0 | out: lpBuffer=0x283b878*, lpNumberOfBytesWritten=0x12d748*=0x773, lpOverlapped=0x0) returned 1 [0083.950] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Outlook.en-us", nBufferLength=0x105, lpBuffer=0x12d3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Outlook.en-us", lpFilePart=0x0) returned 0x5d [0083.950] SetErrorMode (uMode=0x1) returned 0x0 [0083.950] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Outlook.en-us\\*", lpFindFileData=0x12d570 | out: lpFindFileData=0x12d570*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x14af010, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x521a4950, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x521a4950, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1af3b6b0 [0083.951] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d580 | out: lpFindFileData=0x12d580*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x14af010, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x521a4950, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x521a4950, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0083.951] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d580 | out: lpFindFileData=0x12d580*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x521a4950, ftCreationTime.dwHighDateTime=0x1d5e786, ftLastAccessTime.dwLowDateTime=0x521a4950, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x521a4950, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x773, dwReserved0=0x0, dwReserved1=0x0, cFileName="Decrypt Instructions.txt", cAlternateFileName="DECRYP~1.TXT")) returned 1 [0083.951] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d580 | out: lpFindFileData=0x12d580*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee827f20, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x14af010, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xee827f20, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xc72, dwReserved0=0x0, dwReserved1=0x0, cFileName="OutlookMUI.XML", cAlternateFileName="OUTLOO~1.XML")) returned 1 [0083.951] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d580 | out: lpFindFileData=0x12d580*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf00db300, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x2095e10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf00db300, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x106f, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 1 [0083.951] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d580 | out: lpFindFileData=0x12d580*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf00db300, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x2095e10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf00db300, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x106f, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 0 [0083.951] FindClose (in: hFindFile=0x1af3b6b0 | out: hFindFile=0x1af3b6b0) returned 1 [0083.951] SetErrorMode (uMode=0x0) returned 0x1 [0083.951] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PowerPoint.en-us", nBufferLength=0x105, lpBuffer=0x12d330, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PowerPoint.en-us", lpFilePart=0x0) returned 0x60 [0083.951] SetErrorMode (uMode=0x1) returned 0x0 [0083.951] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PowerPoint.en-us\\*", lpFindFileData=0x12d4d0 | out: lpFindFileData=0x12d4d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf5db14d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf5e95d10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf5e95d10, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1af3b6b0 [0083.975] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d4e0 | out: lpFindFileData=0x12d4e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf5db14d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf5e95d10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf5e95d10, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0083.975] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d4e0 | out: lpFindFileData=0x12d4e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe8728670, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf5db14d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe8728670, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x5aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerPointMUI.XML", cAlternateFileName="POWERP~1.XML")) returned 1 [0083.975] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d4e0 | out: lpFindFileData=0x12d4e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xecdfa490, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf5e95d10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xecdfa490, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x75e, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 1 [0083.975] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d4e0 | out: lpFindFileData=0x12d4e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xecdfa490, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf5e95d10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xecdfa490, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x75e, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 0 [0083.975] FindClose (in: hFindFile=0x1af3b6b0 | out: hFindFile=0x1af3b6b0) returned 1 [0083.976] SetErrorMode (uMode=0x0) returned 0x1 [0083.976] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PowerPoint.en-us\\Decrypt Instructions.txt", nBufferLength=0x105, lpBuffer=0x12d1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PowerPoint.en-us\\Decrypt Instructions.txt", lpFilePart=0x0) returned 0x79 [0083.976] SetErrorMode (uMode=0x1) returned 0x0 [0083.976] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PowerPoint.en-us\\Decrypt Instructions.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\powerpoint.en-us\\decrypt instructions.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1f0 [0084.989] SetErrorMode (uMode=0x0) returned 0x1 [0084.989] GetFileType (hFile=0x1f0) returned 0x1 [0084.990] WriteFile (in: hFile=0x1f0, lpBuffer=0x2842558*, nNumberOfBytesToWrite=0x773, lpNumberOfBytesWritten=0x12d748, lpOverlapped=0x0 | out: lpBuffer=0x2842558*, lpNumberOfBytesWritten=0x12d748*=0x773, lpOverlapped=0x0) returned 1 [0084.992] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PowerPoint.en-us", nBufferLength=0x105, lpBuffer=0x12d3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PowerPoint.en-us", lpFilePart=0x0) returned 0x60 [0084.993] SetErrorMode (uMode=0x1) returned 0x0 [0084.993] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PowerPoint.en-us\\*", lpFindFileData=0x12d570 | out: lpFindFileData=0x12d570*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf5db14d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x52b9c570, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x52b9c570, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1af3b6b0 [0084.994] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d580 | out: lpFindFileData=0x12d580*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf5db14d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x52b9c570, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x52b9c570, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0084.994] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d580 | out: lpFindFileData=0x12d580*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x521f0c10, ftCreationTime.dwHighDateTime=0x1d5e786, ftLastAccessTime.dwLowDateTime=0x521f0c10, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x52b9c570, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x773, dwReserved0=0x0, dwReserved1=0x0, cFileName="Decrypt Instructions.txt", cAlternateFileName="DECRYP~1.TXT")) returned 1 [0084.994] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d580 | out: lpFindFileData=0x12d580*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe8728670, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf5db14d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe8728670, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x5aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerPointMUI.XML", cAlternateFileName="POWERP~1.XML")) returned 1 [0084.994] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d580 | out: lpFindFileData=0x12d580*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xecdfa490, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf5e95d10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xecdfa490, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x75e, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 1 [0084.994] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d580 | out: lpFindFileData=0x12d580*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xecdfa490, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf5e95d10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xecdfa490, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x75e, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 0 [0084.994] FindClose (in: hFindFile=0x1af3b6b0 | out: hFindFile=0x1af3b6b0) returned 1 [0084.994] SetErrorMode (uMode=0x0) returned 0x1 [0084.995] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PRJPROR", nBufferLength=0x105, lpBuffer=0x12d330, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PRJPROR", lpFilePart=0x0) returned 0x57 [0084.995] SetErrorMode (uMode=0x1) returned 0x0 [0084.995] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PRJPROR\\*", lpFindFileData=0x12d4d0 | out: lpFindFileData=0x12d4d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbe2e8f80, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0xbec48620, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xbec48620, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1af3b6b0 [0084.995] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d4e0 | out: lpFindFileData=0x12d4e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbe2e8f80, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0xbec48620, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xbec48620, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0084.995] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d4e0 | out: lpFindFileData=0x12d4e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa60fd8f0, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0xbe2e8f80, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa60fd8f0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x1915, dwReserved0=0x0, dwReserved1=0x0, cFileName="PrjProrWW.XML", cAlternateFileName="PRJPRO~1.XML")) returned 1 [0084.995] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d4e0 | out: lpFindFileData=0x12d4e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c227b0, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0xbec48620, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa8c227b0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x412b, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 1 [0084.995] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d4e0 | out: lpFindFileData=0x12d4e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c227b0, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0xbec48620, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa8c227b0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x412b, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 0 [0084.995] FindClose (in: hFindFile=0x1af3b6b0 | out: hFindFile=0x1af3b6b0) returned 1 [0084.996] SetErrorMode (uMode=0x0) returned 0x1 [0084.997] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PRJPROR\\Decrypt Instructions.txt", nBufferLength=0x105, lpBuffer=0x12d1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PRJPROR\\Decrypt Instructions.txt", lpFilePart=0x0) returned 0x70 [0084.997] SetErrorMode (uMode=0x1) returned 0x0 [0084.998] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PRJPROR\\Decrypt Instructions.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\prjpror\\decrypt instructions.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1f0 [0084.998] SetErrorMode (uMode=0x0) returned 0x1 [0084.998] GetFileType (hFile=0x1f0) returned 0x1 [0084.998] WriteFile (in: hFile=0x1f0, lpBuffer=0x28491a0*, nNumberOfBytesToWrite=0x773, lpNumberOfBytesWritten=0x12d748, lpOverlapped=0x0 | out: lpBuffer=0x28491a0*, lpNumberOfBytesWritten=0x12d748*=0x773, lpOverlapped=0x0) returned 1 [0084.999] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PRJPROR", nBufferLength=0x105, lpBuffer=0x12d3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PRJPROR", lpFilePart=0x0) returned 0x57 [0084.999] SetErrorMode (uMode=0x1) returned 0x0 [0085.000] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PRJPROR\\*", lpFindFileData=0x12d570 | out: lpFindFileData=0x12d570*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbe2e8f80, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0x52b9c570, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x52b9c570, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1af3b6b0 [0085.000] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d580 | out: lpFindFileData=0x12d580*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbe2e8f80, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0x52b9c570, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x52b9c570, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0085.000] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d580 | out: lpFindFileData=0x12d580*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x52b9c570, ftCreationTime.dwHighDateTime=0x1d5e786, ftLastAccessTime.dwLowDateTime=0x52b9c570, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x52bc26d0, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x773, dwReserved0=0x0, dwReserved1=0x0, cFileName="Decrypt Instructions.txt", cAlternateFileName="DECRYP~1.TXT")) returned 1 [0085.000] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d580 | out: lpFindFileData=0x12d580*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa60fd8f0, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0xbe2e8f80, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa60fd8f0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x1915, dwReserved0=0x0, dwReserved1=0x0, cFileName="PrjProrWW.XML", cAlternateFileName="PRJPRO~1.XML")) returned 1 [0085.000] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d580 | out: lpFindFileData=0x12d580*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c227b0, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0xbec48620, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa8c227b0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x412b, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 1 [0085.000] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d580 | out: lpFindFileData=0x12d580*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c227b0, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0xbec48620, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa8c227b0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x412b, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 0 [0085.000] FindClose (in: hFindFile=0x1af3b6b0 | out: hFindFile=0x1af3b6b0) returned 1 [0085.000] SetErrorMode (uMode=0x0) returned 0x1 [0085.000] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Project.en-us", nBufferLength=0x105, lpBuffer=0x12d330, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Project.en-us", lpFilePart=0x0) returned 0x5d [0085.000] SetErrorMode (uMode=0x1) returned 0x0 [0085.000] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Project.en-us\\*", lpFindFileData=0x12d4d0 | out: lpFindFileData=0x12d4d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaf551ba0, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0xaf577d00, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xaf577d00, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1af3b6b0 [0085.166] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d4e0 | out: lpFindFileData=0x12d4e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaf551ba0, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0xaf577d00, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xaf577d00, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0085.166] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d4e0 | out: lpFindFileData=0x12d4e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa5b2ebe0, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0xaf551ba0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa5b2ebe0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x5ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="ProjectMUI.XML", cAlternateFileName="PROJEC~1.XML")) returned 1 [0085.168] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d4e0 | out: lpFindFileData=0x12d4e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa5bc88d0, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0xaf577d00, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa5bc88d0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x750, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 1 [0085.168] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d4e0 | out: lpFindFileData=0x12d4e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa5bc88d0, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0xaf577d00, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa5bc88d0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x750, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 0 [0085.187] FindClose (in: hFindFile=0x1af3b6b0 | out: hFindFile=0x1af3b6b0) returned 1 [0085.623] SetErrorMode (uMode=0x0) returned 0x1 [0085.624] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Project.en-us\\Decrypt Instructions.txt", nBufferLength=0x105, lpBuffer=0x12d1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Project.en-us\\Decrypt Instructions.txt", lpFilePart=0x0) returned 0x76 [0085.624] SetErrorMode (uMode=0x1) returned 0x0 [0085.625] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Project.en-us\\Decrypt Instructions.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\project.en-us\\decrypt instructions.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1f0 [0085.685] SetErrorMode (uMode=0x0) returned 0x1 [0085.685] GetFileType (hFile=0x1f0) returned 0x1 [0085.685] WriteFile (in: hFile=0x1f0, lpBuffer=0x284fde0*, nNumberOfBytesToWrite=0x773, lpNumberOfBytesWritten=0x12d748, lpOverlapped=0x0 | out: lpBuffer=0x284fde0*, lpNumberOfBytesWritten=0x12d748*=0x773, lpOverlapped=0x0) returned 1 [0085.702] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Project.en-us", nBufferLength=0x105, lpBuffer=0x12d3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Project.en-us", lpFilePart=0x0) returned 0x5d [0085.702] SetErrorMode (uMode=0x1) returned 0x0 [0085.702] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Project.en-us\\*", lpFindFileData=0x12d570 | out: lpFindFileData=0x12d570*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaf551ba0, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0x532281f0, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x532281f0, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1af3b6b0 [0085.702] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d580 | out: lpFindFileData=0x12d580*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaf551ba0, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0x532281f0, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x532281f0, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0085.702] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d580 | out: lpFindFileData=0x12d580*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x531b5dd0, ftCreationTime.dwHighDateTime=0x1d5e786, ftLastAccessTime.dwLowDateTime=0x531b5dd0, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x532744b0, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x773, dwReserved0=0x0, dwReserved1=0x0, cFileName="Decrypt Instructions.txt", cAlternateFileName="DECRYP~1.TXT")) returned 1 [0085.702] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d580 | out: lpFindFileData=0x12d580*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa5b2ebe0, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0xaf551ba0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa5b2ebe0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x5ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="ProjectMUI.XML", cAlternateFileName="PROJEC~1.XML")) returned 1 [0085.702] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d580 | out: lpFindFileData=0x12d580*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa5bc88d0, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0xaf577d00, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa5bc88d0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x750, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 1 [0085.702] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d580 | out: lpFindFileData=0x12d580*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa5bc88d0, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0xaf577d00, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa5bc88d0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x750, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 0 [0085.703] FindClose (in: hFindFile=0x1af3b6b0 | out: hFindFile=0x1af3b6b0) returned 1 [0085.703] SetErrorMode (uMode=0x0) returned 0x1 [0085.703] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.en", nBufferLength=0x105, lpBuffer=0x12d330, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.en", lpFilePart=0x0) returned 0x58 [0085.703] SetErrorMode (uMode=0x1) returned 0x0 [0085.703] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.en\\*", lpFindFileData=0x12d4d0 | out: lpFindFileData=0x12d4d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x99177d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x99177d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x99177d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1af3b6b0 [0085.741] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d4e0 | out: lpFindFileData=0x12d4e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x99177d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x99177d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x99177d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0085.741] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d4e0 | out: lpFindFileData=0x12d4e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf01be3d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x99177d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf01be3d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x543, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.XML", cAlternateFileName="")) returned 1 [0085.741] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d4e0 | out: lpFindFileData=0x12d4e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf01be3d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x99177d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf01be3d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x543, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.XML", cAlternateFileName="")) returned 0 [0085.741] FindClose (in: hFindFile=0x1af3b6b0 | out: hFindFile=0x1af3b6b0) returned 1 [0085.742] SetErrorMode (uMode=0x0) returned 0x1 [0085.742] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.en\\Decrypt Instructions.txt", nBufferLength=0x105, lpBuffer=0x12d1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.en\\Decrypt Instructions.txt", lpFilePart=0x0) returned 0x71 [0085.742] SetErrorMode (uMode=0x1) returned 0x0 [0085.742] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.en\\Decrypt Instructions.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\proof.en\\decrypt instructions.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1f0 [0085.743] SetErrorMode (uMode=0x0) returned 0x1 [0085.743] GetFileType (hFile=0x1f0) returned 0x1 [0085.743] WriteFile (in: hFile=0x1f0, lpBuffer=0x2856818*, nNumberOfBytesToWrite=0x773, lpNumberOfBytesWritten=0x12d748, lpOverlapped=0x0 | out: lpBuffer=0x2856818*, lpNumberOfBytesWritten=0x12d748*=0x773, lpOverlapped=0x0) returned 1 [0085.744] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.en", nBufferLength=0x105, lpBuffer=0x12d3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.en", lpFilePart=0x0) returned 0x58 [0085.744] SetErrorMode (uMode=0x1) returned 0x0 [0085.744] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.en\\*", lpFindFileData=0x12d570 | out: lpFindFileData=0x12d570*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x99177d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x532c0770, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x532c0770, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1af3b6b0 [0085.745] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d580 | out: lpFindFileData=0x12d580*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x99177d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x532c0770, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x532c0770, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0085.745] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d580 | out: lpFindFileData=0x12d580*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x532c0770, ftCreationTime.dwHighDateTime=0x1d5e786, ftLastAccessTime.dwLowDateTime=0x532c0770, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x532c0770, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x773, dwReserved0=0x0, dwReserved1=0x0, cFileName="Decrypt Instructions.txt", cAlternateFileName="DECRYP~1.TXT")) returned 1 [0085.745] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d580 | out: lpFindFileData=0x12d580*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf01be3d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x99177d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf01be3d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x543, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.XML", cAlternateFileName="")) returned 1 [0085.745] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d580 | out: lpFindFileData=0x12d580*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf01be3d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x99177d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf01be3d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x543, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.XML", cAlternateFileName="")) returned 0 [0085.745] FindClose (in: hFindFile=0x1af3b6b0 | out: hFindFile=0x1af3b6b0) returned 1 [0085.745] SetErrorMode (uMode=0x0) returned 0x1 [0085.745] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.es", nBufferLength=0x105, lpBuffer=0x12d330, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.es", lpFilePart=0x0) returned 0x58 [0085.745] SetErrorMode (uMode=0x1) returned 0x0 [0085.745] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.es\\*", lpFindFileData=0x12d4d0 | out: lpFindFileData=0x12d4d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5b7fe90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x5b7fe90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5b7fe90, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1af3b6b0 [0085.761] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d4e0 | out: lpFindFileData=0x12d4e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5b7fe90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x5b7fe90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5b7fe90, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0085.761] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d4e0 | out: lpFindFileData=0x12d4e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf4e37e00, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x5b7fe90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf4e37e00, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x5b1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.XML", cAlternateFileName="")) returned 1 [0085.761] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d4e0 | out: lpFindFileData=0x12d4e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf4e37e00, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x5b7fe90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf4e37e00, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x5b1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.XML", cAlternateFileName="")) returned 0 [0085.761] FindClose (in: hFindFile=0x1af3b6b0 | out: hFindFile=0x1af3b6b0) returned 1 [0085.762] SetErrorMode (uMode=0x0) returned 0x1 [0085.762] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.es\\Decrypt Instructions.txt", nBufferLength=0x105, lpBuffer=0x12d1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.es\\Decrypt Instructions.txt", lpFilePart=0x0) returned 0x71 [0085.762] SetErrorMode (uMode=0x1) returned 0x0 [0085.763] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.es\\Decrypt Instructions.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\proof.es\\decrypt instructions.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1f0 [0085.763] SetErrorMode (uMode=0x0) returned 0x1 [0085.763] GetFileType (hFile=0x1f0) returned 0x1 [0085.775] WriteFile (in: hFile=0x1f0, lpBuffer=0x285d1b0*, nNumberOfBytesToWrite=0x773, lpNumberOfBytesWritten=0x12d748, lpOverlapped=0x0 | out: lpBuffer=0x285d1b0*, lpNumberOfBytesWritten=0x12d748*=0x773, lpOverlapped=0x0) returned 1 [0085.777] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.es", nBufferLength=0x105, lpBuffer=0x12d3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.es", lpFilePart=0x0) returned 0x58 [0085.777] SetErrorMode (uMode=0x1) returned 0x0 [0085.777] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.es\\*", lpFindFileData=0x12d570 | out: lpFindFileData=0x12d570*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5b7fe90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x532e68d0, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x532e68d0, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1af3b6b0 [0085.777] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d580 | out: lpFindFileData=0x12d580*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5b7fe90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x532e68d0, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x532e68d0, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0085.777] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d580 | out: lpFindFileData=0x12d580*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x532e68d0, ftCreationTime.dwHighDateTime=0x1d5e786, ftLastAccessTime.dwLowDateTime=0x532e68d0, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x5330ca30, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x773, dwReserved0=0x0, dwReserved1=0x0, cFileName="Decrypt Instructions.txt", cAlternateFileName="DECRYP~1.TXT")) returned 1 [0085.777] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d580 | out: lpFindFileData=0x12d580*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf4e37e00, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x5b7fe90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf4e37e00, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x5b1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.XML", cAlternateFileName="")) returned 1 [0085.777] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d580 | out: lpFindFileData=0x12d580*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf4e37e00, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x5b7fe90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf4e37e00, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x5b1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.XML", cAlternateFileName="")) returned 0 [0085.778] FindClose (in: hFindFile=0x1af3b6b0 | out: hFindFile=0x1af3b6b0) returned 1 [0085.778] SetErrorMode (uMode=0x0) returned 0x1 [0085.778] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.fr", nBufferLength=0x105, lpBuffer=0x12d330, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.fr", lpFilePart=0x0) returned 0x58 [0085.778] SetErrorMode (uMode=0x1) returned 0x0 [0085.778] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.fr\\*", lpFindFileData=0x12d4d0 | out: lpFindFileData=0x12d4d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7941190, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x7941190, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7941190, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1af3b6b0 [0085.782] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d4e0 | out: lpFindFileData=0x12d4e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7941190, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x7941190, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7941190, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0085.782] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d4e0 | out: lpFindFileData=0x12d4e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf2bd90c0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x7941190, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf2bd90c0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x5b2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.XML", cAlternateFileName="")) returned 1 [0085.782] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d4e0 | out: lpFindFileData=0x12d4e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf2bd90c0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x7941190, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf2bd90c0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x5b2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.XML", cAlternateFileName="")) returned 0 [0085.782] FindClose (in: hFindFile=0x1af3b6b0 | out: hFindFile=0x1af3b6b0) returned 1 [0085.785] SetErrorMode (uMode=0x0) returned 0x1 [0085.786] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.fr\\Decrypt Instructions.txt", nBufferLength=0x105, lpBuffer=0x12d1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.fr\\Decrypt Instructions.txt", lpFilePart=0x0) returned 0x71 [0085.786] SetErrorMode (uMode=0x1) returned 0x0 [0085.786] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.fr\\Decrypt Instructions.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\proof.fr\\decrypt instructions.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1f0 [0085.790] SetErrorMode (uMode=0x0) returned 0x1 [0085.790] GetFileType (hFile=0x1f0) returned 0x1 [0085.790] WriteFile (in: hFile=0x1f0, lpBuffer=0x2863b48*, nNumberOfBytesToWrite=0x773, lpNumberOfBytesWritten=0x12d748, lpOverlapped=0x0 | out: lpBuffer=0x2863b48*, lpNumberOfBytesWritten=0x12d748*=0x773, lpOverlapped=0x0) returned 1 [0085.791] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.fr", nBufferLength=0x105, lpBuffer=0x12d3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.fr", lpFilePart=0x0) returned 0x58 [0085.791] SetErrorMode (uMode=0x1) returned 0x0 [0085.791] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.fr\\*", lpFindFileData=0x12d570 | out: lpFindFileData=0x12d570*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7941190, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x53332b90, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x53332b90, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1af3b6b0 [0085.792] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d580 | out: lpFindFileData=0x12d580*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7941190, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x53332b90, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x53332b90, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0085.792] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d580 | out: lpFindFileData=0x12d580*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53332b90, ftCreationTime.dwHighDateTime=0x1d5e786, ftLastAccessTime.dwLowDateTime=0x53332b90, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x53332b90, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x773, dwReserved0=0x0, dwReserved1=0x0, cFileName="Decrypt Instructions.txt", cAlternateFileName="DECRYP~1.TXT")) returned 1 [0085.792] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d580 | out: lpFindFileData=0x12d580*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf2bd90c0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x7941190, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf2bd90c0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x5b2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.XML", cAlternateFileName="")) returned 1 [0085.792] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d580 | out: lpFindFileData=0x12d580*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf2bd90c0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x7941190, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf2bd90c0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x5b2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.XML", cAlternateFileName="")) returned 0 [0085.792] FindClose (in: hFindFile=0x1af3b6b0 | out: hFindFile=0x1af3b6b0) returned 1 [0085.792] SetErrorMode (uMode=0x0) returned 0x1 [0085.792] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proofing.en-us", nBufferLength=0x105, lpBuffer=0x12d330, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proofing.en-us", lpFilePart=0x0) returned 0x5e [0085.792] SetErrorMode (uMode=0x1) returned 0x0 [0085.792] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proofing.en-us\\*", lpFindFileData=0x12d4d0 | out: lpFindFileData=0x12d4d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xab640f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xab8a250, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xab8a250, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1af3b6b0 [0085.793] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d4e0 | out: lpFindFileData=0x12d4e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xab640f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xab8a250, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xab8a250, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0085.793] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d4e0 | out: lpFindFileData=0x12d4e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf00db300, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xab8a250, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf00db300, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x32b, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proofing.XML", cAlternateFileName="")) returned 1 [0085.793] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d4e0 | out: lpFindFileData=0x12d4e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf58c6830, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xab8a250, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf58c6830, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x16fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 1 [0085.793] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d4e0 | out: lpFindFileData=0x12d4e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf58c6830, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xab8a250, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf58c6830, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x16fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 0 [0085.793] FindClose (in: hFindFile=0x1af3b6b0 | out: hFindFile=0x1af3b6b0) returned 1 [0085.793] SetErrorMode (uMode=0x0) returned 0x1 [0085.794] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proofing.en-us\\Decrypt Instructions.txt", nBufferLength=0x105, lpBuffer=0x12d1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proofing.en-us\\Decrypt Instructions.txt", lpFilePart=0x0) returned 0x77 [0085.794] SetErrorMode (uMode=0x1) returned 0x0 [0085.794] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proofing.en-us\\Decrypt Instructions.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\proofing.en-us\\decrypt instructions.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1f0 [0085.795] SetErrorMode (uMode=0x0) returned 0x1 [0085.795] GetFileType (hFile=0x1f0) returned 0x1 [0085.795] WriteFile (in: hFile=0x1f0, lpBuffer=0x286a718*, nNumberOfBytesToWrite=0x773, lpNumberOfBytesWritten=0x12d748, lpOverlapped=0x0 | out: lpBuffer=0x286a718*, lpNumberOfBytesWritten=0x12d748*=0x773, lpOverlapped=0x0) returned 1 [0085.798] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proofing.en-us", nBufferLength=0x105, lpBuffer=0x12d3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proofing.en-us", lpFilePart=0x0) returned 0x5e [0085.798] SetErrorMode (uMode=0x1) returned 0x0 [0085.798] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proofing.en-us\\*", lpFindFileData=0x12d570 | out: lpFindFileData=0x12d570*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xab640f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x53332b90, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x53332b90, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1af3b6b0 [0085.799] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d580 | out: lpFindFileData=0x12d580*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xab640f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x53332b90, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x53332b90, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0085.799] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d580 | out: lpFindFileData=0x12d580*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53332b90, ftCreationTime.dwHighDateTime=0x1d5e786, ftLastAccessTime.dwLowDateTime=0x53332b90, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x53358cf0, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x773, dwReserved0=0x0, dwReserved1=0x0, cFileName="Decrypt Instructions.txt", cAlternateFileName="DECRYP~1.TXT")) returned 1 [0085.799] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d580 | out: lpFindFileData=0x12d580*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf00db300, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xab8a250, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf00db300, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x32b, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proofing.XML", cAlternateFileName="")) returned 1 [0085.799] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d580 | out: lpFindFileData=0x12d580*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf58c6830, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xab8a250, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf58c6830, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x16fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 1 [0085.799] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d580 | out: lpFindFileData=0x12d580*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf58c6830, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xab8a250, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf58c6830, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x16fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 0 [0085.799] FindClose (in: hFindFile=0x1af3b6b0 | out: hFindFile=0x1af3b6b0) returned 1 [0085.799] SetErrorMode (uMode=0x0) returned 0x1 [0085.799] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PROPLUSR", nBufferLength=0x105, lpBuffer=0x12d330, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PROPLUSR", lpFilePart=0x0) returned 0x58 [0085.799] SetErrorMode (uMode=0x1) returned 0x0 [0085.799] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PROPLUSR\\*", lpFindFileData=0x12d4d0 | out: lpFindFileData=0x12d4d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a95a430, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6cd64f50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6cd64f50, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1af3b6b0 [0085.828] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d4e0 | out: lpFindFileData=0x12d4e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a95a430, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6cd64f50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6cd64f50, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0085.828] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d4e0 | out: lpFindFileData=0x12d4e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x170fe40, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6cd64f50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x170fe40, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x41d4, dwReserved0=0x0, dwReserved1=0x0, cFileName="ProPlusrWW.XML", cAlternateFileName="PROPLU~1.XML")) returned 1 [0085.828] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d4e0 | out: lpFindFileData=0x12d4e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x18177c50, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x5a95a430, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x18177c50, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x7976, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 1 [0085.829] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d4e0 | out: lpFindFileData=0x12d4e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x18177c50, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x5a95a430, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x18177c50, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x7976, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 0 [0085.829] FindClose (in: hFindFile=0x1af3b6b0 | out: hFindFile=0x1af3b6b0) returned 1 [0085.829] SetErrorMode (uMode=0x0) returned 0x1 [0085.830] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PROPLUSR\\Decrypt Instructions.txt", nBufferLength=0x105, lpBuffer=0x12d1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PROPLUSR\\Decrypt Instructions.txt", lpFilePart=0x0) returned 0x71 [0085.830] SetErrorMode (uMode=0x1) returned 0x0 [0085.830] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PROPLUSR\\Decrypt Instructions.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\proplusr\\decrypt instructions.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1f0 [0085.831] SetErrorMode (uMode=0x0) returned 0x1 [0085.831] GetFileType (hFile=0x1f0) returned 0x1 [0085.831] WriteFile (in: hFile=0x1f0, lpBuffer=0x2871320*, nNumberOfBytesToWrite=0x773, lpNumberOfBytesWritten=0x12d748, lpOverlapped=0x0 | out: lpBuffer=0x2871320*, lpNumberOfBytesWritten=0x12d748*=0x773, lpOverlapped=0x0) returned 1 [0085.833] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PROPLUSR", nBufferLength=0x105, lpBuffer=0x12d3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PROPLUSR", lpFilePart=0x0) returned 0x58 [0085.833] SetErrorMode (uMode=0x1) returned 0x0 [0085.833] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PROPLUSR\\*", lpFindFileData=0x12d570 | out: lpFindFileData=0x12d570*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a95a430, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x533a4fb0, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x533a4fb0, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1af3b6b0 [0085.833] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d580 | out: lpFindFileData=0x12d580*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a95a430, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x533a4fb0, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x533a4fb0, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0085.833] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d580 | out: lpFindFileData=0x12d580*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x533a4fb0, ftCreationTime.dwHighDateTime=0x1d5e786, ftLastAccessTime.dwLowDateTime=0x533a4fb0, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x533a4fb0, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x773, dwReserved0=0x0, dwReserved1=0x0, cFileName="Decrypt Instructions.txt", cAlternateFileName="DECRYP~1.TXT")) returned 1 [0085.833] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d580 | out: lpFindFileData=0x12d580*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x170fe40, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6cd64f50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x170fe40, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x41d4, dwReserved0=0x0, dwReserved1=0x0, cFileName="ProPlusrWW.XML", cAlternateFileName="PROPLU~1.XML")) returned 1 [0085.833] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d580 | out: lpFindFileData=0x12d580*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x18177c50, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x5a95a430, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x18177c50, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x7976, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 1 [0085.833] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d580 | out: lpFindFileData=0x12d580*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x18177c50, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x5a95a430, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x18177c50, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x7976, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 0 [0085.833] FindClose (in: hFindFile=0x1af3b6b0 | out: hFindFile=0x1af3b6b0) returned 1 [0085.834] SetErrorMode (uMode=0x0) returned 0x1 [0085.834] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Publisher.en-us", nBufferLength=0x105, lpBuffer=0x12d330, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Publisher.en-us", lpFilePart=0x0) returned 0x5f [0085.834] SetErrorMode (uMode=0x1) returned 0x0 [0085.834] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Publisher.en-us\\*", lpFindFileData=0x12d4d0 | out: lpFindFileData=0x12d4d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ba9ab90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x1bc89d70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1bc89d70, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1af3b6b0 [0086.584] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d4e0 | out: lpFindFileData=0x12d4e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ba9ab90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x1bc89d70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1bc89d70, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0086.612] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d4e0 | out: lpFindFileData=0x12d4e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfc3e4630, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x1ba9ab90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfc3e4630, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x5aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="PublisherMUI.XML", cAlternateFileName="PUBLIS~1.XML")) returned 1 [0086.612] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d4e0 | out: lpFindFileData=0x12d4e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfc8a9170, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x1bc89d70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfc8a9170, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x648, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 1 [0086.612] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d4e0 | out: lpFindFileData=0x12d4e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfc8a9170, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x1bc89d70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfc8a9170, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x648, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 0 [0086.612] FindClose (in: hFindFile=0x1af3b6b0 | out: hFindFile=0x1af3b6b0) returned 1 [0086.613] SetErrorMode (uMode=0x0) returned 0x1 [0086.614] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Publisher.en-us\\Decrypt Instructions.txt", nBufferLength=0x105, lpBuffer=0x12d1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Publisher.en-us\\Decrypt Instructions.txt", lpFilePart=0x0) returned 0x78 [0086.614] SetErrorMode (uMode=0x1) returned 0x0 [0086.614] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Publisher.en-us\\Decrypt Instructions.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\publisher.en-us\\decrypt instructions.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1f0 [0086.915] SetErrorMode (uMode=0x0) returned 0x1 [0086.915] GetFileType (hFile=0x1f0) returned 0x1 [0086.915] WriteFile (in: hFile=0x1f0, lpBuffer=0x2877fc0*, nNumberOfBytesToWrite=0x773, lpNumberOfBytesWritten=0x12d748, lpOverlapped=0x0 | out: lpBuffer=0x2877fc0*, lpNumberOfBytesWritten=0x12d748*=0x773, lpOverlapped=0x0) returned 1 [0086.917] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Publisher.en-us", nBufferLength=0x105, lpBuffer=0x12d3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Publisher.en-us", lpFilePart=0x0) returned 0x5f [0086.917] SetErrorMode (uMode=0x1) returned 0x0 [0086.917] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Publisher.en-us\\*", lpFindFileData=0x12d570 | out: lpFindFileData=0x12d570*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ba9ab90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x53de8e90, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x53de8e90, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1af3b6b0 [0086.917] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d580 | out: lpFindFileData=0x12d580*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ba9ab90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x53de8e90, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x53de8e90, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0086.917] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d580 | out: lpFindFileData=0x12d580*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53b15470, ftCreationTime.dwHighDateTime=0x1d5e786, ftLastAccessTime.dwLowDateTime=0x53b15470, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x53de8e90, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x773, dwReserved0=0x0, dwReserved1=0x0, cFileName="Decrypt Instructions.txt", cAlternateFileName="DECRYP~1.TXT")) returned 1 [0086.917] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d580 | out: lpFindFileData=0x12d580*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfc3e4630, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x1ba9ab90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfc3e4630, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x5aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="PublisherMUI.XML", cAlternateFileName="PUBLIS~1.XML")) returned 1 [0086.917] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d580 | out: lpFindFileData=0x12d580*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfc8a9170, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x1bc89d70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfc8a9170, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x648, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 1 [0086.918] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d580 | out: lpFindFileData=0x12d580*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfc8a9170, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x1bc89d70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfc8a9170, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x648, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 0 [0086.918] FindClose (in: hFindFile=0x1af3b6b0 | out: hFindFile=0x1af3b6b0) returned 1 [0086.918] SetErrorMode (uMode=0x0) returned 0x1 [0086.918] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Visio.en-us", nBufferLength=0x105, lpBuffer=0x12d330, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Visio.en-us", lpFilePart=0x0) returned 0x5b [0086.918] SetErrorMode (uMode=0x1) returned 0x0 [0086.918] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Visio.en-us\\*", lpFindFileData=0x12d4d0 | out: lpFindFileData=0x12d4d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50b66320, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x50da17c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x50da17c0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1af3b6b0 [0086.979] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d4e0 | out: lpFindFileData=0x12d4e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50b66320, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x50da17c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x50da17c0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0086.979] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d4e0 | out: lpFindFileData=0x12d4e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x43bdc500, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x50da17c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x43bdc500, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x1861, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 1 [0086.979] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d4e0 | out: lpFindFileData=0x12d4e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4359ac00, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x50b66320, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x4359ac00, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x251f, dwReserved0=0x0, dwReserved1=0x0, cFileName="VisioMUI.XML", cAlternateFileName="")) returned 1 [0086.979] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d4e0 | out: lpFindFileData=0x12d4e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4359ac00, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x50b66320, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x4359ac00, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x251f, dwReserved0=0x0, dwReserved1=0x0, cFileName="VisioMUI.XML", cAlternateFileName="")) returned 0 [0086.980] FindClose (in: hFindFile=0x1af3b6b0 | out: hFindFile=0x1af3b6b0) returned 1 [0086.980] SetErrorMode (uMode=0x0) returned 0x1 [0086.981] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Visio.en-us\\Decrypt Instructions.txt", nBufferLength=0x105, lpBuffer=0x12d1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Visio.en-us\\Decrypt Instructions.txt", lpFilePart=0x0) returned 0x74 [0086.981] SetErrorMode (uMode=0x1) returned 0x0 [0086.981] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Visio.en-us\\Decrypt Instructions.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\visio.en-us\\decrypt instructions.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1f0 [0086.981] SetErrorMode (uMode=0x0) returned 0x1 [0086.982] GetFileType (hFile=0x1f0) returned 0x1 [0086.982] WriteFile (in: hFile=0x1f0, lpBuffer=0x287ec20*, nNumberOfBytesToWrite=0x773, lpNumberOfBytesWritten=0x12d748, lpOverlapped=0x0 | out: lpBuffer=0x287ec20*, lpNumberOfBytesWritten=0x12d748*=0x773, lpOverlapped=0x0) returned 1 [0087.030] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Visio.en-us", nBufferLength=0x105, lpBuffer=0x12d3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Visio.en-us", lpFilePart=0x0) returned 0x5b [0087.030] SetErrorMode (uMode=0x1) returned 0x0 [0087.030] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Visio.en-us\\*", lpFindFileData=0x12d570 | out: lpFindFileData=0x12d570*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50b66320, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x53e81410, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x53e81410, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1af3b6b0 [0087.032] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d580 | out: lpFindFileData=0x12d580*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50b66320, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x53e81410, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x53e81410, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0087.033] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d580 | out: lpFindFileData=0x12d580*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53e81410, ftCreationTime.dwHighDateTime=0x1d5e786, ftLastAccessTime.dwLowDateTime=0x53e81410, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x53ef3830, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x773, dwReserved0=0x0, dwReserved1=0x0, cFileName="Decrypt Instructions.txt", cAlternateFileName="DECRYP~1.TXT")) returned 1 [0087.033] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d580 | out: lpFindFileData=0x12d580*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x43bdc500, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x50da17c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x43bdc500, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x1861, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 1 [0087.033] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d580 | out: lpFindFileData=0x12d580*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4359ac00, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x50b66320, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x4359ac00, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x251f, dwReserved0=0x0, dwReserved1=0x0, cFileName="VisioMUI.XML", cAlternateFileName="")) returned 1 [0087.033] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d580 | out: lpFindFileData=0x12d580*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4359ac00, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x50b66320, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x4359ac00, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x251f, dwReserved0=0x0, dwReserved1=0x0, cFileName="VisioMUI.XML", cAlternateFileName="")) returned 0 [0087.033] FindClose (in: hFindFile=0x1af3b6b0 | out: hFindFile=0x1af3b6b0) returned 1 [0087.033] SetErrorMode (uMode=0x0) returned 0x1 [0087.033] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\VISIOR", nBufferLength=0x105, lpBuffer=0x12d330, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\VISIOR", lpFilePart=0x0) returned 0x56 [0087.034] SetErrorMode (uMode=0x1) returned 0x0 [0087.034] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\VISIOR\\*", lpFindFileData=0x12d4d0 | out: lpFindFileData=0x12d4d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x83258520, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x84c615c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x84c615c0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1af3b6b0 [0087.034] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d4e0 | out: lpFindFileData=0x12d4e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x83258520, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x84c615c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x84c615c0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0087.034] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d4e0 | out: lpFindFileData=0x12d4e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4a6d3200, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x84c615c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x4a6d3200, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x5061, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 1 [0087.034] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d4e0 | out: lpFindFileData=0x12d4e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x468a2b70, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x83258520, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x468a2b70, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x2213, dwReserved0=0x0, dwReserved1=0x0, cFileName="VisiorWW.XML", cAlternateFileName="")) returned 1 [0087.034] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d4e0 | out: lpFindFileData=0x12d4e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x468a2b70, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x83258520, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x468a2b70, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x2213, dwReserved0=0x0, dwReserved1=0x0, cFileName="VisiorWW.XML", cAlternateFileName="")) returned 0 [0087.035] FindClose (in: hFindFile=0x1af3b6b0 | out: hFindFile=0x1af3b6b0) returned 1 [0087.035] SetErrorMode (uMode=0x0) returned 0x1 [0087.036] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\VISIOR\\Decrypt Instructions.txt", nBufferLength=0x105, lpBuffer=0x12d1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\VISIOR\\Decrypt Instructions.txt", lpFilePart=0x0) returned 0x6f [0087.036] SetErrorMode (uMode=0x1) returned 0x0 [0087.036] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\VISIOR\\Decrypt Instructions.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\visior\\decrypt instructions.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1f0 [0087.041] SetErrorMode (uMode=0x0) returned 0x1 [0087.041] GetFileType (hFile=0x1f0) returned 0x1 [0087.044] WriteFile (in: hFile=0x1f0, lpBuffer=0x28857a8*, nNumberOfBytesToWrite=0x773, lpNumberOfBytesWritten=0x12d748, lpOverlapped=0x0 | out: lpBuffer=0x28857a8*, lpNumberOfBytesWritten=0x12d748*=0x773, lpOverlapped=0x0) returned 1 [0087.046] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\VISIOR", nBufferLength=0x105, lpBuffer=0x12d3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\VISIOR", lpFilePart=0x0) returned 0x56 [0087.046] SetErrorMode (uMode=0x1) returned 0x0 [0087.046] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\VISIOR\\*", lpFindFileData=0x12d570 | out: lpFindFileData=0x12d570*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x83258520, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x53f19990, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x53f19990, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1af3b6b0 [0087.046] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d580 | out: lpFindFileData=0x12d580*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x83258520, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x53f19990, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x53f19990, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0087.046] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d580 | out: lpFindFileData=0x12d580*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53f19990, ftCreationTime.dwHighDateTime=0x1d5e786, ftLastAccessTime.dwLowDateTime=0x53f19990, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x53f3faf0, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x773, dwReserved0=0x0, dwReserved1=0x0, cFileName="Decrypt Instructions.txt", cAlternateFileName="DECRYP~1.TXT")) returned 1 [0087.046] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d580 | out: lpFindFileData=0x12d580*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4a6d3200, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x84c615c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x4a6d3200, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x5061, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 1 [0087.046] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d580 | out: lpFindFileData=0x12d580*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x468a2b70, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x83258520, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x468a2b70, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x2213, dwReserved0=0x0, dwReserved1=0x0, cFileName="VisiorWW.XML", cAlternateFileName="")) returned 1 [0087.047] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d580 | out: lpFindFileData=0x12d580*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x468a2b70, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x83258520, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x468a2b70, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x2213, dwReserved0=0x0, dwReserved1=0x0, cFileName="VisiorWW.XML", cAlternateFileName="")) returned 0 [0087.047] FindClose (in: hFindFile=0x1af3b6b0 | out: hFindFile=0x1af3b6b0) returned 1 [0087.047] SetErrorMode (uMode=0x0) returned 0x1 [0087.047] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Word.en-us", nBufferLength=0x105, lpBuffer=0x12d330, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Word.en-us", lpFilePart=0x0) returned 0x5a [0087.047] SetErrorMode (uMode=0x1) returned 0x0 [0087.047] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Word.en-us\\*", lpFindFileData=0x12d4d0 | out: lpFindFileData=0x12d4d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1e501370, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x1e501370, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1e501370, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1af3b6b0 [0087.052] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d4e0 | out: lpFindFileData=0x12d4e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1e501370, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x1e501370, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1e501370, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0087.052] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d4e0 | out: lpFindFileData=0x12d4e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfe076d70, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x1e501370, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfe076d70, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x978, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 1 [0087.052] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d4e0 | out: lpFindFileData=0x12d4e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfc8a9170, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x1e501370, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfc8a9170, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x708, dwReserved0=0x0, dwReserved1=0x0, cFileName="WordMUI.XML", cAlternateFileName="")) returned 1 [0087.052] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d4e0 | out: lpFindFileData=0x12d4e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfc8a9170, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x1e501370, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfc8a9170, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x708, dwReserved0=0x0, dwReserved1=0x0, cFileName="WordMUI.XML", cAlternateFileName="")) returned 0 [0087.052] FindClose (in: hFindFile=0x1af3b6b0 | out: hFindFile=0x1af3b6b0) returned 1 [0087.052] SetErrorMode (uMode=0x0) returned 0x1 [0087.053] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Word.en-us\\Decrypt Instructions.txt", nBufferLength=0x105, lpBuffer=0x12d1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Word.en-us\\Decrypt Instructions.txt", lpFilePart=0x0) returned 0x73 [0087.053] SetErrorMode (uMode=0x1) returned 0x0 [0087.053] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Word.en-us\\Decrypt Instructions.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\word.en-us\\decrypt instructions.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1f0 [0087.054] SetErrorMode (uMode=0x0) returned 0x1 [0087.054] GetFileType (hFile=0x1f0) returned 0x1 [0087.054] WriteFile (in: hFile=0x1f0, lpBuffer=0x288c348*, nNumberOfBytesToWrite=0x773, lpNumberOfBytesWritten=0x12d748, lpOverlapped=0x0 | out: lpBuffer=0x288c348*, lpNumberOfBytesWritten=0x12d748*=0x773, lpOverlapped=0x0) returned 1 [0087.056] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Word.en-us", nBufferLength=0x105, lpBuffer=0x12d3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Word.en-us", lpFilePart=0x0) returned 0x5a [0087.056] SetErrorMode (uMode=0x1) returned 0x0 [0087.056] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Word.en-us\\*", lpFindFileData=0x12d570 | out: lpFindFileData=0x12d570*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1e501370, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x53f3faf0, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x53f3faf0, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1af3b6b0 [0087.056] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d580 | out: lpFindFileData=0x12d580*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1e501370, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x53f3faf0, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x53f3faf0, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0087.056] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d580 | out: lpFindFileData=0x12d580*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53f3faf0, ftCreationTime.dwHighDateTime=0x1d5e786, ftLastAccessTime.dwLowDateTime=0x53f3faf0, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x53f3faf0, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x773, dwReserved0=0x0, dwReserved1=0x0, cFileName="Decrypt Instructions.txt", cAlternateFileName="DECRYP~1.TXT")) returned 1 [0087.056] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d580 | out: lpFindFileData=0x12d580*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfe076d70, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x1e501370, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfe076d70, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x978, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 1 [0087.057] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d580 | out: lpFindFileData=0x12d580*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfc8a9170, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x1e501370, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfc8a9170, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x708, dwReserved0=0x0, dwReserved1=0x0, cFileName="WordMUI.XML", cAlternateFileName="")) returned 1 [0087.057] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d580 | out: lpFindFileData=0x12d580*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfc8a9170, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x1e501370, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfc8a9170, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x708, dwReserved0=0x0, dwReserved1=0x0, cFileName="WordMUI.XML", cAlternateFileName="")) returned 0 [0087.057] FindClose (in: hFindFile=0x1af3b6b0 | out: hFindFile=0x1af3b6b0) returned 1 [0087.057] SetErrorMode (uMode=0x0) returned 0x1 [0087.057] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform", nBufferLength=0x105, lpBuffer=0x12d3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform", lpFilePart=0x0) returned 0x4f [0087.057] SetErrorMode (uMode=0x1) returned 0x0 [0087.057] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e54b70, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6c23c830, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6c23c830, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1af3b6b0 [0087.080] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5a0 | out: lpFindFileData=0x12d5a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e54b70, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6c23c830, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6c23c830, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0087.080] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5a0 | out: lpFindFileData=0x12d5a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb169e000, ftCreationTime.dwHighDateTime=0x1ca911f, ftLastAccessTime.dwLowDateTime=0x6c23c830, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb169e000, ftLastWriteTime.dwHighDateTime=0x1ca911f, nFileSizeHigh=0x0, nFileSizeLow=0x24500, dwReserved0=0x0, dwReserved1=0x0, cFileName="OSPPC.DLL", cAlternateFileName="")) returned 1 [0087.080] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5a0 | out: lpFindFileData=0x12d5a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb169e000, ftCreationTime.dwHighDateTime=0x1ca911f, ftLastAccessTime.dwLowDateTime=0x59922e50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb169e000, ftLastWriteTime.dwHighDateTime=0x1ca911f, nFileSizeHigh=0x0, nFileSizeLow=0x1be700, dwReserved0=0x0, dwReserved1=0x0, cFileName="OSPPCEXT.DLL", cAlternateFileName="")) returned 1 [0087.081] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5a0 | out: lpFindFileData=0x12d5a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb169e000, ftCreationTime.dwHighDateTime=0x1ca911f, ftLastAccessTime.dwLowDateTime=0x6c23c830, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb169e000, ftLastWriteTime.dwHighDateTime=0x1ca911f, nFileSizeHigh=0x0, nFileSizeLow=0x2d7e, dwReserved0=0x0, dwReserved1=0x0, cFileName="osppobjs-spp-plugin-manifest-signed.xrm-ms", cAlternateFileName="OSPPOB~1.XRM")) returned 1 [0087.081] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5a0 | out: lpFindFileData=0x12d5a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb169e000, ftCreationTime.dwHighDateTime=0x1ca911f, ftLastAccessTime.dwLowDateTime=0x59948fb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb169e000, ftLastWriteTime.dwHighDateTime=0x1ca911f, nFileSizeHigh=0x0, nFileSizeLow=0x212b00, dwReserved0=0x0, dwReserved1=0x0, cFileName="OSPPOBJS.DLL", cAlternateFileName="")) returned 1 [0087.081] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5a0 | out: lpFindFileData=0x12d5a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf332800, ftCreationTime.dwHighDateTime=0x1cabc8a, ftLastAccessTime.dwLowDateTime=0x59948fb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf332800, ftLastWriteTime.dwHighDateTime=0x1cabc8a, nFileSizeHigh=0x0, nFileSizeLow=0x3d60, dwReserved0=0x0, dwReserved1=0x0, cFileName="OSPPREARM.EXE", cAlternateFileName="OSPPRE~1.EXE")) returned 1 [0087.081] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5a0 | out: lpFindFileData=0x12d5a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb169e000, ftCreationTime.dwHighDateTime=0x1ca911f, ftLastAccessTime.dwLowDateTime=0x59995270, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb169e000, ftLastWriteTime.dwHighDateTime=0x1ca911f, nFileSizeHigh=0x0, nFileSizeLow=0x4b2700, dwReserved0=0x0, dwReserved1=0x0, cFileName="OSPPSVC.EXE", cAlternateFileName="")) returned 1 [0087.081] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5a0 | out: lpFindFileData=0x12d5a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb169e000, ftCreationTime.dwHighDateTime=0x1ca911f, ftLastAccessTime.dwLowDateTime=0x59995270, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb169e000, ftLastWriteTime.dwHighDateTime=0x1ca911f, nFileSizeHigh=0x0, nFileSizeLow=0x23b10, dwReserved0=0x0, dwReserved1=0x0, cFileName="OSPPWMI.DLL", cAlternateFileName="")) returned 1 [0087.081] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5a0 | out: lpFindFileData=0x12d5a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb169e000, ftCreationTime.dwHighDateTime=0x1ca911f, ftLastAccessTime.dwLowDateTime=0x6c23c830, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb169e000, ftLastWriteTime.dwHighDateTime=0x1ca911f, nFileSizeHigh=0x0, nFileSizeLow=0xba5e, dwReserved0=0x0, dwReserved1=0x0, cFileName="OSPPWMI.MOF", cAlternateFileName="")) returned 1 [0087.081] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5a0 | out: lpFindFileData=0x12d5a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb169e000, ftCreationTime.dwHighDateTime=0x1ca911f, ftLastAccessTime.dwLowDateTime=0x6c23c830, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb169e000, ftLastWriteTime.dwHighDateTime=0x1ca911f, nFileSizeHigh=0x0, nFileSizeLow=0xba5e, dwReserved0=0x0, dwReserved1=0x0, cFileName="OSPPWMI.MOF", cAlternateFileName="")) returned 0 [0087.081] FindClose (in: hFindFile=0x1af3b6b0 | out: hFindFile=0x1af3b6b0) returned 1 [0087.082] SetErrorMode (uMode=0x0) returned 0x1 [0087.085] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\Decrypt Instructions.txt", nBufferLength=0x105, lpBuffer=0x12d2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\Decrypt Instructions.txt", lpFilePart=0x0) returned 0x68 [0087.085] SetErrorMode (uMode=0x1) returned 0x0 [0087.086] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\Decrypt Instructions.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\officesoftwareprotectionplatform\\decrypt instructions.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1f0 [0087.087] SetErrorMode (uMode=0x0) returned 0x1 [0087.088] GetFileType (hFile=0x1f0) returned 0x1 [0087.088] WriteFile (in: hFile=0x1f0, lpBuffer=0x2893890*, nNumberOfBytesToWrite=0x773, lpNumberOfBytesWritten=0x12d808, lpOverlapped=0x0 | out: lpBuffer=0x2893890*, lpNumberOfBytesWritten=0x12d808*=0x773, lpOverlapped=0x0) returned 1 [0087.089] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform", nBufferLength=0x105, lpBuffer=0x12d490, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform", lpFilePart=0x0) returned 0x4f [0087.089] SetErrorMode (uMode=0x1) returned 0x0 [0087.090] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\*", lpFindFileData=0x12d630 | out: lpFindFileData=0x12d630*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e54b70, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x53f8bdb0, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x53f8bdb0, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1af3b6b0 [0087.090] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d640 | out: lpFindFileData=0x12d640*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e54b70, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x53f8bdb0, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x53f8bdb0, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0087.090] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d640 | out: lpFindFileData=0x12d640*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53f8bdb0, ftCreationTime.dwHighDateTime=0x1d5e786, ftLastAccessTime.dwLowDateTime=0x53f8bdb0, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x53f8bdb0, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x773, dwReserved0=0x0, dwReserved1=0x0, cFileName="Decrypt Instructions.txt", cAlternateFileName="DECRYP~1.TXT")) returned 1 [0087.090] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d640 | out: lpFindFileData=0x12d640*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb169e000, ftCreationTime.dwHighDateTime=0x1ca911f, ftLastAccessTime.dwLowDateTime=0x6c23c830, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb169e000, ftLastWriteTime.dwHighDateTime=0x1ca911f, nFileSizeHigh=0x0, nFileSizeLow=0x24500, dwReserved0=0x0, dwReserved1=0x0, cFileName="OSPPC.DLL", cAlternateFileName="")) returned 1 [0087.090] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d640 | out: lpFindFileData=0x12d640*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb169e000, ftCreationTime.dwHighDateTime=0x1ca911f, ftLastAccessTime.dwLowDateTime=0x59922e50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb169e000, ftLastWriteTime.dwHighDateTime=0x1ca911f, nFileSizeHigh=0x0, nFileSizeLow=0x1be700, dwReserved0=0x0, dwReserved1=0x0, cFileName="OSPPCEXT.DLL", cAlternateFileName="")) returned 1 [0087.090] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d640 | out: lpFindFileData=0x12d640*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb169e000, ftCreationTime.dwHighDateTime=0x1ca911f, ftLastAccessTime.dwLowDateTime=0x6c23c830, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb169e000, ftLastWriteTime.dwHighDateTime=0x1ca911f, nFileSizeHigh=0x0, nFileSizeLow=0x2d7e, dwReserved0=0x0, dwReserved1=0x0, cFileName="osppobjs-spp-plugin-manifest-signed.xrm-ms", cAlternateFileName="OSPPOB~1.XRM")) returned 1 [0087.090] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d640 | out: lpFindFileData=0x12d640*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb169e000, ftCreationTime.dwHighDateTime=0x1ca911f, ftLastAccessTime.dwLowDateTime=0x59948fb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb169e000, ftLastWriteTime.dwHighDateTime=0x1ca911f, nFileSizeHigh=0x0, nFileSizeLow=0x212b00, dwReserved0=0x0, dwReserved1=0x0, cFileName="OSPPOBJS.DLL", cAlternateFileName="")) returned 1 [0087.090] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d640 | out: lpFindFileData=0x12d640*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf332800, ftCreationTime.dwHighDateTime=0x1cabc8a, ftLastAccessTime.dwLowDateTime=0x59948fb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf332800, ftLastWriteTime.dwHighDateTime=0x1cabc8a, nFileSizeHigh=0x0, nFileSizeLow=0x3d60, dwReserved0=0x0, dwReserved1=0x0, cFileName="OSPPREARM.EXE", cAlternateFileName="OSPPRE~1.EXE")) returned 1 [0087.091] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d640 | out: lpFindFileData=0x12d640*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb169e000, ftCreationTime.dwHighDateTime=0x1ca911f, ftLastAccessTime.dwLowDateTime=0x59995270, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb169e000, ftLastWriteTime.dwHighDateTime=0x1ca911f, nFileSizeHigh=0x0, nFileSizeLow=0x4b2700, dwReserved0=0x0, dwReserved1=0x0, cFileName="OSPPSVC.EXE", cAlternateFileName="")) returned 1 [0087.091] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d640 | out: lpFindFileData=0x12d640*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb169e000, ftCreationTime.dwHighDateTime=0x1ca911f, ftLastAccessTime.dwLowDateTime=0x59995270, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb169e000, ftLastWriteTime.dwHighDateTime=0x1ca911f, nFileSizeHigh=0x0, nFileSizeLow=0x23b10, dwReserved0=0x0, dwReserved1=0x0, cFileName="OSPPWMI.DLL", cAlternateFileName="")) returned 1 [0087.091] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d640 | out: lpFindFileData=0x12d640*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb169e000, ftCreationTime.dwHighDateTime=0x1ca911f, ftLastAccessTime.dwLowDateTime=0x6c23c830, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb169e000, ftLastWriteTime.dwHighDateTime=0x1ca911f, nFileSizeHigh=0x0, nFileSizeLow=0xba5e, dwReserved0=0x0, dwReserved1=0x0, cFileName="OSPPWMI.MOF", cAlternateFileName="")) returned 1 [0087.091] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d640 | out: lpFindFileData=0x12d640*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb169e000, ftCreationTime.dwHighDateTime=0x1ca911f, ftLastAccessTime.dwLowDateTime=0x6c23c830, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb169e000, ftLastWriteTime.dwHighDateTime=0x1ca911f, nFileSizeHigh=0x0, nFileSizeLow=0xba5e, dwReserved0=0x0, dwReserved1=0x0, cFileName="OSPPWMI.MOF", cAlternateFileName="")) returned 0 [0087.091] FindClose (in: hFindFile=0x1af3b6b0 | out: hFindFile=0x1af3b6b0) returned 1 [0087.091] SetErrorMode (uMode=0x0) returned 0x1 [0087.091] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\PROOF", nBufferLength=0x105, lpBuffer=0x12d3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\PROOF", lpFilePart=0x0) returned 0x34 [0087.091] SetErrorMode (uMode=0x1) returned 0x0 [0087.091] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\PROOF\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5b0da70, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x69e61cd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x69e61cd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1af3b6b0 [0087.093] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5a0 | out: lpFindFileData=0x12d5a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5b0da70, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x69e61cd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x69e61cd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0087.093] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5a0 | out: lpFindFileData=0x12d5a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa07d0e00, ftCreationTime.dwHighDateTime=0x1ca2cea, ftLastAccessTime.dwLowDateTime=0x69e61cd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa07d0e00, ftLastWriteTime.dwHighDateTime=0x1ca2cea, nFileSizeHigh=0x0, nFileSizeLow=0x90540, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSLID.DLL", cAlternateFileName="")) returned 1 [0087.093] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5a0 | out: lpFindFileData=0x12d5a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x782b2c00, ftCreationTime.dwHighDateTime=0x1bada3f, ftLastAccessTime.dwLowDateTime=0x98a53b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x782b2c00, ftLastWriteTime.dwHighDateTime=0x1bada3f, nFileSizeHigh=0x0, nFileSizeLow=0x6c67b, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSWDS_EN.LEX", cAlternateFileName="")) returned 1 [0087.093] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5a0 | out: lpFindFileData=0x12d5a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe5e2ea00, ftCreationTime.dwHighDateTime=0x1bdf5d3, ftLastAccessTime.dwLowDateTime=0x5b0da70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe5e2ea00, ftLastWriteTime.dwHighDateTime=0x1bdf5d3, nFileSizeHigh=0x0, nFileSizeLow=0x60983, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSWDS_ES.LEX", cAlternateFileName="")) returned 1 [0087.093] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5a0 | out: lpFindFileData=0x12d5a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcf3c9300, ftCreationTime.dwHighDateTime=0x1bdf5d3, ftLastAccessTime.dwLowDateTime=0x78ced70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xcf3c9300, ftLastWriteTime.dwHighDateTime=0x1bdf5d3, nFileSizeHigh=0x0, nFileSizeLow=0x482ef, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSWDS_FR.LEX", cAlternateFileName="")) returned 1 [0087.094] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5a0 | out: lpFindFileData=0x12d5a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcf3c9300, ftCreationTime.dwHighDateTime=0x1bdf5d3, ftLastAccessTime.dwLowDateTime=0x78ced70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xcf3c9300, ftLastWriteTime.dwHighDateTime=0x1bdf5d3, nFileSizeHigh=0x0, nFileSizeLow=0x482ef, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSWDS_FR.LEX", cAlternateFileName="")) returned 0 [0087.094] FindClose (in: hFindFile=0x1af3b6b0 | out: hFindFile=0x1af3b6b0) returned 1 [0087.094] SetErrorMode (uMode=0x0) returned 0x1 [0087.095] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\PROOF\\Decrypt Instructions.txt", nBufferLength=0x105, lpBuffer=0x12d2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\PROOF\\Decrypt Instructions.txt", lpFilePart=0x0) returned 0x4d [0087.095] SetErrorMode (uMode=0x1) returned 0x0 [0087.095] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\PROOF\\Decrypt Instructions.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\proof\\decrypt instructions.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1f0 [0087.105] SetErrorMode (uMode=0x0) returned 0x1 [0087.105] GetFileType (hFile=0x1f0) returned 0x1 [0087.105] WriteFile (in: hFile=0x1f0, lpBuffer=0x289a540*, nNumberOfBytesToWrite=0x773, lpNumberOfBytesWritten=0x12d808, lpOverlapped=0x0 | out: lpBuffer=0x289a540*, lpNumberOfBytesWritten=0x12d808*=0x773, lpOverlapped=0x0) returned 1 [0087.106] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\PROOF", nBufferLength=0x105, lpBuffer=0x12d490, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\PROOF", lpFilePart=0x0) returned 0x34 [0087.107] SetErrorMode (uMode=0x1) returned 0x0 [0087.107] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\PROOF\\*", lpFindFileData=0x12d630 | out: lpFindFileData=0x12d630*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5b0da70, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x53fb1f10, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x53fb1f10, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1af3b6b0 [0087.107] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d640 | out: lpFindFileData=0x12d640*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5b0da70, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x53fb1f10, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x53fb1f10, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0087.107] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d640 | out: lpFindFileData=0x12d640*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53fb1f10, ftCreationTime.dwHighDateTime=0x1d5e786, ftLastAccessTime.dwLowDateTime=0x53fb1f10, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x53fd8070, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x773, dwReserved0=0x0, dwReserved1=0x0, cFileName="Decrypt Instructions.txt", cAlternateFileName="DECRYP~1.TXT")) returned 1 [0087.107] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d640 | out: lpFindFileData=0x12d640*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa07d0e00, ftCreationTime.dwHighDateTime=0x1ca2cea, ftLastAccessTime.dwLowDateTime=0x69e61cd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa07d0e00, ftLastWriteTime.dwHighDateTime=0x1ca2cea, nFileSizeHigh=0x0, nFileSizeLow=0x90540, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSLID.DLL", cAlternateFileName="")) returned 1 [0087.107] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d640 | out: lpFindFileData=0x12d640*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x782b2c00, ftCreationTime.dwHighDateTime=0x1bada3f, ftLastAccessTime.dwLowDateTime=0x98a53b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x782b2c00, ftLastWriteTime.dwHighDateTime=0x1bada3f, nFileSizeHigh=0x0, nFileSizeLow=0x6c67b, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSWDS_EN.LEX", cAlternateFileName="")) returned 1 [0087.107] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d640 | out: lpFindFileData=0x12d640*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe5e2ea00, ftCreationTime.dwHighDateTime=0x1bdf5d3, ftLastAccessTime.dwLowDateTime=0x5b0da70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe5e2ea00, ftLastWriteTime.dwHighDateTime=0x1bdf5d3, nFileSizeHigh=0x0, nFileSizeLow=0x60983, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSWDS_ES.LEX", cAlternateFileName="")) returned 1 [0087.107] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d640 | out: lpFindFileData=0x12d640*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcf3c9300, ftCreationTime.dwHighDateTime=0x1bdf5d3, ftLastAccessTime.dwLowDateTime=0x78ced70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xcf3c9300, ftLastWriteTime.dwHighDateTime=0x1bdf5d3, nFileSizeHigh=0x0, nFileSizeLow=0x482ef, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSWDS_FR.LEX", cAlternateFileName="")) returned 1 [0087.108] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d640 | out: lpFindFileData=0x12d640*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcf3c9300, ftCreationTime.dwHighDateTime=0x1bdf5d3, ftLastAccessTime.dwLowDateTime=0x78ced70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xcf3c9300, ftLastWriteTime.dwHighDateTime=0x1bdf5d3, nFileSizeHigh=0x0, nFileSizeLow=0x482ef, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSWDS_FR.LEX", cAlternateFileName="")) returned 0 [0087.108] FindClose (in: hFindFile=0x1af3b6b0 | out: hFindFile=0x1af3b6b0) returned 1 [0087.108] SetErrorMode (uMode=0x0) returned 0x1 [0087.108] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag", nBufferLength=0x105, lpBuffer=0x12d3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag", lpFilePart=0x0) returned 0x38 [0087.108] SetErrorMode (uMode=0x1) returned 0x0 [0087.108] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed123f0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xd5807780, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd5807780, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1af3b6b0 [0087.140] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5a0 | out: lpFindFileData=0x12d5a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed123f0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xd5807780, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd5807780, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0087.140] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5a0 | out: lpFindFileData=0x12d5a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeee1cd90, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xef058230, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xef058230, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 1 [0087.144] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5a0 | out: lpFindFileData=0x12d5a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7b89b100, ftCreationTime.dwHighDateTime=0x1caac21, ftLastAccessTime.dwLowDateTime=0x5226a510, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7b89b100, ftLastWriteTime.dwHighDateTime=0x1caac21, nFileSizeHigh=0x0, nFileSizeLow=0x1e380, dwReserved0=0x0, dwReserved1=0x0, cFileName="FBIBLIO.DLL", cAlternateFileName="")) returned 1 [0087.151] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5a0 | out: lpFindFileData=0x12d5a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7b89b100, ftCreationTime.dwHighDateTime=0x1caac21, ftLastAccessTime.dwLowDateTime=0x60c49690, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7b89b100, ftLastWriteTime.dwHighDateTime=0x1caac21, nFileSizeHigh=0x0, nFileSizeLow=0x17f80, dwReserved0=0x0, dwReserved1=0x0, cFileName="FDATE.DLL", cAlternateFileName="")) returned 1 [0087.315] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5a0 | out: lpFindFileData=0x12d5a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7b89b100, ftCreationTime.dwHighDateTime=0x1caac21, ftLastAccessTime.dwLowDateTime=0x618eeb70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7b89b100, ftLastWriteTime.dwHighDateTime=0x1caac21, nFileSizeHigh=0x0, nFileSizeLow=0x35380, dwReserved0=0x0, dwReserved1=0x0, cFileName="FPERSON.DLL", cAlternateFileName="")) returned 1 [0087.315] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5a0 | out: lpFindFileData=0x12d5a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x66f78700, ftCreationTime.dwHighDateTime=0x1cb7000, ftLastAccessTime.dwLowDateTime=0xc251c2e0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x66f78700, ftLastWriteTime.dwHighDateTime=0x1cb7000, nFileSizeHigh=0x0, nFileSizeLow=0x2c380, dwReserved0=0x0, dwReserved1=0x0, cFileName="FPLACE.DLL", cAlternateFileName="")) returned 1 [0087.315] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5a0 | out: lpFindFileData=0x12d5a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79275700, ftCreationTime.dwHighDateTime=0x1caac21, ftLastAccessTime.dwLowDateTime=0xeedd0ad0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x79275700, ftLastWriteTime.dwHighDateTime=0x1caac21, nFileSizeHigh=0x0, nFileSizeLow=0x26d80, dwReserved0=0x0, dwReserved1=0x0, cFileName="FSTOCK.DLL", cAlternateFileName="")) returned 1 [0087.315] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5a0 | out: lpFindFileData=0x12d5a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf6a43200, ftCreationTime.dwHighDateTime=0x1cb700e, ftLastAccessTime.dwLowDateTime=0xd5807780, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xf6a43200, ftLastWriteTime.dwHighDateTime=0x1cb700e, nFileSizeHigh=0x0, nFileSizeLow=0x39580, dwReserved0=0x0, dwReserved1=0x0, cFileName="IETAG.DLL", cAlternateFileName="")) returned 1 [0087.315] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5a0 | out: lpFindFileData=0x12d5a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7b89b100, ftCreationTime.dwHighDateTime=0x1caac21, ftLastAccessTime.dwLowDateTime=0x5392d770, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7b89b100, ftLastWriteTime.dwHighDateTime=0x1caac21, nFileSizeHigh=0x0, nFileSizeLow=0x18b80, dwReserved0=0x0, dwReserved1=0x0, cFileName="IMCONTACT.DLL", cAlternateFileName="IMCONT~1.DLL")) returned 1 [0087.315] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5a0 | out: lpFindFileData=0x12d5a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed123f0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x5f42f7d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5f42f7d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="LISTS", cAlternateFileName="")) returned 1 [0087.315] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5a0 | out: lpFindFileData=0x12d5a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93e94600, ftCreationTime.dwHighDateTime=0x1ca9120, ftLastAccessTime.dwLowDateTime=0x583906f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x93e94600, ftLastWriteTime.dwHighDateTime=0x1ca9120, nFileSizeHigh=0x0, nFileSizeLow=0x1b180, dwReserved0=0x0, dwReserved1=0x0, cFileName="METCONV.DLL", cAlternateFileName="")) returned 1 [0087.315] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5a0 | out: lpFindFileData=0x12d5a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x85f12000, ftCreationTime.dwHighDateTime=0x1c9a11f, ftLastAccessTime.dwLowDateTime=0x69a83910, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x85f12000, ftLastWriteTime.dwHighDateTime=0x1c9a11f, nFileSizeHigh=0x0, nFileSizeLow=0x120eb8, dwReserved0=0x0, dwReserved1=0x0, cFileName="METCONV.TXT", cAlternateFileName="")) returned 1 [0087.315] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5a0 | out: lpFindFileData=0x12d5a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x802a9400, ftCreationTime.dwHighDateTime=0x1caad0b, ftLastAccessTime.dwLowDateTime=0x69c4c990, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x802a9400, ftLastWriteTime.dwHighDateTime=0x1caad0b, nFileSizeHigh=0x0, nFileSizeLow=0x59180, dwReserved0=0x0, dwReserved1=0x0, cFileName="MOFL.DLL", cAlternateFileName="")) returned 1 [0087.315] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5a0 | out: lpFindFileData=0x12d5a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xab68100, ftCreationTime.dwHighDateTime=0x1cac9a5, ftLastAccessTime.dwLowDateTime=0x5943a0f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xab68100, ftLastWriteTime.dwHighDateTime=0x1cac9a5, nFileSizeHigh=0x0, nFileSizeLow=0x3574, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSTAG.TLB", cAlternateFileName="")) returned 1 [0087.315] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5a0 | out: lpFindFileData=0x12d5a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5de00200, ftCreationTime.dwHighDateTime=0x1cac9ac, ftLastAccessTime.dwLowDateTime=0x6d2e6230, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5de00200, ftLastWriteTime.dwHighDateTime=0x1cac9ac, nFileSizeHigh=0x0, nFileSizeLow=0x3d80, dwReserved0=0x0, dwReserved1=0x0, cFileName="SmartTagInstall.exe", cAlternateFileName="SMARTT~1.EXE")) returned 1 [0087.315] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5a0 | out: lpFindFileData=0x12d5a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5de00200, ftCreationTime.dwHighDateTime=0x1cac9ac, ftLastAccessTime.dwLowDateTime=0x6d2e6230, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5de00200, ftLastWriteTime.dwHighDateTime=0x1cac9ac, nFileSizeHigh=0x0, nFileSizeLow=0x3d80, dwReserved0=0x0, dwReserved1=0x0, cFileName="SmartTagInstall.exe", cAlternateFileName="SMARTT~1.EXE")) returned 0 [0087.316] FindClose (in: hFindFile=0x1af3b6b0 | out: hFindFile=0x1af3b6b0) returned 1 [0087.417] SetErrorMode (uMode=0x0) returned 0x1 [0087.690] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\METCONV.TXT", nBufferLength=0x105, lpBuffer=0x12d600, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\METCONV.TXT", lpFilePart=0x0) returned 0x44 [0087.690] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\METCONV.TXT", nBufferLength=0x105, lpBuffer=0x12d5f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\METCONV.TXT", lpFilePart=0x0) returned 0x44 [0087.690] SetErrorMode (uMode=0x1) returned 0x0 [0087.692] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\METCONV.TXT" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\metconv.txt"), fInfoLevelId=0x0, lpFileInformation=0x12d870 | out: lpFileInformation=0x12d870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x85f12000, ftCreationTime.dwHighDateTime=0x1c9a11f, ftLastAccessTime.dwLowDateTime=0x69a83910, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x85f12000, ftLastWriteTime.dwHighDateTime=0x1c9a11f, nFileSizeHigh=0x0, nFileSizeLow=0x120eb8)) returned 1 [0087.698] SetErrorMode (uMode=0x0) returned 0x1 [0087.699] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\METCONV.TXT", nBufferLength=0x105, lpBuffer=0x12d2c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\METCONV.TXT", lpFilePart=0x0) returned 0x44 [0087.699] SetErrorMode (uMode=0x1) returned 0x0 [0087.699] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\METCONV.TXT" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\metconv.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1f0 [0087.699] SetErrorMode (uMode=0x0) returned 0x1 [0087.699] GetFileType (hFile=0x1f0) returned 0x1 [0087.699] GetFileSize (in: hFile=0x1f0, lpFileSizeHigh=0x12d928 | out: lpFileSizeHigh=0x12d928*=0x0) returned 0x120eb8 [0087.720] ReadFile (in: hFile=0x1f0, lpBuffer=0x1273e440, nNumberOfBytesToRead=0x120eb8, lpNumberOfBytesRead=0x12d808, lpOverlapped=0x0 | out: lpBuffer=0x1273e440*, lpNumberOfBytesRead=0x12d808*=0x120eb8, lpOverlapped=0x0) returned 1 [0088.008] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\METCONV.TXT", nBufferLength=0x105, lpBuffer=0x12d2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\METCONV.TXT", lpFilePart=0x0) returned 0x44 [0088.009] SetErrorMode (uMode=0x1) returned 0x0 [0088.009] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\METCONV.TXT" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\metconv.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1f0 [0088.010] SetErrorMode (uMode=0x0) returned 0x1 [0088.010] GetFileType (hFile=0x1f0) returned 0x1 [0088.010] WriteFile (in: hFile=0x1f0, lpBuffer=0x128c2930*, nNumberOfBytesToWrite=0x120ec0, lpNumberOfBytesWritten=0x12d888, lpOverlapped=0x0 | out: lpBuffer=0x128c2930*, lpNumberOfBytesWritten=0x12d888*=0x120ec0, lpOverlapped=0x0) returned 1 [0088.038] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\METCONV.TXT", nBufferLength=0x105, lpBuffer=0x12d560, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\METCONV.TXT", lpFilePart=0x0) returned 0x44 [0088.038] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\METCONV.TXT.encryptedS", nBufferLength=0x105, lpBuffer=0x12d560, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\METCONV.TXT.encryptedS", lpFilePart=0x0) returned 0x4f [0088.038] SetErrorMode (uMode=0x1) returned 0x0 [0088.038] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\METCONV.TXT" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\metconv.txt"), fInfoLevelId=0x0, lpFileInformation=0x12d7b0 | out: lpFileInformation=0x12d7b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x85f12000, ftCreationTime.dwHighDateTime=0x1c9a11f, ftLastAccessTime.dwLowDateTime=0x69a83910, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5489f190, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x120ec0)) returned 1 [0088.038] SetErrorMode (uMode=0x0) returned 0x1 [0088.039] MoveFileW (lpExistingFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\METCONV.TXT" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\metconv.txt"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\METCONV.TXT.encryptedS" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\metconv.txt.encrypteds")) returned 1 [0088.040] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\Decrypt Instructions.txt", nBufferLength=0x105, lpBuffer=0x12d2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\Decrypt Instructions.txt", lpFilePart=0x0) returned 0x51 [0088.040] SetErrorMode (uMode=0x1) returned 0x0 [0088.040] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\Decrypt Instructions.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\decrypt instructions.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1f0 [0088.040] SetErrorMode (uMode=0x0) returned 0x1 [0088.041] GetFileType (hFile=0x1f0) returned 0x1 [0088.041] WriteFile (in: hFile=0x1f0, lpBuffer=0x26c6820*, nNumberOfBytesToWrite=0x773, lpNumberOfBytesWritten=0x12d808, lpOverlapped=0x0 | out: lpBuffer=0x26c6820*, lpNumberOfBytesWritten=0x12d808*=0x773, lpOverlapped=0x0) returned 1 [0088.967] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag", nBufferLength=0x105, lpBuffer=0x12d490, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag", lpFilePart=0x0) returned 0x38 [0088.967] SetErrorMode (uMode=0x1) returned 0x0 [0088.968] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\*", lpFindFileData=0x12d630 | out: lpFindFileData=0x12d630*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed123f0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x5489f190, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x5489f190, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1af3b6b0 [0088.968] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d640 | out: lpFindFileData=0x12d640*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed123f0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x5489f190, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x5489f190, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0088.968] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d640 | out: lpFindFileData=0x12d640*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeee1cd90, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xef058230, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xef058230, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 1 [0088.968] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d640 | out: lpFindFileData=0x12d640*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5489f190, ftCreationTime.dwHighDateTime=0x1d5e786, ftLastAccessTime.dwLowDateTime=0x5489f190, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x5518c410, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x773, dwReserved0=0x0, dwReserved1=0x0, cFileName="Decrypt Instructions.txt", cAlternateFileName="DECRYP~1.TXT")) returned 1 [0088.968] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d640 | out: lpFindFileData=0x12d640*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7b89b100, ftCreationTime.dwHighDateTime=0x1caac21, ftLastAccessTime.dwLowDateTime=0x5226a510, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7b89b100, ftLastWriteTime.dwHighDateTime=0x1caac21, nFileSizeHigh=0x0, nFileSizeLow=0x1e380, dwReserved0=0x0, dwReserved1=0x0, cFileName="FBIBLIO.DLL", cAlternateFileName="")) returned 1 [0088.968] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d640 | out: lpFindFileData=0x12d640*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7b89b100, ftCreationTime.dwHighDateTime=0x1caac21, ftLastAccessTime.dwLowDateTime=0x60c49690, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7b89b100, ftLastWriteTime.dwHighDateTime=0x1caac21, nFileSizeHigh=0x0, nFileSizeLow=0x17f80, dwReserved0=0x0, dwReserved1=0x0, cFileName="FDATE.DLL", cAlternateFileName="")) returned 1 [0088.968] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d640 | out: lpFindFileData=0x12d640*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7b89b100, ftCreationTime.dwHighDateTime=0x1caac21, ftLastAccessTime.dwLowDateTime=0x618eeb70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7b89b100, ftLastWriteTime.dwHighDateTime=0x1caac21, nFileSizeHigh=0x0, nFileSizeLow=0x35380, dwReserved0=0x0, dwReserved1=0x0, cFileName="FPERSON.DLL", cAlternateFileName="")) returned 1 [0088.968] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d640 | out: lpFindFileData=0x12d640*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x66f78700, ftCreationTime.dwHighDateTime=0x1cb7000, ftLastAccessTime.dwLowDateTime=0xc251c2e0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x66f78700, ftLastWriteTime.dwHighDateTime=0x1cb7000, nFileSizeHigh=0x0, nFileSizeLow=0x2c380, dwReserved0=0x0, dwReserved1=0x0, cFileName="FPLACE.DLL", cAlternateFileName="")) returned 1 [0088.968] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d640 | out: lpFindFileData=0x12d640*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79275700, ftCreationTime.dwHighDateTime=0x1caac21, ftLastAccessTime.dwLowDateTime=0xeedd0ad0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x79275700, ftLastWriteTime.dwHighDateTime=0x1caac21, nFileSizeHigh=0x0, nFileSizeLow=0x26d80, dwReserved0=0x0, dwReserved1=0x0, cFileName="FSTOCK.DLL", cAlternateFileName="")) returned 1 [0088.968] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d640 | out: lpFindFileData=0x12d640*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf6a43200, ftCreationTime.dwHighDateTime=0x1cb700e, ftLastAccessTime.dwLowDateTime=0xd5807780, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xf6a43200, ftLastWriteTime.dwHighDateTime=0x1cb700e, nFileSizeHigh=0x0, nFileSizeLow=0x39580, dwReserved0=0x0, dwReserved1=0x0, cFileName="IETAG.DLL", cAlternateFileName="")) returned 1 [0088.968] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d640 | out: lpFindFileData=0x12d640*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7b89b100, ftCreationTime.dwHighDateTime=0x1caac21, ftLastAccessTime.dwLowDateTime=0x5392d770, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7b89b100, ftLastWriteTime.dwHighDateTime=0x1caac21, nFileSizeHigh=0x0, nFileSizeLow=0x18b80, dwReserved0=0x0, dwReserved1=0x0, cFileName="IMCONTACT.DLL", cAlternateFileName="IMCONT~1.DLL")) returned 1 [0088.968] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d640 | out: lpFindFileData=0x12d640*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed123f0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x5f42f7d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5f42f7d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="LISTS", cAlternateFileName="")) returned 1 [0088.969] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d640 | out: lpFindFileData=0x12d640*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93e94600, ftCreationTime.dwHighDateTime=0x1ca9120, ftLastAccessTime.dwLowDateTime=0x583906f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x93e94600, ftLastWriteTime.dwHighDateTime=0x1ca9120, nFileSizeHigh=0x0, nFileSizeLow=0x1b180, dwReserved0=0x0, dwReserved1=0x0, cFileName="METCONV.DLL", cAlternateFileName="")) returned 1 [0088.969] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d640 | out: lpFindFileData=0x12d640*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x85f12000, ftCreationTime.dwHighDateTime=0x1c9a11f, ftLastAccessTime.dwLowDateTime=0x69a83910, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5489f190, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x120ec0, dwReserved0=0x0, dwReserved1=0x0, cFileName="METCONV.TXT.encryptedS", cAlternateFileName="METCON~1.ENC")) returned 1 [0088.969] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d640 | out: lpFindFileData=0x12d640*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x802a9400, ftCreationTime.dwHighDateTime=0x1caad0b, ftLastAccessTime.dwLowDateTime=0x69c4c990, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x802a9400, ftLastWriteTime.dwHighDateTime=0x1caad0b, nFileSizeHigh=0x0, nFileSizeLow=0x59180, dwReserved0=0x0, dwReserved1=0x0, cFileName="MOFL.DLL", cAlternateFileName="")) returned 1 [0088.969] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d640 | out: lpFindFileData=0x12d640*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xab68100, ftCreationTime.dwHighDateTime=0x1cac9a5, ftLastAccessTime.dwLowDateTime=0x5943a0f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xab68100, ftLastWriteTime.dwHighDateTime=0x1cac9a5, nFileSizeHigh=0x0, nFileSizeLow=0x3574, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSTAG.TLB", cAlternateFileName="")) returned 1 [0088.969] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d640 | out: lpFindFileData=0x12d640*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5de00200, ftCreationTime.dwHighDateTime=0x1cac9ac, ftLastAccessTime.dwLowDateTime=0x6d2e6230, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5de00200, ftLastWriteTime.dwHighDateTime=0x1cac9ac, nFileSizeHigh=0x0, nFileSizeLow=0x3d80, dwReserved0=0x0, dwReserved1=0x0, cFileName="SmartTagInstall.exe", cAlternateFileName="SMARTT~1.EXE")) returned 1 [0088.969] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d640 | out: lpFindFileData=0x12d640*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5de00200, ftCreationTime.dwHighDateTime=0x1cac9ac, ftLastAccessTime.dwLowDateTime=0x6d2e6230, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5de00200, ftLastWriteTime.dwHighDateTime=0x1cac9ac, nFileSizeHigh=0x0, nFileSizeLow=0x3d80, dwReserved0=0x0, dwReserved1=0x0, cFileName="SmartTagInstall.exe", cAlternateFileName="SMARTT~1.EXE")) returned 0 [0088.969] FindClose (in: hFindFile=0x1af3b6b0 | out: hFindFile=0x1af3b6b0) returned 1 [0088.969] SetErrorMode (uMode=0x0) returned 0x1 [0088.969] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\1033", nBufferLength=0x105, lpBuffer=0x12d390, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\1033", lpFilePart=0x0) returned 0x3d [0088.970] SetErrorMode (uMode=0x1) returned 0x0 [0088.970] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\1033\\*", lpFindFileData=0x12d530 | out: lpFindFileData=0x12d530*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeee1cd90, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xef058230, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xef058230, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1af3b6b0 [0089.087] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeee1cd90, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xef058230, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xef058230, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0089.087] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc52bb100, ftCreationTime.dwHighDateTime=0x1ca6185, ftLastAccessTime.dwLowDateTime=0xeee1cd90, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xc52bb100, ftLastWriteTime.dwHighDateTime=0x1ca6185, nFileSizeHigh=0x0, nFileSizeLow=0x2cc7, dwReserved0=0x0, dwReserved1=0x0, cFileName="MCABOUT.HTM", cAlternateFileName="")) returned 1 [0089.087] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7b89b100, ftCreationTime.dwHighDateTime=0x1caac21, ftLastAccessTime.dwLowDateTime=0xef058230, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x7b89b100, ftLastWriteTime.dwHighDateTime=0x1caac21, nFileSizeHigh=0x0, nFileSizeLow=0x4380, dwReserved0=0x0, dwReserved1=0x0, cFileName="STINTL.DLL", cAlternateFileName="")) returned 1 [0089.087] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdc65b900, ftCreationTime.dwHighDateTime=0x1caac22, ftLastAccessTime.dwLowDateTime=0xef058230, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xdc65b900, ftLastWriteTime.dwHighDateTime=0x1caac22, nFileSizeHigh=0x0, nFileSizeLow=0x3580, dwReserved0=0x0, dwReserved1=0x0, cFileName="STINTL.DLL.IDX_DLL", cAlternateFileName="STINTL~1.IDX")) returned 1 [0089.087] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdc65b900, ftCreationTime.dwHighDateTime=0x1caac22, ftLastAccessTime.dwLowDateTime=0xef058230, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xdc65b900, ftLastWriteTime.dwHighDateTime=0x1caac22, nFileSizeHigh=0x0, nFileSizeLow=0x3580, dwReserved0=0x0, dwReserved1=0x0, cFileName="STINTL.DLL.IDX_DLL", cAlternateFileName="STINTL~1.IDX")) returned 0 [0089.088] FindClose (in: hFindFile=0x1af3b6b0 | out: hFindFile=0x1af3b6b0) returned 1 [0089.088] SetErrorMode (uMode=0x0) returned 0x1 [0089.089] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\1033\\Decrypt Instructions.txt", nBufferLength=0x105, lpBuffer=0x12d240, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\1033\\Decrypt Instructions.txt", lpFilePart=0x0) returned 0x56 [0089.089] SetErrorMode (uMode=0x1) returned 0x0 [0089.089] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\1033\\Decrypt Instructions.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\1033\\decrypt instructions.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1f0 [0089.202] SetErrorMode (uMode=0x0) returned 0x1 [0089.202] GetFileType (hFile=0x1f0) returned 0x1 [0089.202] WriteFile (in: hFile=0x1f0, lpBuffer=0x26cd9d8*, nNumberOfBytesToWrite=0x773, lpNumberOfBytesWritten=0x12d7a8, lpOverlapped=0x0 | out: lpBuffer=0x26cd9d8*, lpNumberOfBytesWritten=0x12d7a8*=0x773, lpOverlapped=0x0) returned 1 [0089.203] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\1033", nBufferLength=0x105, lpBuffer=0x12d430, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\1033", lpFilePart=0x0) returned 0x3d [0089.204] SetErrorMode (uMode=0x1) returned 0x0 [0089.204] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\1033\\*", lpFindFileData=0x12d5d0 | out: lpFindFileData=0x12d5d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeee1cd90, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x553c78b0, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x553c78b0, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1af3b6b0 [0089.204] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeee1cd90, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x553c78b0, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x553c78b0, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0089.204] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x552bcf10, ftCreationTime.dwHighDateTime=0x1d5e786, ftLastAccessTime.dwLowDateTime=0x552bcf10, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x553c78b0, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x773, dwReserved0=0x0, dwReserved1=0x0, cFileName="Decrypt Instructions.txt", cAlternateFileName="DECRYP~1.TXT")) returned 1 [0089.204] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc52bb100, ftCreationTime.dwHighDateTime=0x1ca6185, ftLastAccessTime.dwLowDateTime=0xeee1cd90, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xc52bb100, ftLastWriteTime.dwHighDateTime=0x1ca6185, nFileSizeHigh=0x0, nFileSizeLow=0x2cc7, dwReserved0=0x0, dwReserved1=0x0, cFileName="MCABOUT.HTM", cAlternateFileName="")) returned 1 [0089.204] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7b89b100, ftCreationTime.dwHighDateTime=0x1caac21, ftLastAccessTime.dwLowDateTime=0xef058230, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x7b89b100, ftLastWriteTime.dwHighDateTime=0x1caac21, nFileSizeHigh=0x0, nFileSizeLow=0x4380, dwReserved0=0x0, dwReserved1=0x0, cFileName="STINTL.DLL", cAlternateFileName="")) returned 1 [0089.204] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdc65b900, ftCreationTime.dwHighDateTime=0x1caac22, ftLastAccessTime.dwLowDateTime=0xef058230, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xdc65b900, ftLastWriteTime.dwHighDateTime=0x1caac22, nFileSizeHigh=0x0, nFileSizeLow=0x3580, dwReserved0=0x0, dwReserved1=0x0, cFileName="STINTL.DLL.IDX_DLL", cAlternateFileName="STINTL~1.IDX")) returned 1 [0089.204] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdc65b900, ftCreationTime.dwHighDateTime=0x1caac22, ftLastAccessTime.dwLowDateTime=0xef058230, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xdc65b900, ftLastWriteTime.dwHighDateTime=0x1caac22, nFileSizeHigh=0x0, nFileSizeLow=0x3580, dwReserved0=0x0, dwReserved1=0x0, cFileName="STINTL.DLL.IDX_DLL", cAlternateFileName="STINTL~1.IDX")) returned 0 [0089.204] FindClose (in: hFindFile=0x1af3b6b0 | out: hFindFile=0x1af3b6b0) returned 1 [0089.205] SetErrorMode (uMode=0x0) returned 0x1 [0089.205] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS", nBufferLength=0x105, lpBuffer=0x12d390, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS", lpFilePart=0x0) returned 0x3e [0089.205] SetErrorMode (uMode=0x1) returned 0x0 [0089.205] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\*", lpFindFileData=0x12d530 | out: lpFindFileData=0x12d530*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed123f0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x5f42f7d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5f42f7d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1af3b6b0 [0089.208] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed123f0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x5f42f7d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5f42f7d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0089.208] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed123f0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xef07e390, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xef07e390, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 1 [0089.208] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x11f34c00, ftCreationTime.dwHighDateTime=0x1c62260, ftLastAccessTime.dwLowDateTime=0x5f42f7d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x11f34c00, ftLastWriteTime.dwHighDateTime=0x1c62260, nFileSizeHigh=0x0, nFileSizeLow=0x377ef, dwReserved0=0x0, dwReserved1=0x0, cFileName="BASMLA.XSL", cAlternateFileName="")) returned 1 [0089.208] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x11f34c00, ftCreationTime.dwHighDateTime=0x1c62260, ftLastAccessTime.dwLowDateTime=0x5f42f7d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x11f34c00, ftLastWriteTime.dwHighDateTime=0x1c62260, nFileSizeHigh=0x0, nFileSizeLow=0x377ef, dwReserved0=0x0, dwReserved1=0x0, cFileName="BASMLA.XSL", cAlternateFileName="")) returned 0 [0089.208] FindClose (in: hFindFile=0x1af3b6b0 | out: hFindFile=0x1af3b6b0) returned 1 [0089.208] SetErrorMode (uMode=0x0) returned 0x1 [0089.209] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\Decrypt Instructions.txt", nBufferLength=0x105, lpBuffer=0x12d240, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\Decrypt Instructions.txt", lpFilePart=0x0) returned 0x57 [0089.209] SetErrorMode (uMode=0x1) returned 0x0 [0089.209] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\Decrypt Instructions.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\lists\\decrypt instructions.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1f0 [0089.210] SetErrorMode (uMode=0x0) returned 0x1 [0089.210] GetFileType (hFile=0x1f0) returned 0x1 [0089.210] WriteFile (in: hFile=0x1f0, lpBuffer=0x26d4138*, nNumberOfBytesToWrite=0x773, lpNumberOfBytesWritten=0x12d7a8, lpOverlapped=0x0 | out: lpBuffer=0x26d4138*, lpNumberOfBytesWritten=0x12d7a8*=0x773, lpOverlapped=0x0) returned 1 [0089.212] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS", nBufferLength=0x105, lpBuffer=0x12d430, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS", lpFilePart=0x0) returned 0x3e [0089.212] SetErrorMode (uMode=0x1) returned 0x0 [0089.212] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\*", lpFindFileData=0x12d5d0 | out: lpFindFileData=0x12d5d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed123f0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x553c78b0, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x553c78b0, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1af3b6b0 [0089.212] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed123f0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x553c78b0, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x553c78b0, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0089.212] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed123f0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xef07e390, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xef07e390, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 1 [0089.212] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x11f34c00, ftCreationTime.dwHighDateTime=0x1c62260, ftLastAccessTime.dwLowDateTime=0x5f42f7d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x11f34c00, ftLastWriteTime.dwHighDateTime=0x1c62260, nFileSizeHigh=0x0, nFileSizeLow=0x377ef, dwReserved0=0x0, dwReserved1=0x0, cFileName="BASMLA.XSL", cAlternateFileName="")) returned 1 [0089.212] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x553c78b0, ftCreationTime.dwHighDateTime=0x1d5e786, ftLastAccessTime.dwLowDateTime=0x553c78b0, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x553eda10, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x773, dwReserved0=0x0, dwReserved1=0x0, cFileName="Decrypt Instructions.txt", cAlternateFileName="DECRYP~1.TXT")) returned 1 [0089.212] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x553c78b0, ftCreationTime.dwHighDateTime=0x1d5e786, ftLastAccessTime.dwLowDateTime=0x553c78b0, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x553eda10, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x773, dwReserved0=0x0, dwReserved1=0x0, cFileName="Decrypt Instructions.txt", cAlternateFileName="DECRYP~1.TXT")) returned 0 [0089.212] FindClose (in: hFindFile=0x1af3b6b0 | out: hFindFile=0x1af3b6b0) returned 1 [0089.212] SetErrorMode (uMode=0x0) returned 0x1 [0089.213] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033", nBufferLength=0x105, lpBuffer=0x12d330, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033", lpFilePart=0x0) returned 0x43 [0089.213] SetErrorMode (uMode=0x1) returned 0x0 [0089.213] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\*", lpFindFileData=0x12d4d0 | out: lpFindFileData=0x12d4d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed123f0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xef07e390, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xef07e390, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1af3b6b0 [0089.213] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d4e0 | out: lpFindFileData=0x12d4e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed123f0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xef07e390, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xef07e390, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0089.213] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d4e0 | out: lpFindFileData=0x12d4e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x310fad00, ftCreationTime.dwHighDateTime=0x1c2d758, ftLastAccessTime.dwLowDateTime=0xeed123f0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x310fad00, ftLastWriteTime.dwHighDateTime=0x1c2d758, nFileSizeHigh=0x0, nFileSizeLow=0x22d6, dwReserved0=0x0, dwReserved1=0x0, cFileName="DATES.XML", cAlternateFileName="")) returned 1 [0089.214] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d4e0 | out: lpFindFileData=0x12d4e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8a301d00, ftCreationTime.dwHighDateTime=0x1c2d7fa, ftLastAccessTime.dwLowDateTime=0xeefe5e10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x8a301d00, ftLastWriteTime.dwHighDateTime=0x1c2d7fa, nFileSizeHigh=0x0, nFileSizeLow=0x734, dwReserved0=0x0, dwReserved1=0x0, cFileName="PHONE.XML", cAlternateFileName="")) returned 1 [0089.214] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d4e0 | out: lpFindFileData=0x12d4e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc1271800, ftCreationTime.dwHighDateTime=0x1c4481e, ftLastAccessTime.dwLowDateTime=0xef058230, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xc1271800, ftLastWriteTime.dwHighDateTime=0x1c4481e, nFileSizeHigh=0x0, nFileSizeLow=0x9869, dwReserved0=0x0, dwReserved1=0x0, cFileName="STOCKS.DAT", cAlternateFileName="")) returned 1 [0089.214] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d4e0 | out: lpFindFileData=0x12d4e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5866b900, ftCreationTime.dwHighDateTime=0x1c29047, ftLastAccessTime.dwLowDateTime=0xef058230, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x5866b900, ftLastWriteTime.dwHighDateTime=0x1c29047, nFileSizeHigh=0x0, nFileSizeLow=0xa7f, dwReserved0=0x0, dwReserved1=0x0, cFileName="STOCKS.XML", cAlternateFileName="")) returned 1 [0089.214] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d4e0 | out: lpFindFileData=0x12d4e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x36acb00, ftCreationTime.dwHighDateTime=0x1c2dd39, ftLastAccessTime.dwLowDateTime=0xef07e390, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x36acb00, ftLastWriteTime.dwHighDateTime=0x1c2dd39, nFileSizeHigh=0x0, nFileSizeLow=0x2174, dwReserved0=0x0, dwReserved1=0x0, cFileName="TIME.XML", cAlternateFileName="")) returned 1 [0089.214] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d4e0 | out: lpFindFileData=0x12d4e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x36acb00, ftCreationTime.dwHighDateTime=0x1c2dd39, ftLastAccessTime.dwLowDateTime=0xef07e390, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x36acb00, ftLastWriteTime.dwHighDateTime=0x1c2dd39, nFileSizeHigh=0x0, nFileSizeLow=0x2174, dwReserved0=0x0, dwReserved1=0x0, cFileName="TIME.XML", cAlternateFileName="")) returned 0 [0089.214] FindClose (in: hFindFile=0x1af3b6b0 | out: hFindFile=0x1af3b6b0) returned 1 [0089.214] SetErrorMode (uMode=0x0) returned 0x1 [0089.215] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\Decrypt Instructions.txt", nBufferLength=0x105, lpBuffer=0x12d1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\Decrypt Instructions.txt", lpFilePart=0x0) returned 0x5c [0089.216] SetErrorMode (uMode=0x1) returned 0x0 [0089.216] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\Decrypt Instructions.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\lists\\1033\\decrypt instructions.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1f0 [0089.218] SetErrorMode (uMode=0x0) returned 0x1 [0089.218] GetFileType (hFile=0x1f0) returned 0x1 [0089.218] WriteFile (in: hFile=0x1f0, lpBuffer=0x26db258*, nNumberOfBytesToWrite=0x773, lpNumberOfBytesWritten=0x12d748, lpOverlapped=0x0 | out: lpBuffer=0x26db258*, lpNumberOfBytesWritten=0x12d748*=0x773, lpOverlapped=0x0) returned 1 [0089.219] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033", nBufferLength=0x105, lpBuffer=0x12d3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033", lpFilePart=0x0) returned 0x43 [0089.219] SetErrorMode (uMode=0x1) returned 0x0 [0089.220] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\*", lpFindFileData=0x12d570 | out: lpFindFileData=0x12d570*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed123f0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x553eda10, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x553eda10, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1af3b6b0 [0089.220] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d580 | out: lpFindFileData=0x12d580*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed123f0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x553eda10, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x553eda10, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0089.220] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d580 | out: lpFindFileData=0x12d580*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x310fad00, ftCreationTime.dwHighDateTime=0x1c2d758, ftLastAccessTime.dwLowDateTime=0xeed123f0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x310fad00, ftLastWriteTime.dwHighDateTime=0x1c2d758, nFileSizeHigh=0x0, nFileSizeLow=0x22d6, dwReserved0=0x0, dwReserved1=0x0, cFileName="DATES.XML", cAlternateFileName="")) returned 1 [0089.220] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d580 | out: lpFindFileData=0x12d580*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x553eda10, ftCreationTime.dwHighDateTime=0x1d5e786, ftLastAccessTime.dwLowDateTime=0x553eda10, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x553eda10, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x773, dwReserved0=0x0, dwReserved1=0x0, cFileName="Decrypt Instructions.txt", cAlternateFileName="DECRYP~1.TXT")) returned 1 [0089.220] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d580 | out: lpFindFileData=0x12d580*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8a301d00, ftCreationTime.dwHighDateTime=0x1c2d7fa, ftLastAccessTime.dwLowDateTime=0xeefe5e10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x8a301d00, ftLastWriteTime.dwHighDateTime=0x1c2d7fa, nFileSizeHigh=0x0, nFileSizeLow=0x734, dwReserved0=0x0, dwReserved1=0x0, cFileName="PHONE.XML", cAlternateFileName="")) returned 1 [0089.220] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d580 | out: lpFindFileData=0x12d580*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc1271800, ftCreationTime.dwHighDateTime=0x1c4481e, ftLastAccessTime.dwLowDateTime=0xef058230, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xc1271800, ftLastWriteTime.dwHighDateTime=0x1c4481e, nFileSizeHigh=0x0, nFileSizeLow=0x9869, dwReserved0=0x0, dwReserved1=0x0, cFileName="STOCKS.DAT", cAlternateFileName="")) returned 1 [0089.220] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d580 | out: lpFindFileData=0x12d580*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5866b900, ftCreationTime.dwHighDateTime=0x1c29047, ftLastAccessTime.dwLowDateTime=0xef058230, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x5866b900, ftLastWriteTime.dwHighDateTime=0x1c29047, nFileSizeHigh=0x0, nFileSizeLow=0xa7f, dwReserved0=0x0, dwReserved1=0x0, cFileName="STOCKS.XML", cAlternateFileName="")) returned 1 [0089.220] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d580 | out: lpFindFileData=0x12d580*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x36acb00, ftCreationTime.dwHighDateTime=0x1c2dd39, ftLastAccessTime.dwLowDateTime=0xef07e390, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x36acb00, ftLastWriteTime.dwHighDateTime=0x1c2dd39, nFileSizeHigh=0x0, nFileSizeLow=0x2174, dwReserved0=0x0, dwReserved1=0x0, cFileName="TIME.XML", cAlternateFileName="")) returned 1 [0089.220] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d580 | out: lpFindFileData=0x12d580*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x36acb00, ftCreationTime.dwHighDateTime=0x1c2dd39, ftLastAccessTime.dwLowDateTime=0xef07e390, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x36acb00, ftLastWriteTime.dwHighDateTime=0x1c2dd39, nFileSizeHigh=0x0, nFileSizeLow=0x2174, dwReserved0=0x0, dwReserved1=0x0, cFileName="TIME.XML", cAlternateFileName="")) returned 0 [0089.220] FindClose (in: hFindFile=0x1af3b6b0 | out: hFindFile=0x1af3b6b0) returned 1 [0089.220] SetErrorMode (uMode=0x0) returned 0x1 [0089.221] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Source Engine", nBufferLength=0x105, lpBuffer=0x12d3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\Source Engine", lpFilePart=0x0) returned 0x3c [0089.221] SetErrorMode (uMode=0x1) returned 0x0 [0089.221] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Source Engine\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeef4d890, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeef4d890, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeef4d890, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1af3b6b0 [0089.222] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5a0 | out: lpFindFileData=0x12d5a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeef4d890, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeef4d890, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeef4d890, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0089.222] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5a0 | out: lpFindFileData=0x12d5a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcfcedc00, ftCreationTime.dwHighDateTime=0x1ca911d, ftLastAccessTime.dwLowDateTime=0xeef4d890, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcfcedc00, ftLastWriteTime.dwHighDateTime=0x1ca911d, nFileSizeHigh=0x0, nFileSizeLow=0x2a968, dwReserved0=0x0, dwReserved1=0x0, cFileName="OSE.EXE", cAlternateFileName="")) returned 1 [0089.222] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5a0 | out: lpFindFileData=0x12d5a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcfcedc00, ftCreationTime.dwHighDateTime=0x1ca911d, ftLastAccessTime.dwLowDateTime=0xeef4d890, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcfcedc00, ftLastWriteTime.dwHighDateTime=0x1ca911d, nFileSizeHigh=0x0, nFileSizeLow=0x2a968, dwReserved0=0x0, dwReserved1=0x0, cFileName="OSE.EXE", cAlternateFileName="")) returned 0 [0089.223] FindClose (in: hFindFile=0x1af3b6b0 | out: hFindFile=0x1af3b6b0) returned 1 [0089.223] SetErrorMode (uMode=0x0) returned 0x1 [0089.223] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Source Engine\\Decrypt Instructions.txt", nBufferLength=0x105, lpBuffer=0x12d2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\Source Engine\\Decrypt Instructions.txt", lpFilePart=0x0) returned 0x55 [0089.223] SetErrorMode (uMode=0x1) returned 0x0 [0089.223] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Source Engine\\Decrypt Instructions.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\source engine\\decrypt instructions.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1f0 [0089.224] SetErrorMode (uMode=0x0) returned 0x1 [0089.224] GetFileType (hFile=0x1f0) returned 0x1 [0089.224] WriteFile (in: hFile=0x1f0, lpBuffer=0x26e1970*, nNumberOfBytesToWrite=0x773, lpNumberOfBytesWritten=0x12d808, lpOverlapped=0x0 | out: lpBuffer=0x26e1970*, lpNumberOfBytesWritten=0x12d808*=0x773, lpOverlapped=0x0) returned 1 [0089.226] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Source Engine", nBufferLength=0x105, lpBuffer=0x12d490, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\Source Engine", lpFilePart=0x0) returned 0x3c [0089.226] SetErrorMode (uMode=0x1) returned 0x0 [0089.226] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Source Engine\\*", lpFindFileData=0x12d630 | out: lpFindFileData=0x12d630*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeef4d890, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x553eda10, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x553eda10, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1af3b6b0 [0089.226] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d640 | out: lpFindFileData=0x12d640*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeef4d890, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x553eda10, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x553eda10, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0089.226] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d640 | out: lpFindFileData=0x12d640*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x553eda10, ftCreationTime.dwHighDateTime=0x1d5e786, ftLastAccessTime.dwLowDateTime=0x553eda10, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x553eda10, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x773, dwReserved0=0x0, dwReserved1=0x0, cFileName="Decrypt Instructions.txt", cAlternateFileName="DECRYP~1.TXT")) returned 1 [0089.226] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d640 | out: lpFindFileData=0x12d640*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcfcedc00, ftCreationTime.dwHighDateTime=0x1ca911d, ftLastAccessTime.dwLowDateTime=0xeef4d890, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcfcedc00, ftLastWriteTime.dwHighDateTime=0x1ca911d, nFileSizeHigh=0x0, nFileSizeLow=0x2a968, dwReserved0=0x0, dwReserved1=0x0, cFileName="OSE.EXE", cAlternateFileName="")) returned 1 [0089.226] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d640 | out: lpFindFileData=0x12d640*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcfcedc00, ftCreationTime.dwHighDateTime=0x1ca911d, ftLastAccessTime.dwLowDateTime=0xeef4d890, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcfcedc00, ftLastWriteTime.dwHighDateTime=0x1ca911d, nFileSizeHigh=0x0, nFileSizeLow=0x2a968, dwReserved0=0x0, dwReserved1=0x0, cFileName="OSE.EXE", cAlternateFileName="")) returned 0 [0089.226] FindClose (in: hFindFile=0x1af3b6b0 | out: hFindFile=0x1af3b6b0) returned 1 [0089.226] SetErrorMode (uMode=0x0) returned 0x1 [0089.227] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery", nBufferLength=0x105, lpBuffer=0x12d3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery", lpFilePart=0x0) returned 0x39 [0089.227] SetErrorMode (uMode=0x1) returned 0x0 [0089.227] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd85ef28, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x9e177d26, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9e177d26, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1af3b6b0 [0089.294] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5a0 | out: lpFindFileData=0x12d5a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd85ef28, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x9e177d26, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9e177d26, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0089.430] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5a0 | out: lpFindFileData=0x12d5a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xce2608de, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xce2608de, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xcdfff30e, ftLastWriteTime.dwHighDateTime=0x1ca040d, nFileSizeHigh=0x0, nFileSizeLow=0xff, dwReserved0=0x0, dwReserved1=0x0, cFileName="Bears.htm", cAlternateFileName="")) returned 1 [0089.430] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5a0 | out: lpFindFileData=0x12d5a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xce2acb98, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xce2acb98, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xaa352261, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x432, dwReserved0=0x0, dwReserved1=0x0, cFileName="Bears.jpg", cAlternateFileName="")) returned 1 [0089.430] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5a0 | out: lpFindFileData=0x12d5a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4ca9e3b, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc4ca9e3b, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x4421c165, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0xa0f, dwReserved0=0x0, dwReserved1=0x0, cFileName="Blue_Gradient.jpg", cAlternateFileName="")) returned 1 [0089.430] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5a0 | out: lpFindFileData=0x12d5a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4ccff98, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc4ccff98, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x442422c3, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x11eb, dwReserved0=0x0, dwReserved1=0x0, cFileName="Cave_Drawings.gif", cAlternateFileName="")) returned 1 [0089.430] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5a0 | out: lpFindFileData=0x12d5a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4d6850c, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc4d6850c, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x4434cc55, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x90f, dwReserved0=0x0, dwReserved1=0x0, cFileName="Connectivity.gif", cAlternateFileName="")) returned 1 [0089.430] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5a0 | out: lpFindFileData=0x12d5a0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x80425158, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7bf1d2d9, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7bf1d2d9, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x285, dwReserved0=0x0, dwReserved1=0x0, cFileName="Desktop.ini", cAlternateFileName="")) returned 1 [0089.430] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5a0 | out: lpFindFileData=0x12d5a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc5015d96, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc5015d96, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x444c9a01, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0xed0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dotted_Lines.emf", cAlternateFileName="")) returned 1 [0089.430] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5a0 | out: lpFindFileData=0x12d5a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xce2acb98, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xce2acb98, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xce04b5c8, ftLastWriteTime.dwHighDateTime=0x1ca040d, nFileSizeHigh=0x0, nFileSizeLow=0xe7, dwReserved0=0x0, dwReserved1=0x0, cFileName="Garden.htm", cAlternateFileName="")) returned 1 [0089.430] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5a0 | out: lpFindFileData=0x12d5a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xce2acb98, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xce2acb98, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xaa410937, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x5d3f, dwReserved0=0x0, dwReserved1=0x0, cFileName="Garden.jpg", cAlternateFileName="")) returned 1 [0089.430] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5a0 | out: lpFindFileData=0x12d5a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc50881ad, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc50881ad, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x444efb5f, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x1594, dwReserved0=0x0, dwReserved1=0x0, cFileName="Genko_1.emf", cAlternateFileName="")) returned 1 [0089.430] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5a0 | out: lpFindFileData=0x12d5a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc50d4467, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc50d4467, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x44515cbd, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x2864, dwReserved0=0x0, dwReserved1=0x0, cFileName="Genko_2.emf", cAlternateFileName="")) returned 1 [0089.737] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5a0 | out: lpFindFileData=0x12d5a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc5120721, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc5120721, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x4453be1b, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x1c7f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Graph.emf", cAlternateFileName="")) returned 1 [0089.738] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5a0 | out: lpFindFileData=0x12d5a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xce2d2cf5, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xce2d2cf5, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xce071725, ftLastWriteTime.dwHighDateTime=0x1ca040d, nFileSizeHigh=0x0, nFileSizeLow=0xed, dwReserved0=0x0, dwReserved1=0x0, cFileName="Green Bubbles.htm", cAlternateFileName="")) returned 1 [0089.740] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5a0 | out: lpFindFileData=0x12d5a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xce2f8e52, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xce2f8e52, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xaa436a95, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x1906, dwReserved0=0x0, dwReserved1=0x0, cFileName="GreenBubbles.jpg", cAlternateFileName="")) returned 1 [0089.741] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5a0 | out: lpFindFileData=0x12d5a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4fc9adc, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc4fc9adc, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x4453be1b, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0xb68, dwReserved0=0x0, dwReserved1=0x0, cFileName="grid_(cm).wmf", cAlternateFileName="")) returned 1 [0089.741] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5a0 | out: lpFindFileData=0x12d5a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4fa397f, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc4fa397f, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x44692a69, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x1d4a, dwReserved0=0x0, dwReserved1=0x0, cFileName="grid_(inch).wmf", cAlternateFileName="")) returned 1 [0089.745] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5a0 | out: lpFindFileData=0x12d5a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xce31efaf, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xce31efaf, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xce0bd9df, ftLastWriteTime.dwHighDateTime=0x1ca040d, nFileSizeHigh=0x0, nFileSizeLow=0xeb, dwReserved0=0x0, dwReserved1=0x0, cFileName="Hand Prints.htm", cAlternateFileName="")) returned 1 [0089.747] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5a0 | out: lpFindFileData=0x12d5a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xce31efaf, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xce31efaf, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xaa45cbf3, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x107e, dwReserved0=0x0, dwReserved1=0x0, cFileName="HandPrints.jpg", cAlternateFileName="")) returned 1 [0089.747] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5a0 | out: lpFindFileData=0x12d5a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc5192b38, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc5192b38, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x4480f815, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x252ec, dwReserved0=0x0, dwReserved1=0x0, cFileName="Memo.emf", cAlternateFileName="")) returned 1 [0089.747] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5a0 | out: lpFindFileData=0x12d5a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4e4cd3a, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc4e4cd3a, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x44835973, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x8a1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Monet.jpg", cAlternateFileName="")) returned 1 [0089.748] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5a0 | out: lpFindFileData=0x12d5a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc51dedf2, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc51dedf2, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x448cdeeb, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x1060, dwReserved0=0x0, dwReserved1=0x0, cFileName="Month_Calendar.emf", cAlternateFileName="")) returned 1 [0089.748] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5a0 | out: lpFindFileData=0x12d5a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc522b0ac, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc522b0ac, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x448cdeeb, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x65b4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Music.emf", cAlternateFileName="")) returned 1 [0089.748] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5a0 | out: lpFindFileData=0x12d5a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4ebf151, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc4ebf151, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x44b2f4cb, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0xb86, dwReserved0=0x0, dwReserved1=0x0, cFileName="Notebook.jpg", cAlternateFileName="")) returned 1 [0089.748] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5a0 | out: lpFindFileData=0x12d5a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xce31efaf, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xce31efaf, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xce0e3b3c, ftLastWriteTime.dwHighDateTime=0x1ca040d, nFileSizeHigh=0x0, nFileSizeLow=0xed, dwReserved0=0x0, dwReserved1=0x0, cFileName="Orange Circles.htm", cAlternateFileName="")) returned 1 [0089.748] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5a0 | out: lpFindFileData=0x12d5a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xce34510c, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xce34510c, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xaa4cf00d, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x18ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="OrangeCircles.jpg", cAlternateFileName="")) returned 1 [0089.748] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5a0 | out: lpFindFileData=0x12d5a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xce34510c, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xce34510c, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xce109c99, ftLastWriteTime.dwHighDateTime=0x1ca040d, nFileSizeHigh=0x0, nFileSizeLow=0xe8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Peacock.htm", cAlternateFileName="")) returned 1 [0089.748] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5a0 | out: lpFindFileData=0x12d5a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xce3913c6, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xce3913c6, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xaa51b2c9, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x13fb, dwReserved0=0x0, dwReserved1=0x0, cFileName="Peacock.jpg", cAlternateFileName="")) returned 1 [0089.748] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5a0 | out: lpFindFileData=0x12d5a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4f0b40b, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc4f0b40b, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x44b55629, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0xf8d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pine_Lumber.jpg", cAlternateFileName="")) returned 1 [0089.748] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5a0 | out: lpFindFileData=0x12d5a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4f31568, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc4f31568, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x44bc7a43, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x13fb, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pretty_Peacock.jpg", cAlternateFileName="")) returned 1 [0089.748] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5a0 | out: lpFindFileData=0x12d5a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4f7d822, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc4f7d822, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x44bc7a43, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x36e1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Psychedelic.jpg", cAlternateFileName="")) returned 1 [0089.748] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5a0 | out: lpFindFileData=0x12d5a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xce3913c6, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xce3913c6, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xce12fdf6, ftLastWriteTime.dwHighDateTime=0x1ca040d, nFileSizeHigh=0x0, nFileSizeLow=0xe9, dwReserved0=0x0, dwReserved1=0x0, cFileName="Roses.htm", cAlternateFileName="")) returned 1 [0089.748] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5a0 | out: lpFindFileData=0x12d5a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xce3b7523, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xce3b7523, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xaa567585, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x780, dwReserved0=0x0, dwReserved1=0x0, cFileName="Roses.jpg", cAlternateFileName="")) returned 1 [0089.748] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5a0 | out: lpFindFileData=0x12d5a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc53cdfab, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc53cdfab, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x45148cd9, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x3da0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sand_Paper.jpg", cAlternateFileName="")) returned 1 [0089.749] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5a0 | out: lpFindFileData=0x12d5a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc5277366, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc5277366, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x4516ee37, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x91c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Seyes.emf", cAlternateFileName="")) returned 1 [0089.749] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5a0 | out: lpFindFileData=0x12d5a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xce3b7523, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xce3b7523, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xce17c0b0, ftLastWriteTime.dwHighDateTime=0x1ca040d, nFileSizeHigh=0x0, nFileSizeLow=0xed, dwReserved0=0x0, dwReserved1=0x0, cFileName="Shades of Blue.htm", cAlternateFileName="")) returned 1 [0089.749] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5a0 | out: lpFindFileData=0x12d5a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xce3b7523, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xce3b7523, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xaa58d6e3, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x127e, dwReserved0=0x0, dwReserved1=0x0, cFileName="ShadesOfBlue.jpg", cAlternateFileName="")) returned 1 [0089.749] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5a0 | out: lpFindFileData=0x12d5a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc530f8da, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc530f8da, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x45194f95, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x13d8c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Shorthand.emf", cAlternateFileName="")) returned 1 [0089.749] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5a0 | out: lpFindFileData=0x12d5a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc541a265, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc541a265, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x451bb0f3, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x7c6, dwReserved0=0x0, dwReserved1=0x0, cFileName="Small_News.jpg", cAlternateFileName="")) returned 1 [0089.749] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5a0 | out: lpFindFileData=0x12d5a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xce3dd680, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xce3dd680, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xce1a220d, ftLastWriteTime.dwHighDateTime=0x1ca040d, nFileSizeHigh=0x0, nFileSizeLow=0xe8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Soft Blue.htm", cAlternateFileName="")) returned 1 [0089.749] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5a0 | out: lpFindFileData=0x12d5a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xce3dd680, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xce3dd680, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xaa5b3841, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x2949, dwReserved0=0x0, dwReserved1=0x0, cFileName="SoftBlue.jpg", cAlternateFileName="")) returned 1 [0089.749] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5a0 | out: lpFindFileData=0x12d5a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xce3dd680, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xce3dd680, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xce1c836a, ftLastWriteTime.dwHighDateTime=0x1ca040d, nFileSizeHigh=0x0, nFileSizeLow=0xe6, dwReserved0=0x0, dwReserved1=0x0, cFileName="Stars.htm", cAlternateFileName="")) returned 1 [0089.749] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5a0 | out: lpFindFileData=0x12d5a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xce4037dd, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xce4037dd, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xaa5ffafd, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x1d51, dwReserved0=0x0, dwReserved1=0x0, cFileName="Stars.jpg", cAlternateFileName="")) returned 1 [0089.749] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5a0 | out: lpFindFileData=0x12d5a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc54403c2, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc54403c2, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x452797c9, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x748, dwReserved0=0x0, dwReserved1=0x0, cFileName="Stucco.gif", cAlternateFileName="")) returned 1 [0089.749] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5a0 | out: lpFindFileData=0x12d5a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc548c67c, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc548c67c, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x4529f927, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0xe42, dwReserved0=0x0, dwReserved1=0x0, cFileName="Tanspecks.jpg", cAlternateFileName="")) returned 1 [0089.749] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5a0 | out: lpFindFileData=0x12d5a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc54b27d9, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc54b27d9, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x4573c389, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x121e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Tiki.gif", cAlternateFileName="")) returned 1 [0089.749] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5a0 | out: lpFindFileData=0x12d5a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc535bb94, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc535bb94, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x4573c389, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x6860, dwReserved0=0x0, dwReserved1=0x0, cFileName="To_Do_List.emf", cAlternateFileName="")) returned 1 [0089.749] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5a0 | out: lpFindFileData=0x12d5a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc54fea93, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc54fea93, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x457ae7a3, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0xc60, dwReserved0=0x0, dwReserved1=0x0, cFileName="White_Chocolate.jpg", cAlternateFileName="")) returned 1 [0089.749] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5a0 | out: lpFindFileData=0x12d5a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc5524bf0, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc5524bf0, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x457faa5f, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x3ad7, dwReserved0=0x0, dwReserved1=0x0, cFileName="Wrinkled_Paper.gif", cAlternateFileName="")) returned 1 [0089.750] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5a0 | out: lpFindFileData=0x12d5a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc5524bf0, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc5524bf0, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x457faa5f, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x3ad7, dwReserved0=0x0, dwReserved1=0x0, cFileName="Wrinkled_Paper.gif", cAlternateFileName="")) returned 0 [0089.750] FindClose (in: hFindFile=0x1af3b6b0 | out: hFindFile=0x1af3b6b0) returned 1 [0089.751] SetErrorMode (uMode=0x0) returned 0x1 [0089.752] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Bears.jpg", nBufferLength=0x105, lpBuffer=0x12d600, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Bears.jpg", lpFilePart=0x0) returned 0x43 [0089.752] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Bears.jpg", nBufferLength=0x105, lpBuffer=0x12d5f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Bears.jpg", lpFilePart=0x0) returned 0x43 [0089.752] SetErrorMode (uMode=0x1) returned 0x0 [0089.752] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Bears.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\bears.jpg"), fInfoLevelId=0x0, lpFileInformation=0x12d870 | out: lpFileInformation=0x12d870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xce2acb98, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xce2acb98, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xaa352261, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x432)) returned 1 [0089.753] SetErrorMode (uMode=0x0) returned 0x1 [0089.753] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Bears.jpg", nBufferLength=0x105, lpBuffer=0x12d2c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Bears.jpg", lpFilePart=0x0) returned 0x43 [0089.754] SetErrorMode (uMode=0x1) returned 0x0 [0089.754] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Bears.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\bears.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1f0 [0089.754] SetErrorMode (uMode=0x0) returned 0x1 [0089.754] GetFileType (hFile=0x1f0) returned 0x1 [0089.754] GetFileSize (in: hFile=0x1f0, lpFileSizeHigh=0x12d928 | out: lpFileSizeHigh=0x12d928*=0x0) returned 0x432 [0089.754] ReadFile (in: hFile=0x1f0, lpBuffer=0x26e8f48, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12d808, lpOverlapped=0x0 | out: lpBuffer=0x26e8f48*, lpNumberOfBytesRead=0x12d808*=0x432, lpOverlapped=0x0) returned 1 [0089.776] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Bears.jpg", nBufferLength=0x105, lpBuffer=0x12d2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Bears.jpg", lpFilePart=0x0) returned 0x43 [0089.776] SetErrorMode (uMode=0x1) returned 0x0 [0089.776] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Bears.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\bears.jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0089.784] SetErrorMode (uMode=0x0) returned 0x1 [0089.786] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Blue_Gradient.jpg", nBufferLength=0x105, lpBuffer=0x12d600, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Blue_Gradient.jpg", lpFilePart=0x0) returned 0x4b [0089.786] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Blue_Gradient.jpg", nBufferLength=0x105, lpBuffer=0x12d5f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Blue_Gradient.jpg", lpFilePart=0x0) returned 0x4b [0089.787] SetErrorMode (uMode=0x1) returned 0x0 [0089.787] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Blue_Gradient.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\blue_gradient.jpg"), fInfoLevelId=0x0, lpFileInformation=0x12d870 | out: lpFileInformation=0x12d870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4ca9e3b, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc4ca9e3b, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x4421c165, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0xa0f)) returned 1 [0089.801] SetErrorMode (uMode=0x0) returned 0x1 [0089.801] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Blue_Gradient.jpg", nBufferLength=0x105, lpBuffer=0x12d2c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Blue_Gradient.jpg", lpFilePart=0x0) returned 0x4b [0089.801] SetErrorMode (uMode=0x1) returned 0x0 [0089.801] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Blue_Gradient.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\blue_gradient.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1f0 [0089.801] SetErrorMode (uMode=0x0) returned 0x1 [0089.801] GetFileType (hFile=0x1f0) returned 0x1 [0089.801] GetFileSize (in: hFile=0x1f0, lpFileSizeHigh=0x12d928 | out: lpFileSizeHigh=0x12d928*=0x0) returned 0xa0f [0089.802] ReadFile (in: hFile=0x1f0, lpBuffer=0x27cd500, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12d808, lpOverlapped=0x0 | out: lpBuffer=0x27cd500*, lpNumberOfBytesRead=0x12d808*=0xa0f, lpOverlapped=0x0) returned 1 [0089.825] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Blue_Gradient.jpg", nBufferLength=0x105, lpBuffer=0x12d2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Blue_Gradient.jpg", lpFilePart=0x0) returned 0x4b [0089.825] SetErrorMode (uMode=0x1) returned 0x0 [0089.825] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Blue_Gradient.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\blue_gradient.jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0089.830] SetErrorMode (uMode=0x0) returned 0x1 [0089.834] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Garden.jpg", nBufferLength=0x105, lpBuffer=0x12d600, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Garden.jpg", lpFilePart=0x0) returned 0x44 [0089.834] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Garden.jpg", nBufferLength=0x105, lpBuffer=0x12d5f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Garden.jpg", lpFilePart=0x0) returned 0x44 [0089.834] SetErrorMode (uMode=0x1) returned 0x0 [0089.834] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Garden.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\garden.jpg"), fInfoLevelId=0x0, lpFileInformation=0x12d870 | out: lpFileInformation=0x12d870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xce2acb98, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xce2acb98, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xaa410937, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x5d3f)) returned 1 [0089.834] SetErrorMode (uMode=0x0) returned 0x1 [0089.835] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Garden.jpg", nBufferLength=0x105, lpBuffer=0x12d2c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Garden.jpg", lpFilePart=0x0) returned 0x44 [0089.835] SetErrorMode (uMode=0x1) returned 0x0 [0089.835] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Garden.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\garden.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1f0 [0089.837] SetErrorMode (uMode=0x0) returned 0x1 [0089.837] GetFileType (hFile=0x1f0) returned 0x1 [0089.837] GetFileSize (in: hFile=0x1f0, lpFileSizeHigh=0x12d928 | out: lpFileSizeHigh=0x12d928*=0x0) returned 0x5d3f [0089.838] ReadFile (in: hFile=0x1f0, lpBuffer=0x28b2c28, nNumberOfBytesToRead=0x5d3f, lpNumberOfBytesRead=0x12d808, lpOverlapped=0x0 | out: lpBuffer=0x28b2c28*, lpNumberOfBytesRead=0x12d808*=0x5d3f, lpOverlapped=0x0) returned 1 [0089.913] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Garden.jpg", nBufferLength=0x105, lpBuffer=0x12d2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Garden.jpg", lpFilePart=0x0) returned 0x44 [0089.914] SetErrorMode (uMode=0x1) returned 0x0 [0089.914] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Garden.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\garden.jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0089.918] SetErrorMode (uMode=0x0) returned 0x1 [0089.921] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\GreenBubbles.jpg", nBufferLength=0x105, lpBuffer=0x12d600, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\GreenBubbles.jpg", lpFilePart=0x0) returned 0x4a [0089.921] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\GreenBubbles.jpg", nBufferLength=0x105, lpBuffer=0x12d5f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\GreenBubbles.jpg", lpFilePart=0x0) returned 0x4a [0089.921] SetErrorMode (uMode=0x1) returned 0x0 [0089.921] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\GreenBubbles.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\greenbubbles.jpg"), fInfoLevelId=0x0, lpFileInformation=0x12d870 | out: lpFileInformation=0x12d870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xce2f8e52, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xce2f8e52, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xaa436a95, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x1906)) returned 1 [0089.922] SetErrorMode (uMode=0x0) returned 0x1 [0089.923] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\GreenBubbles.jpg", nBufferLength=0x105, lpBuffer=0x12d2c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\GreenBubbles.jpg", lpFilePart=0x0) returned 0x4a [0089.923] SetErrorMode (uMode=0x1) returned 0x0 [0089.923] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\GreenBubbles.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\greenbubbles.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1f0 [0089.923] SetErrorMode (uMode=0x0) returned 0x1 [0089.923] GetFileType (hFile=0x1f0) returned 0x1 [0089.923] GetFileSize (in: hFile=0x1f0, lpFileSizeHigh=0x12d928 | out: lpFileSizeHigh=0x12d928*=0x0) returned 0x1906 [0089.923] ReadFile (in: hFile=0x1f0, lpBuffer=0x27be838, nNumberOfBytesToRead=0x1906, lpNumberOfBytesRead=0x12d808, lpOverlapped=0x0 | out: lpBuffer=0x27be838*, lpNumberOfBytesRead=0x12d808*=0x1906, lpOverlapped=0x0) returned 1 [0090.009] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\GreenBubbles.jpg", nBufferLength=0x105, lpBuffer=0x12d2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\GreenBubbles.jpg", lpFilePart=0x0) returned 0x4a [0090.009] SetErrorMode (uMode=0x1) returned 0x0 [0090.009] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\GreenBubbles.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\greenbubbles.jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.014] SetErrorMode (uMode=0x0) returned 0x1 [0090.017] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\HandPrints.jpg", nBufferLength=0x105, lpBuffer=0x12d600, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\HandPrints.jpg", lpFilePart=0x0) returned 0x48 [0090.017] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\HandPrints.jpg", nBufferLength=0x105, lpBuffer=0x12d5f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\HandPrints.jpg", lpFilePart=0x0) returned 0x48 [0090.017] SetErrorMode (uMode=0x1) returned 0x0 [0090.017] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\HandPrints.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\handprints.jpg"), fInfoLevelId=0x0, lpFileInformation=0x12d870 | out: lpFileInformation=0x12d870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xce31efaf, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xce31efaf, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xaa45cbf3, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x107e)) returned 1 [0090.018] SetErrorMode (uMode=0x0) returned 0x1 [0090.018] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\HandPrints.jpg", nBufferLength=0x105, lpBuffer=0x12d2c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\HandPrints.jpg", lpFilePart=0x0) returned 0x48 [0090.018] SetErrorMode (uMode=0x1) returned 0x0 [0090.018] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\HandPrints.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\handprints.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1f0 [0090.019] SetErrorMode (uMode=0x0) returned 0x1 [0090.019] GetFileType (hFile=0x1f0) returned 0x1 [0090.019] GetFileSize (in: hFile=0x1f0, lpFileSizeHigh=0x12d928 | out: lpFileSizeHigh=0x12d928*=0x0) returned 0x107e [0090.019] ReadFile (in: hFile=0x1f0, lpBuffer=0x28a9610, nNumberOfBytesToRead=0x107e, lpNumberOfBytesRead=0x12d808, lpOverlapped=0x0 | out: lpBuffer=0x28a9610*, lpNumberOfBytesRead=0x12d808*=0x107e, lpOverlapped=0x0) returned 1 [0090.062] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\HandPrints.jpg", nBufferLength=0x105, lpBuffer=0x12d2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\HandPrints.jpg", lpFilePart=0x0) returned 0x48 [0090.062] SetErrorMode (uMode=0x1) returned 0x0 [0090.062] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\HandPrints.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\handprints.jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0090.067] SetErrorMode (uMode=0x0) returned 0x1 [0090.069] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Monet.jpg", nBufferLength=0x105, lpBuffer=0x12d600, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Monet.jpg", lpFilePart=0x0) returned 0x43 [0090.069] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Monet.jpg", nBufferLength=0x105, lpBuffer=0x12d5f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Monet.jpg", lpFilePart=0x0) returned 0x43 [0090.069] SetErrorMode (uMode=0x1) returned 0x0 [0090.099] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Monet.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\monet.jpg"), fInfoLevelId=0x0, lpFileInformation=0x12d870 | out: lpFileInformation=0x12d870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4e4cd3a, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc4e4cd3a, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x44835973, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x8a1)) returned 1 [0091.574] SetErrorMode (uMode=0x0) returned 0x1 [0091.574] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Monet.jpg", nBufferLength=0x105, lpBuffer=0x12d2c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Monet.jpg", lpFilePart=0x0) returned 0x43 [0091.574] SetErrorMode (uMode=0x1) returned 0x0 [0091.575] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Monet.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\monet.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1f0 [0091.575] SetErrorMode (uMode=0x0) returned 0x1 [0091.575] GetFileType (hFile=0x1f0) returned 0x1 [0091.575] GetFileSize (in: hFile=0x1f0, lpFileSizeHigh=0x12d928 | out: lpFileSizeHigh=0x12d928*=0x0) returned 0x8a1 [0091.575] ReadFile (in: hFile=0x1f0, lpBuffer=0x279eb78, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12d808, lpOverlapped=0x0 | out: lpBuffer=0x279eb78*, lpNumberOfBytesRead=0x12d808*=0x8a1, lpOverlapped=0x0) returned 1 [0091.597] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Monet.jpg", nBufferLength=0x105, lpBuffer=0x12d2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Monet.jpg", lpFilePart=0x0) returned 0x43 [0091.597] SetErrorMode (uMode=0x1) returned 0x0 [0091.598] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Monet.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\monet.jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.602] SetErrorMode (uMode=0x0) returned 0x1 [0091.605] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Notebook.jpg", nBufferLength=0x105, lpBuffer=0x12d600, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Notebook.jpg", lpFilePart=0x0) returned 0x46 [0091.605] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Notebook.jpg", nBufferLength=0x105, lpBuffer=0x12d5f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Notebook.jpg", lpFilePart=0x0) returned 0x46 [0091.605] SetErrorMode (uMode=0x1) returned 0x0 [0091.605] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Notebook.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\notebook.jpg"), fInfoLevelId=0x0, lpFileInformation=0x12d870 | out: lpFileInformation=0x12d870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4ebf151, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc4ebf151, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x44b2f4cb, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0xb86)) returned 1 [0091.638] SetErrorMode (uMode=0x0) returned 0x1 [0091.638] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Notebook.jpg", nBufferLength=0x105, lpBuffer=0x12d2c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Notebook.jpg", lpFilePart=0x0) returned 0x46 [0091.638] SetErrorMode (uMode=0x1) returned 0x0 [0091.638] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Notebook.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\notebook.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1f0 [0091.638] SetErrorMode (uMode=0x0) returned 0x1 [0091.638] GetFileType (hFile=0x1f0) returned 0x1 [0091.638] GetFileSize (in: hFile=0x1f0, lpFileSizeHigh=0x12d928 | out: lpFileSizeHigh=0x12d928*=0x0) returned 0xb86 [0091.639] ReadFile (in: hFile=0x1f0, lpBuffer=0x2884950, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12d808, lpOverlapped=0x0 | out: lpBuffer=0x2884950*, lpNumberOfBytesRead=0x12d808*=0xb86, lpOverlapped=0x0) returned 1 [0091.672] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Notebook.jpg", nBufferLength=0x105, lpBuffer=0x12d2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Notebook.jpg", lpFilePart=0x0) returned 0x46 [0091.673] SetErrorMode (uMode=0x1) returned 0x0 [0091.673] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Notebook.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\notebook.jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.686] SetErrorMode (uMode=0x0) returned 0x1 [0091.688] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\OrangeCircles.jpg", nBufferLength=0x105, lpBuffer=0x12d600, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\OrangeCircles.jpg", lpFilePart=0x0) returned 0x4b [0091.688] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\OrangeCircles.jpg", nBufferLength=0x105, lpBuffer=0x12d5f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\OrangeCircles.jpg", lpFilePart=0x0) returned 0x4b [0091.688] SetErrorMode (uMode=0x1) returned 0x0 [0091.689] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\OrangeCircles.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\orangecircles.jpg"), fInfoLevelId=0x0, lpFileInformation=0x12d870 | out: lpFileInformation=0x12d870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xce34510c, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xce34510c, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xaa4cf00d, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x18ed)) returned 1 [0091.689] SetErrorMode (uMode=0x0) returned 0x1 [0091.689] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\OrangeCircles.jpg", nBufferLength=0x105, lpBuffer=0x12d2c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\OrangeCircles.jpg", lpFilePart=0x0) returned 0x4b [0091.689] SetErrorMode (uMode=0x1) returned 0x0 [0091.689] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\OrangeCircles.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\orangecircles.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1f0 [0091.690] SetErrorMode (uMode=0x0) returned 0x1 [0091.690] GetFileType (hFile=0x1f0) returned 0x1 [0091.690] GetFileSize (in: hFile=0x1f0, lpFileSizeHigh=0x12d928 | out: lpFileSizeHigh=0x12d928*=0x0) returned 0x18ed [0091.690] ReadFile (in: hFile=0x1f0, lpBuffer=0x2757d50, nNumberOfBytesToRead=0x18ed, lpNumberOfBytesRead=0x12d808, lpOverlapped=0x0 | out: lpBuffer=0x2757d50*, lpNumberOfBytesRead=0x12d808*=0x18ed, lpOverlapped=0x0) returned 1 [0091.714] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\OrangeCircles.jpg", nBufferLength=0x105, lpBuffer=0x12d2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\OrangeCircles.jpg", lpFilePart=0x0) returned 0x4b [0091.715] SetErrorMode (uMode=0x1) returned 0x0 [0091.715] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\OrangeCircles.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\orangecircles.jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.719] SetErrorMode (uMode=0x0) returned 0x1 [0091.721] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Peacock.jpg", nBufferLength=0x105, lpBuffer=0x12d600, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Peacock.jpg", lpFilePart=0x0) returned 0x45 [0091.721] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Peacock.jpg", nBufferLength=0x105, lpBuffer=0x12d5f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Peacock.jpg", lpFilePart=0x0) returned 0x45 [0091.721] SetErrorMode (uMode=0x1) returned 0x0 [0091.721] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Peacock.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\peacock.jpg"), fInfoLevelId=0x0, lpFileInformation=0x12d870 | out: lpFileInformation=0x12d870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xce3913c6, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xce3913c6, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xaa51b2c9, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x13fb)) returned 1 [0091.724] SetErrorMode (uMode=0x0) returned 0x1 [0091.724] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Peacock.jpg", nBufferLength=0x105, lpBuffer=0x12d2c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Peacock.jpg", lpFilePart=0x0) returned 0x45 [0091.724] SetErrorMode (uMode=0x1) returned 0x0 [0091.724] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Peacock.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\peacock.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1f0 [0091.724] SetErrorMode (uMode=0x0) returned 0x1 [0091.725] GetFileType (hFile=0x1f0) returned 0x1 [0091.725] GetFileSize (in: hFile=0x1f0, lpFileSizeHigh=0x12d928 | out: lpFileSizeHigh=0x12d928*=0x0) returned 0x13fb [0091.725] ReadFile (in: hFile=0x1f0, lpBuffer=0x28429a0, nNumberOfBytesToRead=0x13fb, lpNumberOfBytesRead=0x12d808, lpOverlapped=0x0 | out: lpBuffer=0x28429a0*, lpNumberOfBytesRead=0x12d808*=0x13fb, lpOverlapped=0x0) returned 1 [0091.761] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Peacock.jpg", nBufferLength=0x105, lpBuffer=0x12d2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Peacock.jpg", lpFilePart=0x0) returned 0x45 [0091.762] SetErrorMode (uMode=0x1) returned 0x0 [0091.762] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Peacock.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\peacock.jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.766] SetErrorMode (uMode=0x0) returned 0x1 [0091.768] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Pine_Lumber.jpg", nBufferLength=0x105, lpBuffer=0x12d600, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Pine_Lumber.jpg", lpFilePart=0x0) returned 0x49 [0091.768] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Pine_Lumber.jpg", nBufferLength=0x105, lpBuffer=0x12d5f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Pine_Lumber.jpg", lpFilePart=0x0) returned 0x49 [0091.768] SetErrorMode (uMode=0x1) returned 0x0 [0091.768] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Pine_Lumber.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\pine_lumber.jpg"), fInfoLevelId=0x0, lpFileInformation=0x12d870 | out: lpFileInformation=0x12d870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4f0b40b, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc4f0b40b, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x44b55629, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0xf8d)) returned 1 [0091.768] SetErrorMode (uMode=0x0) returned 0x1 [0091.768] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Pine_Lumber.jpg", nBufferLength=0x105, lpBuffer=0x12d2c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Pine_Lumber.jpg", lpFilePart=0x0) returned 0x49 [0091.769] SetErrorMode (uMode=0x1) returned 0x0 [0091.769] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Pine_Lumber.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\pine_lumber.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1f0 [0091.769] SetErrorMode (uMode=0x0) returned 0x1 [0091.769] GetFileType (hFile=0x1f0) returned 0x1 [0091.769] GetFileSize (in: hFile=0x1f0, lpFileSizeHigh=0x12d928 | out: lpFileSizeHigh=0x12d928*=0x0) returned 0xf8d [0091.769] ReadFile (in: hFile=0x1f0, lpBuffer=0x272fa90, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12d808, lpOverlapped=0x0 | out: lpBuffer=0x272fa90*, lpNumberOfBytesRead=0x12d808*=0xf8d, lpOverlapped=0x0) returned 1 [0091.815] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Pine_Lumber.jpg", nBufferLength=0x105, lpBuffer=0x12d2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Pine_Lumber.jpg", lpFilePart=0x0) returned 0x49 [0091.815] SetErrorMode (uMode=0x1) returned 0x0 [0091.815] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Pine_Lumber.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\pine_lumber.jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.819] SetErrorMode (uMode=0x0) returned 0x1 [0091.822] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Pretty_Peacock.jpg", nBufferLength=0x105, lpBuffer=0x12d600, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Pretty_Peacock.jpg", lpFilePart=0x0) returned 0x4c [0091.822] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Pretty_Peacock.jpg", nBufferLength=0x105, lpBuffer=0x12d5f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Pretty_Peacock.jpg", lpFilePart=0x0) returned 0x4c [0091.822] SetErrorMode (uMode=0x1) returned 0x0 [0091.822] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Pretty_Peacock.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\pretty_peacock.jpg"), fInfoLevelId=0x0, lpFileInformation=0x12d870 | out: lpFileInformation=0x12d870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4f31568, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc4f31568, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x44bc7a43, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x13fb)) returned 1 [0091.822] SetErrorMode (uMode=0x0) returned 0x1 [0091.822] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Pretty_Peacock.jpg", nBufferLength=0x105, lpBuffer=0x12d2c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Pretty_Peacock.jpg", lpFilePart=0x0) returned 0x4c [0091.823] SetErrorMode (uMode=0x1) returned 0x0 [0091.823] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Pretty_Peacock.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\pretty_peacock.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1f0 [0091.823] SetErrorMode (uMode=0x0) returned 0x1 [0091.823] GetFileType (hFile=0x1f0) returned 0x1 [0091.823] GetFileSize (in: hFile=0x1f0, lpFileSizeHigh=0x12d928 | out: lpFileSizeHigh=0x12d928*=0x0) returned 0x13fb [0091.823] ReadFile (in: hFile=0x1f0, lpBuffer=0x2816f00, nNumberOfBytesToRead=0x13fb, lpNumberOfBytesRead=0x12d808, lpOverlapped=0x0 | out: lpBuffer=0x2816f00*, lpNumberOfBytesRead=0x12d808*=0x13fb, lpOverlapped=0x0) returned 1 [0091.858] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Pretty_Peacock.jpg", nBufferLength=0x105, lpBuffer=0x12d2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Pretty_Peacock.jpg", lpFilePart=0x0) returned 0x4c [0091.858] SetErrorMode (uMode=0x1) returned 0x0 [0091.858] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Pretty_Peacock.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\pretty_peacock.jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.862] SetErrorMode (uMode=0x0) returned 0x1 [0091.864] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Psychedelic.jpg", nBufferLength=0x105, lpBuffer=0x12d600, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Psychedelic.jpg", lpFilePart=0x0) returned 0x49 [0091.865] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Psychedelic.jpg", nBufferLength=0x105, lpBuffer=0x12d5f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Psychedelic.jpg", lpFilePart=0x0) returned 0x49 [0091.865] SetErrorMode (uMode=0x1) returned 0x0 [0091.865] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Psychedelic.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\psychedelic.jpg"), fInfoLevelId=0x0, lpFileInformation=0x12d870 | out: lpFileInformation=0x12d870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4f7d822, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc4f7d822, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x44bc7a43, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x36e1)) returned 1 [0091.866] SetErrorMode (uMode=0x0) returned 0x1 [0091.866] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Psychedelic.jpg", nBufferLength=0x105, lpBuffer=0x12d2c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Psychedelic.jpg", lpFilePart=0x0) returned 0x49 [0091.866] SetErrorMode (uMode=0x1) returned 0x0 [0091.867] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Psychedelic.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\psychedelic.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1f0 [0091.867] SetErrorMode (uMode=0x0) returned 0x1 [0091.867] GetFileType (hFile=0x1f0) returned 0x1 [0091.867] GetFileSize (in: hFile=0x1f0, lpFileSizeHigh=0x12d928 | out: lpFileSizeHigh=0x12d928*=0x0) returned 0x36e1 [0091.867] ReadFile (in: hFile=0x1f0, lpBuffer=0x26fcd18, nNumberOfBytesToRead=0x36e1, lpNumberOfBytesRead=0x12d808, lpOverlapped=0x0 | out: lpBuffer=0x26fcd18*, lpNumberOfBytesRead=0x12d808*=0x36e1, lpOverlapped=0x0) returned 1 [0091.998] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Psychedelic.jpg", nBufferLength=0x105, lpBuffer=0x12d2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Psychedelic.jpg", lpFilePart=0x0) returned 0x49 [0091.998] SetErrorMode (uMode=0x1) returned 0x0 [0091.998] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Psychedelic.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\psychedelic.jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0092.002] SetErrorMode (uMode=0x0) returned 0x1 [0092.004] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Roses.jpg", nBufferLength=0x105, lpBuffer=0x12d600, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Roses.jpg", lpFilePart=0x0) returned 0x43 [0092.005] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Roses.jpg", nBufferLength=0x105, lpBuffer=0x12d5f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Roses.jpg", lpFilePart=0x0) returned 0x43 [0092.005] SetErrorMode (uMode=0x1) returned 0x0 [0092.005] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Roses.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\roses.jpg"), fInfoLevelId=0x0, lpFileInformation=0x12d870 | out: lpFileInformation=0x12d870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xce3b7523, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xce3b7523, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xaa567585, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x780)) returned 1 [0092.667] SetErrorMode (uMode=0x0) returned 0x1 [0092.667] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Roses.jpg", nBufferLength=0x105, lpBuffer=0x12d2c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Roses.jpg", lpFilePart=0x0) returned 0x43 [0092.667] SetErrorMode (uMode=0x1) returned 0x0 [0092.667] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Roses.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\roses.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1f0 [0092.668] SetErrorMode (uMode=0x0) returned 0x1 [0092.668] GetFileType (hFile=0x1f0) returned 0x1 [0092.668] GetFileSize (in: hFile=0x1f0, lpFileSizeHigh=0x12d928 | out: lpFileSizeHigh=0x12d928*=0x0) returned 0x780 [0092.668] ReadFile (in: hFile=0x1f0, lpBuffer=0x27f34d8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12d808, lpOverlapped=0x0 | out: lpBuffer=0x27f34d8*, lpNumberOfBytesRead=0x12d808*=0x780, lpOverlapped=0x0) returned 1 [0092.935] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Roses.jpg", nBufferLength=0x105, lpBuffer=0x12d2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Roses.jpg", lpFilePart=0x0) returned 0x43 [0092.935] SetErrorMode (uMode=0x1) returned 0x0 [0092.935] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Roses.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\roses.jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0093.089] SetErrorMode (uMode=0x0) returned 0x1 [0093.586] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Sand_Paper.jpg", nBufferLength=0x105, lpBuffer=0x12d600, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Sand_Paper.jpg", lpFilePart=0x0) returned 0x48 [0093.586] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Sand_Paper.jpg", nBufferLength=0x105, lpBuffer=0x12d5f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Sand_Paper.jpg", lpFilePart=0x0) returned 0x48 [0093.586] SetErrorMode (uMode=0x1) returned 0x0 [0093.586] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Sand_Paper.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\sand_paper.jpg"), fInfoLevelId=0x0, lpFileInformation=0x12d870 | out: lpFileInformation=0x12d870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc53cdfab, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc53cdfab, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x45148cd9, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x3da0)) returned 1 [0093.587] SetErrorMode (uMode=0x0) returned 0x1 [0093.587] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Sand_Paper.jpg", nBufferLength=0x105, lpBuffer=0x12d2c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Sand_Paper.jpg", lpFilePart=0x0) returned 0x48 [0093.587] SetErrorMode (uMode=0x1) returned 0x0 [0093.587] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Sand_Paper.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\sand_paper.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1f0 [0093.587] SetErrorMode (uMode=0x0) returned 0x1 [0093.587] GetFileType (hFile=0x1f0) returned 0x1 [0093.587] GetFileSize (in: hFile=0x1f0, lpFileSizeHigh=0x12d928 | out: lpFileSizeHigh=0x12d928*=0x0) returned 0x3da0 [0093.588] ReadFile (in: hFile=0x1f0, lpBuffer=0x26db8a0, nNumberOfBytesToRead=0x3da0, lpNumberOfBytesRead=0x12d808, lpOverlapped=0x0 | out: lpBuffer=0x26db8a0*, lpNumberOfBytesRead=0x12d808*=0x3da0, lpOverlapped=0x0) returned 1 [0093.645] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Sand_Paper.jpg", nBufferLength=0x105, lpBuffer=0x12d2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Sand_Paper.jpg", lpFilePart=0x0) returned 0x48 [0093.645] SetErrorMode (uMode=0x1) returned 0x0 [0093.646] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Sand_Paper.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\sand_paper.jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0093.651] SetErrorMode (uMode=0x0) returned 0x1 [0093.653] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\ShadesOfBlue.jpg", nBufferLength=0x105, lpBuffer=0x12d600, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\ShadesOfBlue.jpg", lpFilePart=0x0) returned 0x4a [0093.654] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\ShadesOfBlue.jpg", nBufferLength=0x105, lpBuffer=0x12d5f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\ShadesOfBlue.jpg", lpFilePart=0x0) returned 0x4a [0093.654] SetErrorMode (uMode=0x1) returned 0x0 [0093.654] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\ShadesOfBlue.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\shadesofblue.jpg"), fInfoLevelId=0x0, lpFileInformation=0x12d870 | out: lpFileInformation=0x12d870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xce3b7523, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xce3b7523, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xaa58d6e3, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x127e)) returned 1 [0093.658] SetErrorMode (uMode=0x0) returned 0x1 [0093.658] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\ShadesOfBlue.jpg", nBufferLength=0x105, lpBuffer=0x12d2c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\ShadesOfBlue.jpg", lpFilePart=0x0) returned 0x4a [0093.658] SetErrorMode (uMode=0x1) returned 0x0 [0093.658] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\ShadesOfBlue.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\shadesofblue.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1f0 [0093.658] SetErrorMode (uMode=0x0) returned 0x1 [0093.659] GetFileType (hFile=0x1f0) returned 0x1 [0093.659] GetFileSize (in: hFile=0x1f0, lpFileSizeHigh=0x12d928 | out: lpFileSizeHigh=0x12d928*=0x0) returned 0x127e [0093.659] ReadFile (in: hFile=0x1f0, lpBuffer=0x27d41e0, nNumberOfBytesToRead=0x127e, lpNumberOfBytesRead=0x12d808, lpOverlapped=0x0 | out: lpBuffer=0x27d41e0*, lpNumberOfBytesRead=0x12d808*=0x127e, lpOverlapped=0x0) returned 1 [0093.687] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\ShadesOfBlue.jpg", nBufferLength=0x105, lpBuffer=0x12d2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\ShadesOfBlue.jpg", lpFilePart=0x0) returned 0x4a [0093.688] SetErrorMode (uMode=0x1) returned 0x0 [0093.688] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\ShadesOfBlue.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\shadesofblue.jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0093.692] SetErrorMode (uMode=0x0) returned 0x1 [0093.695] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Small_News.jpg", nBufferLength=0x105, lpBuffer=0x12d600, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Small_News.jpg", lpFilePart=0x0) returned 0x48 [0093.695] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Small_News.jpg", nBufferLength=0x105, lpBuffer=0x12d5f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Small_News.jpg", lpFilePart=0x0) returned 0x48 [0093.695] SetErrorMode (uMode=0x1) returned 0x0 [0093.695] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Small_News.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\small_news.jpg"), fInfoLevelId=0x0, lpFileInformation=0x12d870 | out: lpFileInformation=0x12d870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc541a265, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc541a265, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x451bb0f3, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x7c6)) returned 1 [0093.700] SetErrorMode (uMode=0x0) returned 0x1 [0093.700] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Small_News.jpg", nBufferLength=0x105, lpBuffer=0x12d2c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Small_News.jpg", lpFilePart=0x0) returned 0x48 [0093.700] SetErrorMode (uMode=0x1) returned 0x0 [0093.700] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Small_News.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\small_news.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1f0 [0093.700] SetErrorMode (uMode=0x0) returned 0x1 [0093.700] GetFileType (hFile=0x1f0) returned 0x1 [0093.700] GetFileSize (in: hFile=0x1f0, lpFileSizeHigh=0x12d928 | out: lpFileSizeHigh=0x12d928*=0x0) returned 0x7c6 [0093.700] ReadFile (in: hFile=0x1f0, lpBuffer=0x28bcc80, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12d808, lpOverlapped=0x0 | out: lpBuffer=0x28bcc80*, lpNumberOfBytesRead=0x12d808*=0x7c6, lpOverlapped=0x0) returned 1 [0093.745] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Small_News.jpg", nBufferLength=0x105, lpBuffer=0x12d2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Small_News.jpg", lpFilePart=0x0) returned 0x48 [0093.745] SetErrorMode (uMode=0x1) returned 0x0 [0093.745] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Small_News.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\small_news.jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0093.749] SetErrorMode (uMode=0x0) returned 0x1 [0093.752] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\SoftBlue.jpg", nBufferLength=0x105, lpBuffer=0x12d600, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\SoftBlue.jpg", lpFilePart=0x0) returned 0x46 [0093.752] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\SoftBlue.jpg", nBufferLength=0x105, lpBuffer=0x12d5f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\SoftBlue.jpg", lpFilePart=0x0) returned 0x46 [0093.752] SetErrorMode (uMode=0x1) returned 0x0 [0093.752] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\SoftBlue.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\softblue.jpg"), fInfoLevelId=0x0, lpFileInformation=0x12d870 | out: lpFileInformation=0x12d870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xce3dd680, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xce3dd680, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xaa5b3841, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x2949)) returned 1 [0093.755] SetErrorMode (uMode=0x0) returned 0x1 [0093.755] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\SoftBlue.jpg", nBufferLength=0x105, lpBuffer=0x12d2c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\SoftBlue.jpg", lpFilePart=0x0) returned 0x46 [0093.755] SetErrorMode (uMode=0x1) returned 0x0 [0093.755] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\SoftBlue.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\softblue.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1f0 [0093.755] SetErrorMode (uMode=0x0) returned 0x1 [0093.755] GetFileType (hFile=0x1f0) returned 0x1 [0093.755] GetFileSize (in: hFile=0x1f0, lpFileSizeHigh=0x12d928 | out: lpFileSizeHigh=0x12d928*=0x0) returned 0x2949 [0093.756] ReadFile (in: hFile=0x1f0, lpBuffer=0x279d118, nNumberOfBytesToRead=0x2949, lpNumberOfBytesRead=0x12d808, lpOverlapped=0x0 | out: lpBuffer=0x279d118*, lpNumberOfBytesRead=0x12d808*=0x2949, lpOverlapped=0x0) returned 1 [0093.786] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\SoftBlue.jpg", nBufferLength=0x105, lpBuffer=0x12d2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\SoftBlue.jpg", lpFilePart=0x0) returned 0x46 [0093.786] SetErrorMode (uMode=0x1) returned 0x0 [0093.786] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\SoftBlue.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\softblue.jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0093.790] SetErrorMode (uMode=0x0) returned 0x1 [0093.792] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Stars.jpg", nBufferLength=0x105, lpBuffer=0x12d600, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Stars.jpg", lpFilePart=0x0) returned 0x43 [0093.792] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Stars.jpg", nBufferLength=0x105, lpBuffer=0x12d5f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Stars.jpg", lpFilePart=0x0) returned 0x43 [0093.792] SetErrorMode (uMode=0x1) returned 0x0 [0093.793] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Stars.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\stars.jpg"), fInfoLevelId=0x0, lpFileInformation=0x12d870 | out: lpFileInformation=0x12d870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xce4037dd, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xce4037dd, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xaa5ffafd, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x1d51)) returned 1 [0093.821] SetErrorMode (uMode=0x0) returned 0x1 [0093.821] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Stars.jpg", nBufferLength=0x105, lpBuffer=0x12d2c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Stars.jpg", lpFilePart=0x0) returned 0x43 [0093.821] SetErrorMode (uMode=0x1) returned 0x0 [0093.822] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Stars.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\stars.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1f0 [0093.822] SetErrorMode (uMode=0x0) returned 0x1 [0093.822] GetFileType (hFile=0x1f0) returned 0x1 [0093.822] GetFileSize (in: hFile=0x1f0, lpFileSizeHigh=0x12d928 | out: lpFileSizeHigh=0x12d928*=0x0) returned 0x1d51 [0093.822] ReadFile (in: hFile=0x1f0, lpBuffer=0x288df68, nNumberOfBytesToRead=0x1d51, lpNumberOfBytesRead=0x12d808, lpOverlapped=0x0 | out: lpBuffer=0x288df68*, lpNumberOfBytesRead=0x12d808*=0x1d51, lpOverlapped=0x0) returned 1 [0093.851] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Stars.jpg", nBufferLength=0x105, lpBuffer=0x12d2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Stars.jpg", lpFilePart=0x0) returned 0x43 [0093.851] SetErrorMode (uMode=0x1) returned 0x0 [0093.852] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Stars.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\stars.jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0093.856] SetErrorMode (uMode=0x0) returned 0x1 [0093.858] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Tanspecks.jpg", nBufferLength=0x105, lpBuffer=0x12d600, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Tanspecks.jpg", lpFilePart=0x0) returned 0x47 [0093.858] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Tanspecks.jpg", nBufferLength=0x105, lpBuffer=0x12d5f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Tanspecks.jpg", lpFilePart=0x0) returned 0x47 [0093.858] SetErrorMode (uMode=0x1) returned 0x0 [0093.859] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Tanspecks.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\tanspecks.jpg"), fInfoLevelId=0x0, lpFileInformation=0x12d870 | out: lpFileInformation=0x12d870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc548c67c, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc548c67c, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x4529f927, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0xe42)) returned 1 [0094.465] SetErrorMode (uMode=0x0) returned 0x1 [0094.465] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Tanspecks.jpg", nBufferLength=0x105, lpBuffer=0x12d2c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Tanspecks.jpg", lpFilePart=0x0) returned 0x47 [0094.465] SetErrorMode (uMode=0x1) returned 0x0 [0094.465] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Tanspecks.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\tanspecks.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1f0 [0094.465] SetErrorMode (uMode=0x0) returned 0x1 [0094.465] GetFileType (hFile=0x1f0) returned 0x1 [0094.465] GetFileSize (in: hFile=0x1f0, lpFileSizeHigh=0x12d928 | out: lpFileSizeHigh=0x12d928*=0x0) returned 0xe42 [0094.466] ReadFile (in: hFile=0x1f0, lpBuffer=0x277e960, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12d808, lpOverlapped=0x0 | out: lpBuffer=0x277e960*, lpNumberOfBytesRead=0x12d808*=0xe42, lpOverlapped=0x0) returned 1 [0094.578] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Tanspecks.jpg", nBufferLength=0x105, lpBuffer=0x12d2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Tanspecks.jpg", lpFilePart=0x0) returned 0x47 [0094.578] SetErrorMode (uMode=0x1) returned 0x0 [0094.578] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Tanspecks.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\tanspecks.jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0094.583] SetErrorMode (uMode=0x0) returned 0x1 [0094.585] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\White_Chocolate.jpg", nBufferLength=0x105, lpBuffer=0x12d600, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\White_Chocolate.jpg", lpFilePart=0x0) returned 0x4d [0094.585] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\White_Chocolate.jpg", nBufferLength=0x105, lpBuffer=0x12d5f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\White_Chocolate.jpg", lpFilePart=0x0) returned 0x4d [0094.585] SetErrorMode (uMode=0x1) returned 0x0 [0094.586] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\White_Chocolate.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\white_chocolate.jpg"), fInfoLevelId=0x0, lpFileInformation=0x12d870 | out: lpFileInformation=0x12d870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc54fea93, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc54fea93, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x457ae7a3, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0xc60)) returned 1 [0094.668] SetErrorMode (uMode=0x0) returned 0x1 [0094.668] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\White_Chocolate.jpg", nBufferLength=0x105, lpBuffer=0x12d2c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\White_Chocolate.jpg", lpFilePart=0x0) returned 0x4d [0094.668] SetErrorMode (uMode=0x1) returned 0x0 [0094.668] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\White_Chocolate.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\white_chocolate.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1f0 [0094.668] SetErrorMode (uMode=0x0) returned 0x1 [0094.669] GetFileType (hFile=0x1f0) returned 0x1 [0094.669] GetFileSize (in: hFile=0x1f0, lpFileSizeHigh=0x12d928 | out: lpFileSizeHigh=0x12d928*=0x0) returned 0xc60 [0094.669] ReadFile (in: hFile=0x1f0, lpBuffer=0x2866498, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12d808, lpOverlapped=0x0 | out: lpBuffer=0x2866498*, lpNumberOfBytesRead=0x12d808*=0xc60, lpOverlapped=0x0) returned 1 [0094.738] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\White_Chocolate.jpg", nBufferLength=0x105, lpBuffer=0x12d2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\White_Chocolate.jpg", lpFilePart=0x0) returned 0x4d [0094.739] SetErrorMode (uMode=0x1) returned 0x0 [0094.739] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\White_Chocolate.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\white_chocolate.jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0094.743] SetErrorMode (uMode=0x0) returned 0x1 [0094.745] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Decrypt Instructions.txt", nBufferLength=0x105, lpBuffer=0x12d2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Decrypt Instructions.txt", lpFilePart=0x0) returned 0x52 [0094.746] SetErrorMode (uMode=0x1) returned 0x0 [0094.746] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Decrypt Instructions.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\decrypt instructions.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1f0 [0094.746] SetErrorMode (uMode=0x0) returned 0x1 [0094.747] GetFileType (hFile=0x1f0) returned 0x1 [0094.747] WriteFile (in: hFile=0x1f0, lpBuffer=0x274bf80*, nNumberOfBytesToWrite=0x773, lpNumberOfBytesWritten=0x12d808, lpOverlapped=0x0 | out: lpBuffer=0x274bf80*, lpNumberOfBytesWritten=0x12d808*=0x773, lpOverlapped=0x0) returned 1 [0094.748] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery", nBufferLength=0x105, lpBuffer=0x12d490, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery", lpFilePart=0x0) returned 0x39 [0094.748] SetErrorMode (uMode=0x1) returned 0x0 [0094.748] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\*", lpFindFileData=0x12d630 | out: lpFindFileData=0x12d630*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd85ef28, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x588980d0, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x588980d0, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1af3b6b0 [0094.749] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d640 | out: lpFindFileData=0x12d640*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd85ef28, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x588980d0, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x588980d0, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0094.749] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d640 | out: lpFindFileData=0x12d640*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xce2608de, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xce2608de, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xcdfff30e, ftLastWriteTime.dwHighDateTime=0x1ca040d, nFileSizeHigh=0x0, nFileSizeLow=0xff, dwReserved0=0x0, dwReserved1=0x0, cFileName="Bears.htm", cAlternateFileName="")) returned 1 [0094.749] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d640 | out: lpFindFileData=0x12d640*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xce2acb98, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xce2acb98, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xaa352261, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x432, dwReserved0=0x0, dwReserved1=0x0, cFileName="Bears.jpg", cAlternateFileName="")) returned 1 [0094.749] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d640 | out: lpFindFileData=0x12d640*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4ca9e3b, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc4ca9e3b, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x4421c165, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0xa0f, dwReserved0=0x0, dwReserved1=0x0, cFileName="Blue_Gradient.jpg", cAlternateFileName="")) returned 1 [0094.750] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d640 | out: lpFindFileData=0x12d640*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4ccff98, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc4ccff98, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x442422c3, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x11eb, dwReserved0=0x0, dwReserved1=0x0, cFileName="Cave_Drawings.gif", cAlternateFileName="")) returned 1 [0094.750] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d640 | out: lpFindFileData=0x12d640*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4d6850c, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc4d6850c, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x4434cc55, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x90f, dwReserved0=0x0, dwReserved1=0x0, cFileName="Connectivity.gif", cAlternateFileName="")) returned 1 [0094.750] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d640 | out: lpFindFileData=0x12d640*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x588980d0, ftCreationTime.dwHighDateTime=0x1d5e786, ftLastAccessTime.dwLowDateTime=0x588980d0, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x588980d0, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x773, dwReserved0=0x0, dwReserved1=0x0, cFileName="Decrypt Instructions.txt", cAlternateFileName="DECRYP~1.TXT")) returned 1 [0094.750] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d640 | out: lpFindFileData=0x12d640*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x80425158, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7bf1d2d9, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7bf1d2d9, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x285, dwReserved0=0x0, dwReserved1=0x0, cFileName="Desktop.ini", cAlternateFileName="")) returned 1 [0094.750] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d640 | out: lpFindFileData=0x12d640*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc5015d96, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc5015d96, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x444c9a01, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0xed0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dotted_Lines.emf", cAlternateFileName="")) returned 1 [0094.750] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d640 | out: lpFindFileData=0x12d640*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xce2acb98, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xce2acb98, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xce04b5c8, ftLastWriteTime.dwHighDateTime=0x1ca040d, nFileSizeHigh=0x0, nFileSizeLow=0xe7, dwReserved0=0x0, dwReserved1=0x0, cFileName="Garden.htm", cAlternateFileName="")) returned 1 [0094.750] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d640 | out: lpFindFileData=0x12d640*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xce2acb98, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xce2acb98, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xaa410937, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x5d3f, dwReserved0=0x0, dwReserved1=0x0, cFileName="Garden.jpg", cAlternateFileName="")) returned 1 [0094.751] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d640 | out: lpFindFileData=0x12d640*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc50881ad, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc50881ad, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x444efb5f, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x1594, dwReserved0=0x0, dwReserved1=0x0, cFileName="Genko_1.emf", cAlternateFileName="")) returned 1 [0094.751] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d640 | out: lpFindFileData=0x12d640*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc50d4467, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc50d4467, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x44515cbd, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x2864, dwReserved0=0x0, dwReserved1=0x0, cFileName="Genko_2.emf", cAlternateFileName="")) returned 1 [0094.751] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d640 | out: lpFindFileData=0x12d640*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc5120721, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc5120721, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x4453be1b, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x1c7f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Graph.emf", cAlternateFileName="")) returned 1 [0094.751] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d640 | out: lpFindFileData=0x12d640*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xce2d2cf5, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xce2d2cf5, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xce071725, ftLastWriteTime.dwHighDateTime=0x1ca040d, nFileSizeHigh=0x0, nFileSizeLow=0xed, dwReserved0=0x0, dwReserved1=0x0, cFileName="Green Bubbles.htm", cAlternateFileName="")) returned 1 [0094.751] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d640 | out: lpFindFileData=0x12d640*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xce2f8e52, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xce2f8e52, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xaa436a95, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x1906, dwReserved0=0x0, dwReserved1=0x0, cFileName="GreenBubbles.jpg", cAlternateFileName="")) returned 1 [0094.751] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d640 | out: lpFindFileData=0x12d640*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4fc9adc, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc4fc9adc, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x4453be1b, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0xb68, dwReserved0=0x0, dwReserved1=0x0, cFileName="grid_(cm).wmf", cAlternateFileName="")) returned 1 [0094.751] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d640 | out: lpFindFileData=0x12d640*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4fa397f, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc4fa397f, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x44692a69, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x1d4a, dwReserved0=0x0, dwReserved1=0x0, cFileName="grid_(inch).wmf", cAlternateFileName="")) returned 1 [0094.751] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d640 | out: lpFindFileData=0x12d640*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xce31efaf, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xce31efaf, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xce0bd9df, ftLastWriteTime.dwHighDateTime=0x1ca040d, nFileSizeHigh=0x0, nFileSizeLow=0xeb, dwReserved0=0x0, dwReserved1=0x0, cFileName="Hand Prints.htm", cAlternateFileName="")) returned 1 [0094.751] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d640 | out: lpFindFileData=0x12d640*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xce31efaf, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xce31efaf, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xaa45cbf3, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x107e, dwReserved0=0x0, dwReserved1=0x0, cFileName="HandPrints.jpg", cAlternateFileName="")) returned 1 [0094.751] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d640 | out: lpFindFileData=0x12d640*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc5192b38, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc5192b38, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x4480f815, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x252ec, dwReserved0=0x0, dwReserved1=0x0, cFileName="Memo.emf", cAlternateFileName="")) returned 1 [0094.751] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d640 | out: lpFindFileData=0x12d640*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4e4cd3a, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc4e4cd3a, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x44835973, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x8a1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Monet.jpg", cAlternateFileName="")) returned 1 [0094.751] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d640 | out: lpFindFileData=0x12d640*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc51dedf2, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc51dedf2, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x448cdeeb, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x1060, dwReserved0=0x0, dwReserved1=0x0, cFileName="Month_Calendar.emf", cAlternateFileName="")) returned 1 [0094.751] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d640 | out: lpFindFileData=0x12d640*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc522b0ac, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc522b0ac, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x448cdeeb, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x65b4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Music.emf", cAlternateFileName="")) returned 1 [0094.751] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d640 | out: lpFindFileData=0x12d640*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4ebf151, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc4ebf151, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x44b2f4cb, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0xb86, dwReserved0=0x0, dwReserved1=0x0, cFileName="Notebook.jpg", cAlternateFileName="")) returned 1 [0094.751] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d640 | out: lpFindFileData=0x12d640*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xce31efaf, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xce31efaf, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xce0e3b3c, ftLastWriteTime.dwHighDateTime=0x1ca040d, nFileSizeHigh=0x0, nFileSizeLow=0xed, dwReserved0=0x0, dwReserved1=0x0, cFileName="Orange Circles.htm", cAlternateFileName="")) returned 1 [0094.752] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d640 | out: lpFindFileData=0x12d640*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xce34510c, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xce34510c, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xaa4cf00d, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x18ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="OrangeCircles.jpg", cAlternateFileName="")) returned 1 [0094.752] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d640 | out: lpFindFileData=0x12d640*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xce34510c, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xce34510c, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xce109c99, ftLastWriteTime.dwHighDateTime=0x1ca040d, nFileSizeHigh=0x0, nFileSizeLow=0xe8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Peacock.htm", cAlternateFileName="")) returned 1 [0094.752] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d640 | out: lpFindFileData=0x12d640*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xce3913c6, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xce3913c6, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xaa51b2c9, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x13fb, dwReserved0=0x0, dwReserved1=0x0, cFileName="Peacock.jpg", cAlternateFileName="")) returned 1 [0094.752] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d640 | out: lpFindFileData=0x12d640*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4f0b40b, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc4f0b40b, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x44b55629, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0xf8d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pine_Lumber.jpg", cAlternateFileName="")) returned 1 [0094.752] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d640 | out: lpFindFileData=0x12d640*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4f31568, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc4f31568, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x44bc7a43, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x13fb, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pretty_Peacock.jpg", cAlternateFileName="")) returned 1 [0094.752] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d640 | out: lpFindFileData=0x12d640*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4f7d822, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc4f7d822, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x44bc7a43, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x36e1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Psychedelic.jpg", cAlternateFileName="")) returned 1 [0094.752] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d640 | out: lpFindFileData=0x12d640*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xce3913c6, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xce3913c6, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xce12fdf6, ftLastWriteTime.dwHighDateTime=0x1ca040d, nFileSizeHigh=0x0, nFileSizeLow=0xe9, dwReserved0=0x0, dwReserved1=0x0, cFileName="Roses.htm", cAlternateFileName="")) returned 1 [0094.752] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d640 | out: lpFindFileData=0x12d640*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xce3b7523, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xce3b7523, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xaa567585, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x780, dwReserved0=0x0, dwReserved1=0x0, cFileName="Roses.jpg", cAlternateFileName="")) returned 1 [0094.752] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d640 | out: lpFindFileData=0x12d640*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc53cdfab, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc53cdfab, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x45148cd9, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x3da0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sand_Paper.jpg", cAlternateFileName="")) returned 1 [0094.752] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d640 | out: lpFindFileData=0x12d640*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc5277366, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc5277366, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x4516ee37, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x91c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Seyes.emf", cAlternateFileName="")) returned 1 [0094.752] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d640 | out: lpFindFileData=0x12d640*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xce3b7523, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xce3b7523, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xce17c0b0, ftLastWriteTime.dwHighDateTime=0x1ca040d, nFileSizeHigh=0x0, nFileSizeLow=0xed, dwReserved0=0x0, dwReserved1=0x0, cFileName="Shades of Blue.htm", cAlternateFileName="")) returned 1 [0094.752] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d640 | out: lpFindFileData=0x12d640*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xce3b7523, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xce3b7523, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xaa58d6e3, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x127e, dwReserved0=0x0, dwReserved1=0x0, cFileName="ShadesOfBlue.jpg", cAlternateFileName="")) returned 1 [0094.752] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d640 | out: lpFindFileData=0x12d640*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc530f8da, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc530f8da, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x45194f95, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x13d8c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Shorthand.emf", cAlternateFileName="")) returned 1 [0094.753] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d640 | out: lpFindFileData=0x12d640*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc541a265, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc541a265, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x451bb0f3, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x7c6, dwReserved0=0x0, dwReserved1=0x0, cFileName="Small_News.jpg", cAlternateFileName="")) returned 1 [0094.753] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d640 | out: lpFindFileData=0x12d640*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xce3dd680, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xce3dd680, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xce1a220d, ftLastWriteTime.dwHighDateTime=0x1ca040d, nFileSizeHigh=0x0, nFileSizeLow=0xe8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Soft Blue.htm", cAlternateFileName="")) returned 1 [0094.753] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d640 | out: lpFindFileData=0x12d640*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xce3dd680, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xce3dd680, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xaa5b3841, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x2949, dwReserved0=0x0, dwReserved1=0x0, cFileName="SoftBlue.jpg", cAlternateFileName="")) returned 1 [0094.753] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d640 | out: lpFindFileData=0x12d640*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xce3dd680, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xce3dd680, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xce1c836a, ftLastWriteTime.dwHighDateTime=0x1ca040d, nFileSizeHigh=0x0, nFileSizeLow=0xe6, dwReserved0=0x0, dwReserved1=0x0, cFileName="Stars.htm", cAlternateFileName="")) returned 1 [0094.753] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d640 | out: lpFindFileData=0x12d640*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xce4037dd, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xce4037dd, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xaa5ffafd, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x1d51, dwReserved0=0x0, dwReserved1=0x0, cFileName="Stars.jpg", cAlternateFileName="")) returned 1 [0094.753] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d640 | out: lpFindFileData=0x12d640*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc54403c2, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc54403c2, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x452797c9, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x748, dwReserved0=0x0, dwReserved1=0x0, cFileName="Stucco.gif", cAlternateFileName="")) returned 1 [0094.753] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d640 | out: lpFindFileData=0x12d640*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc548c67c, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc548c67c, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x4529f927, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0xe42, dwReserved0=0x0, dwReserved1=0x0, cFileName="Tanspecks.jpg", cAlternateFileName="")) returned 1 [0094.753] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d640 | out: lpFindFileData=0x12d640*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc54b27d9, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc54b27d9, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x4573c389, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x121e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Tiki.gif", cAlternateFileName="")) returned 1 [0094.753] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d640 | out: lpFindFileData=0x12d640*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc535bb94, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc535bb94, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x4573c389, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x6860, dwReserved0=0x0, dwReserved1=0x0, cFileName="To_Do_List.emf", cAlternateFileName="")) returned 1 [0094.753] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d640 | out: lpFindFileData=0x12d640*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc54fea93, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc54fea93, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x457ae7a3, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0xc60, dwReserved0=0x0, dwReserved1=0x0, cFileName="White_Chocolate.jpg", cAlternateFileName="")) returned 1 [0094.753] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d640 | out: lpFindFileData=0x12d640*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc5524bf0, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc5524bf0, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x457faa5f, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x3ad7, dwReserved0=0x0, dwReserved1=0x0, cFileName="Wrinkled_Paper.gif", cAlternateFileName="")) returned 1 [0094.753] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d640 | out: lpFindFileData=0x12d640*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc5524bf0, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc5524bf0, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x457faa5f, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x3ad7, dwReserved0=0x0, dwReserved1=0x0, cFileName="Wrinkled_Paper.gif", cAlternateFileName="")) returned 0 [0094.753] FindClose (in: hFindFile=0x1af3b6b0 | out: hFindFile=0x1af3b6b0) returned 1 [0094.754] SetErrorMode (uMode=0x0) returned 0x1 [0094.754] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv", nBufferLength=0x105, lpBuffer=0x12d3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv", lpFilePart=0x0) returned 0x37 [0094.754] SetErrorMode (uMode=0x1) returned 0x0 [0094.754] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xcf4f23c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xcf4f23c0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1af3b6b0 [0094.755] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5a0 | out: lpFindFileData=0x12d5a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xcf4f23c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xcf4f23c0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0094.755] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5a0 | out: lpFindFileData=0x12d5a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23ecb743, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0094.755] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5a0 | out: lpFindFileData=0x12d5a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e16af00, ftCreationTime.dwHighDateTime=0x1cbae03, ftLastAccessTime.dwLowDateTime=0xcf518520, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x3e16af00, ftLastWriteTime.dwHighDateTime=0x1cbae03, nFileSizeHigh=0x0, nFileSizeLow=0x23d78, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSCONV97.DLL", cAlternateFileName="")) returned 1 [0094.755] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5a0 | out: lpFindFileData=0x12d5a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1aeaee00, ftCreationTime.dwHighDateTime=0x1ca9122, ftLastAccessTime.dwLowDateTime=0xef0320d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x1aeaee00, ftLastWriteTime.dwHighDateTime=0x1ca9122, nFileSizeHigh=0x0, nFileSizeLow=0x8f68, dwReserved0=0x0, dwReserved1=0x0, cFileName="RECOVR32.CNV", cAlternateFileName="")) returned 1 [0094.755] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5a0 | out: lpFindFileData=0x12d5a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f938f00, ftCreationTime.dwHighDateTime=0x1caafc8, ftLastAccessTime.dwLowDateTime=0x7090d6b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x2f938f00, ftLastWriteTime.dwHighDateTime=0x1caafc8, nFileSizeHigh=0x0, nFileSizeLow=0xdfa0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Wks9Pxy.cnv", cAlternateFileName="")) returned 1 [0094.755] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5a0 | out: lpFindFileData=0x12d5a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x56ce200, ftCreationTime.dwHighDateTime=0x1cbd856, ftLastAccessTime.dwLowDateTime=0xc226ea20, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x56ce200, ftLastWriteTime.dwHighDateTime=0x1cbd856, nFileSizeHigh=0x0, nFileSizeLow=0x30170, dwReserved0=0x0, dwReserved1=0x0, cFileName="WPFT532.CNV", cAlternateFileName="")) returned 1 [0094.755] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5a0 | out: lpFindFileData=0x12d5a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e16af00, ftCreationTime.dwHighDateTime=0x1cbae03, ftLastAccessTime.dwLowDateTime=0xc2294b80, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x3e16af00, ftLastWriteTime.dwHighDateTime=0x1cbae03, nFileSizeHigh=0x0, nFileSizeLow=0x46b70, dwReserved0=0x0, dwReserved1=0x0, cFileName="WPFT632.CNV", cAlternateFileName="")) returned 1 [0094.755] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5a0 | out: lpFindFileData=0x12d5a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e16af00, ftCreationTime.dwHighDateTime=0x1cbae03, ftLastAccessTime.dwLowDateTime=0xc2294b80, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x3e16af00, ftLastWriteTime.dwHighDateTime=0x1cbae03, nFileSizeHigh=0x0, nFileSizeLow=0x46b70, dwReserved0=0x0, dwReserved1=0x0, cFileName="WPFT632.CNV", cAlternateFileName="")) returned 0 [0094.755] FindClose (in: hFindFile=0x1af3b6b0 | out: hFindFile=0x1af3b6b0) returned 1 [0094.755] SetErrorMode (uMode=0x0) returned 0x1 [0094.757] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\Decrypt Instructions.txt", nBufferLength=0x105, lpBuffer=0x12d2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\Decrypt Instructions.txt", lpFilePart=0x0) returned 0x50 [0094.757] SetErrorMode (uMode=0x1) returned 0x0 [0094.757] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\Decrypt Instructions.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\textconv\\decrypt instructions.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1f0 [0094.759] SetErrorMode (uMode=0x0) returned 0x1 [0094.759] GetFileType (hFile=0x1f0) returned 0x1 [0094.759] WriteFile (in: hFile=0x1f0, lpBuffer=0x2753500*, nNumberOfBytesToWrite=0x773, lpNumberOfBytesWritten=0x12d808, lpOverlapped=0x0 | out: lpBuffer=0x2753500*, lpNumberOfBytesWritten=0x12d808*=0x773, lpOverlapped=0x0) returned 1 [0094.761] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv", nBufferLength=0x105, lpBuffer=0x12d490, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv", lpFilePart=0x0) returned 0x37 [0094.761] SetErrorMode (uMode=0x1) returned 0x0 [0094.761] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\*", lpFindFileData=0x12d630 | out: lpFindFileData=0x12d630*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x588be230, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x588be230, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1af3b6b0 [0094.761] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d640 | out: lpFindFileData=0x12d640*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x588be230, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x588be230, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0094.761] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d640 | out: lpFindFileData=0x12d640*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x588be230, ftCreationTime.dwHighDateTime=0x1d5e786, ftLastAccessTime.dwLowDateTime=0x588be230, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x588be230, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x773, dwReserved0=0x0, dwReserved1=0x0, cFileName="Decrypt Instructions.txt", cAlternateFileName="DECRYP~1.TXT")) returned 1 [0094.761] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d640 | out: lpFindFileData=0x12d640*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23ecb743, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0094.761] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d640 | out: lpFindFileData=0x12d640*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e16af00, ftCreationTime.dwHighDateTime=0x1cbae03, ftLastAccessTime.dwLowDateTime=0xcf518520, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x3e16af00, ftLastWriteTime.dwHighDateTime=0x1cbae03, nFileSizeHigh=0x0, nFileSizeLow=0x23d78, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSCONV97.DLL", cAlternateFileName="")) returned 1 [0094.762] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d640 | out: lpFindFileData=0x12d640*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1aeaee00, ftCreationTime.dwHighDateTime=0x1ca9122, ftLastAccessTime.dwLowDateTime=0xef0320d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x1aeaee00, ftLastWriteTime.dwHighDateTime=0x1ca9122, nFileSizeHigh=0x0, nFileSizeLow=0x8f68, dwReserved0=0x0, dwReserved1=0x0, cFileName="RECOVR32.CNV", cAlternateFileName="")) returned 1 [0094.762] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d640 | out: lpFindFileData=0x12d640*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f938f00, ftCreationTime.dwHighDateTime=0x1caafc8, ftLastAccessTime.dwLowDateTime=0x7090d6b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x2f938f00, ftLastWriteTime.dwHighDateTime=0x1caafc8, nFileSizeHigh=0x0, nFileSizeLow=0xdfa0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Wks9Pxy.cnv", cAlternateFileName="")) returned 1 [0094.762] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d640 | out: lpFindFileData=0x12d640*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x56ce200, ftCreationTime.dwHighDateTime=0x1cbd856, ftLastAccessTime.dwLowDateTime=0xc226ea20, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x56ce200, ftLastWriteTime.dwHighDateTime=0x1cbd856, nFileSizeHigh=0x0, nFileSizeLow=0x30170, dwReserved0=0x0, dwReserved1=0x0, cFileName="WPFT532.CNV", cAlternateFileName="")) returned 1 [0094.762] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d640 | out: lpFindFileData=0x12d640*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e16af00, ftCreationTime.dwHighDateTime=0x1cbae03, ftLastAccessTime.dwLowDateTime=0xc2294b80, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x3e16af00, ftLastWriteTime.dwHighDateTime=0x1cbae03, nFileSizeHigh=0x0, nFileSizeLow=0x46b70, dwReserved0=0x0, dwReserved1=0x0, cFileName="WPFT632.CNV", cAlternateFileName="")) returned 1 [0094.762] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d640 | out: lpFindFileData=0x12d640*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e16af00, ftCreationTime.dwHighDateTime=0x1cbae03, ftLastAccessTime.dwLowDateTime=0xc2294b80, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x3e16af00, ftLastWriteTime.dwHighDateTime=0x1cbae03, nFileSizeHigh=0x0, nFileSizeLow=0x46b70, dwReserved0=0x0, dwReserved1=0x0, cFileName="WPFT632.CNV", cAlternateFileName="")) returned 0 [0094.762] FindClose (in: hFindFile=0x1af3b6b0 | out: hFindFile=0x1af3b6b0) returned 1 [0094.762] SetErrorMode (uMode=0x0) returned 0x1 [0094.762] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\en-US", nBufferLength=0x105, lpBuffer=0x12d390, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\en-US", lpFilePart=0x0) returned 0x3d [0094.762] SetErrorMode (uMode=0x1) returned 0x0 [0094.763] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\en-US\\*", lpFindFileData=0x12d530 | out: lpFindFileData=0x12d530*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23ecb743, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1af3b6b0 [0094.763] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23ecb743, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0094.763] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23ecb743, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0094.763] FindClose (in: hFindFile=0x1af3b6b0 | out: hFindFile=0x1af3b6b0) returned 1 [0094.763] SetErrorMode (uMode=0x0) returned 0x1 [0094.763] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\en-US\\Decrypt Instructions.txt", nBufferLength=0x105, lpBuffer=0x12d240, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\en-US\\Decrypt Instructions.txt", lpFilePart=0x0) returned 0x56 [0094.763] SetErrorMode (uMode=0x1) returned 0x0 [0094.764] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\en-US\\Decrypt Instructions.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\textconv\\en-us\\decrypt instructions.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1f0 [0094.764] SetErrorMode (uMode=0x0) returned 0x1 [0094.764] GetFileType (hFile=0x1f0) returned 0x1 [0094.764] WriteFile (in: hFile=0x1f0, lpBuffer=0x2759b28*, nNumberOfBytesToWrite=0x773, lpNumberOfBytesWritten=0x12d7a8, lpOverlapped=0x0 | out: lpBuffer=0x2759b28*, lpNumberOfBytesWritten=0x12d7a8*=0x773, lpOverlapped=0x0) returned 1 [0094.766] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\en-US", nBufferLength=0x105, lpBuffer=0x12d430, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\en-US", lpFilePart=0x0) returned 0x3d [0094.766] SetErrorMode (uMode=0x1) returned 0x0 [0094.766] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\en-US\\*", lpFindFileData=0x12d5d0 | out: lpFindFileData=0x12d5d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x588be230, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x588be230, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1af3b6b0 [0094.766] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x588be230, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x588be230, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0094.766] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x588be230, ftCreationTime.dwHighDateTime=0x1d5e786, ftLastAccessTime.dwLowDateTime=0x588be230, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x588e4390, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x773, dwReserved0=0x0, dwReserved1=0x0, cFileName="Decrypt Instructions.txt", cAlternateFileName="DECRYP~1.TXT")) returned 1 [0094.766] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x588be230, ftCreationTime.dwHighDateTime=0x1d5e786, ftLastAccessTime.dwLowDateTime=0x588be230, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x588e4390, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x773, dwReserved0=0x0, dwReserved1=0x0, cFileName="Decrypt Instructions.txt", cAlternateFileName="DECRYP~1.TXT")) returned 0 [0094.767] FindClose (in: hFindFile=0x1af3b6b0 | out: hFindFile=0x1af3b6b0) returned 1 [0094.767] SetErrorMode (uMode=0x0) returned 0x1 [0094.767] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14", nBufferLength=0x105, lpBuffer=0x12d3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14", lpFilePart=0x0) returned 0x37 [0094.767] SetErrorMode (uMode=0x1) returned 0x0 [0094.767] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x512f1610, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1af3b6b0 [0094.832] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5a0 | out: lpFindFileData=0x12d5a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x512f1610, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0094.835] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5a0 | out: lpFindFileData=0x12d5a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x512f1610, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d05ead0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AFTRNOON", cAlternateFileName="")) returned 1 [0094.835] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5a0 | out: lpFindFileData=0x12d5a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5146e3d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ARCTIC", cAlternateFileName="")) returned 1 [0094.835] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5a0 | out: lpFindFileData=0x12d5a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51767f50, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d05ead0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AXIS", cAlternateFileName="")) returned 1 [0094.836] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5a0 | out: lpFindFileData=0x12d5a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51a15810, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BLENDS", cAlternateFileName="")) returned 1 [0094.836] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5a0 | out: lpFindFileData=0x12d5a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51a15810, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BLUECALM", cAlternateFileName="")) returned 1 [0094.836] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5a0 | out: lpFindFileData=0x12d5a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51a15810, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d05ead0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BLUEPRNT", cAlternateFileName="")) returned 1 [0094.836] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5a0 | out: lpFindFileData=0x12d5a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51a15810, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BOLDSTRI", cAlternateFileName="")) returned 1 [0094.836] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5a0 | out: lpFindFileData=0x12d5a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51a61ad0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BREEZE", cAlternateFileName="")) returned 1 [0094.836] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5a0 | out: lpFindFileData=0x12d5a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51c2ab50, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CANYON", cAlternateFileName="")) returned 1 [0094.836] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5a0 | out: lpFindFileData=0x12d5a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51c2ab50, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d05ead0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CAPSULES", cAlternateFileName="")) returned 1 [0094.836] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5a0 | out: lpFindFileData=0x12d5a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51c50cb0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CASCADE", cAlternateFileName="")) returned 1 [0094.836] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5a0 | out: lpFindFileData=0x12d5a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51cc30d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d05ead0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="COMPASS", cAlternateFileName="")) returned 1 [0094.836] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5a0 | out: lpFindFileData=0x12d5a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51cc30d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d05ead0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CONCRETE", cAlternateFileName="")) returned 1 [0094.836] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5a0 | out: lpFindFileData=0x12d5a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a6f8e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6073a7d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6073a7d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DEEPBLUE", cAlternateFileName="")) returned 1 [0094.836] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5a0 | out: lpFindFileData=0x12d5a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a6f8e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x60891430, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x60891430, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ECHO", cAlternateFileName="")) returned 1 [0094.836] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5a0 | out: lpFindFileData=0x12d5a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51e3fe90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d05ead0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ECLIPSE", cAlternateFileName="")) returned 1 [0094.836] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5a0 | out: lpFindFileData=0x12d5a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51f70990, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="EDGE", cAlternateFileName="")) returned 1 [0094.836] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5a0 | out: lpFindFileData=0x12d5a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51fe2db0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d05ead0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="EVRGREEN", cAlternateFileName="")) returned 1 [0094.836] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5a0 | out: lpFindFileData=0x12d5a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a6f8e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x60af2a30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x60af2a30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="EXPEDITN", cAlternateFileName="")) returned 1 [0094.837] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5a0 | out: lpFindFileData=0x12d5a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a6f8e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x61cccf30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x61cccf30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ICE", cAlternateFileName="")) returned 1 [0094.837] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5a0 | out: lpFindFileData=0x12d5a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x539538d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d489150, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="INDUST", cAlternateFileName="")) returned 1 [0094.837] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5a0 | out: lpFindFileData=0x12d5a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a6f8e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x65d5e3f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x65d5e3f0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="IRIS", cAlternateFileName="")) returned 1 [0094.837] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5a0 | out: lpFindFileData=0x12d5a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x567be5d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d489150, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="JOURNAL", cAlternateFileName="")) returned 1 [0094.837] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5a0 | out: lpFindFileData=0x12d5a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x567e4730, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d489150, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="LAYERS", cAlternateFileName="")) returned 1 [0094.837] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5a0 | out: lpFindFileData=0x12d5a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a6f8e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x66247150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x66247150, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="LEVEL", cAlternateFileName="")) returned 1 [0094.837] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5a0 | out: lpFindFileData=0x12d5a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x59544a90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d489150, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NETWORK", cAlternateFileName="")) returned 1 [0094.837] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5a0 | out: lpFindFileData=0x12d5a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x59c68c90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d489150, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PAPYRUS", cAlternateFileName="")) returned 1 [0094.837] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5a0 | out: lpFindFileData=0x12d5a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a44b570, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d05ead0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PIXEL", cAlternateFileName="")) returned 1 [0094.837] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5a0 | out: lpFindFileData=0x12d5a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a6f8e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d084c30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d084c30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PROFILE", cAlternateFileName="")) returned 1 [0094.837] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5a0 | out: lpFindFileData=0x12d5a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a6f8e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d489150, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="QUAD", cAlternateFileName="")) returned 1 [0094.837] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5a0 | out: lpFindFileData=0x12d5a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a829930, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d0d0ef0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d0d0ef0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RADIAL", cAlternateFileName="")) returned 1 [0094.837] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5a0 | out: lpFindFileData=0x12d5a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a84fa90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d0d0ef0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d0d0ef0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="REFINED", cAlternateFileName="")) returned 1 [0094.837] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5a0 | out: lpFindFileData=0x12d5a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a89bd50, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d1db890, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d1db890, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RICEPAPR", cAlternateFileName="")) returned 1 [0094.837] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5a0 | out: lpFindFileData=0x12d5a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a71ef90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d489150, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RIPPLE", cAlternateFileName="")) returned 1 [0094.837] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5a0 | out: lpFindFileData=0x12d5a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a71ef90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d489150, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RMNSQUE", cAlternateFileName="")) returned 1 [0094.837] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5a0 | out: lpFindFileData=0x12d5a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a71ef90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d24dcb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d24dcb0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SATIN", cAlternateFileName="")) returned 1 [0094.838] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5a0 | out: lpFindFileData=0x12d5a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a980590, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d2c00d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d2c00d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SKY", cAlternateFileName="")) returned 1 [0094.838] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5a0 | out: lpFindFileData=0x12d5a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a980590, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d4d5410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d4d5410, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SLATE", cAlternateFileName="")) returned 1 [0094.838] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5a0 | out: lpFindFileData=0x12d5a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5aad71f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d4d5410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d4d5410, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SONORA", cAlternateFileName="")) returned 1 [0094.838] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5a0 | out: lpFindFileData=0x12d5a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a71ef90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d4d5410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d4d5410, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SPRING", cAlternateFileName="")) returned 1 [0094.838] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5a0 | out: lpFindFileData=0x12d5a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5abe1b90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d3f0bd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d3f0bd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="STRTEDGE", cAlternateFileName="")) returned 1 [0094.838] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5a0 | out: lpFindFileData=0x12d5a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a71ef90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d4d5410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d4d5410, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="STUDIO", cAlternateFileName="")) returned 1 [0094.838] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5a0 | out: lpFindFileData=0x12d5a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a71ef90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d416d30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d416d30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SUMIPNTG", cAlternateFileName="")) returned 1 [0094.838] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5a0 | out: lpFindFileData=0x12d5a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc24e4f00, ftCreationTime.dwHighDateTime=0x1c06b0e, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc24e4f00, ftLastWriteTime.dwHighDateTime=0x1c06b0e, nFileSizeHigh=0x0, nFileSizeLow=0x1c6c, dwReserved0=0x0, dwReserved1=0x0, cFileName="THEMES.INF", cAlternateFileName="")) returned 1 [0094.838] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5a0 | out: lpFindFileData=0x12d5a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5ad387f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x7084efd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7084efd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="WATER", cAlternateFileName="")) returned 1 [0094.838] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5a0 | out: lpFindFileData=0x12d5a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a71ef90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x7084efd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7084efd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="WATERMAR", cAlternateFileName="")) returned 1 [0094.838] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5a0 | out: lpFindFileData=0x12d5a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a71ef90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x7084efd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7084efd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="WATERMAR", cAlternateFileName="")) returned 0 [0094.838] FindClose (in: hFindFile=0x1af3b6b0 | out: hFindFile=0x1af3b6b0) returned 1 [0094.839] SetErrorMode (uMode=0x0) returned 0x1 [0094.840] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\Decrypt Instructions.txt", nBufferLength=0x105, lpBuffer=0x12d2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\Decrypt Instructions.txt", lpFilePart=0x0) returned 0x50 [0094.840] SetErrorMode (uMode=0x1) returned 0x0 [0094.840] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\Decrypt Instructions.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\decrypt instructions.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1f0 [0094.842] SetErrorMode (uMode=0x0) returned 0x1 [0094.842] GetFileType (hFile=0x1f0) returned 0x1 [0094.842] WriteFile (in: hFile=0x1f0, lpBuffer=0x2760868*, nNumberOfBytesToWrite=0x773, lpNumberOfBytesWritten=0x12d808, lpOverlapped=0x0 | out: lpBuffer=0x2760868*, lpNumberOfBytesWritten=0x12d808*=0x773, lpOverlapped=0x0) returned 1 [0094.843] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14", nBufferLength=0x105, lpBuffer=0x12d490, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14", lpFilePart=0x0) returned 0x37 [0094.844] SetErrorMode (uMode=0x1) returned 0x0 [0094.844] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\*", lpFindFileData=0x12d630 | out: lpFindFileData=0x12d630*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x512f1610, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x5897c910, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x5897c910, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1af3b6b0 [0094.844] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d640 | out: lpFindFileData=0x12d640*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x512f1610, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x5897c910, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x5897c910, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0094.844] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d640 | out: lpFindFileData=0x12d640*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x512f1610, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d05ead0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AFTRNOON", cAlternateFileName="")) returned 1 [0094.844] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d640 | out: lpFindFileData=0x12d640*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5146e3d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ARCTIC", cAlternateFileName="")) returned 1 [0094.844] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d640 | out: lpFindFileData=0x12d640*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51767f50, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d05ead0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AXIS", cAlternateFileName="")) returned 1 [0094.844] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d640 | out: lpFindFileData=0x12d640*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51a15810, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BLENDS", cAlternateFileName="")) returned 1 [0094.844] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d640 | out: lpFindFileData=0x12d640*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51a15810, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BLUECALM", cAlternateFileName="")) returned 1 [0094.844] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d640 | out: lpFindFileData=0x12d640*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51a15810, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d05ead0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BLUEPRNT", cAlternateFileName="")) returned 1 [0094.844] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d640 | out: lpFindFileData=0x12d640*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51a15810, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BOLDSTRI", cAlternateFileName="")) returned 1 [0094.845] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d640 | out: lpFindFileData=0x12d640*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51a61ad0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BREEZE", cAlternateFileName="")) returned 1 [0094.845] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d640 | out: lpFindFileData=0x12d640*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51c2ab50, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CANYON", cAlternateFileName="")) returned 1 [0094.845] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d640 | out: lpFindFileData=0x12d640*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51c2ab50, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d05ead0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CAPSULES", cAlternateFileName="")) returned 1 [0094.845] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d640 | out: lpFindFileData=0x12d640*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51c50cb0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CASCADE", cAlternateFileName="")) returned 1 [0094.845] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d640 | out: lpFindFileData=0x12d640*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51cc30d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d05ead0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="COMPASS", cAlternateFileName="")) returned 1 [0094.845] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d640 | out: lpFindFileData=0x12d640*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51cc30d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d05ead0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CONCRETE", cAlternateFileName="")) returned 1 [0094.845] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d640 | out: lpFindFileData=0x12d640*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5897c910, ftCreationTime.dwHighDateTime=0x1d5e786, ftLastAccessTime.dwLowDateTime=0x5897c910, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x589a2a70, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x773, dwReserved0=0x0, dwReserved1=0x0, cFileName="Decrypt Instructions.txt", cAlternateFileName="DECRYP~1.TXT")) returned 1 [0094.845] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d640 | out: lpFindFileData=0x12d640*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a6f8e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6073a7d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6073a7d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DEEPBLUE", cAlternateFileName="")) returned 1 [0094.845] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d640 | out: lpFindFileData=0x12d640*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a6f8e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x60891430, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x60891430, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ECHO", cAlternateFileName="")) returned 1 [0094.845] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d640 | out: lpFindFileData=0x12d640*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51e3fe90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d05ead0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ECLIPSE", cAlternateFileName="")) returned 1 [0094.845] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d640 | out: lpFindFileData=0x12d640*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51f70990, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="EDGE", cAlternateFileName="")) returned 1 [0094.845] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d640 | out: lpFindFileData=0x12d640*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51fe2db0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d05ead0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="EVRGREEN", cAlternateFileName="")) returned 1 [0094.845] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d640 | out: lpFindFileData=0x12d640*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a6f8e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x60af2a30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x60af2a30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="EXPEDITN", cAlternateFileName="")) returned 1 [0094.845] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d640 | out: lpFindFileData=0x12d640*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a6f8e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x61cccf30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x61cccf30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ICE", cAlternateFileName="")) returned 1 [0094.845] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d640 | out: lpFindFileData=0x12d640*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x539538d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d489150, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="INDUST", cAlternateFileName="")) returned 1 [0094.846] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d640 | out: lpFindFileData=0x12d640*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a6f8e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x65d5e3f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x65d5e3f0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="IRIS", cAlternateFileName="")) returned 1 [0094.846] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d640 | out: lpFindFileData=0x12d640*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x567be5d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d489150, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="JOURNAL", cAlternateFileName="")) returned 1 [0094.846] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d640 | out: lpFindFileData=0x12d640*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x567e4730, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d489150, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="LAYERS", cAlternateFileName="")) returned 1 [0094.846] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d640 | out: lpFindFileData=0x12d640*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a6f8e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x66247150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x66247150, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="LEVEL", cAlternateFileName="")) returned 1 [0094.846] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d640 | out: lpFindFileData=0x12d640*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x59544a90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d489150, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NETWORK", cAlternateFileName="")) returned 1 [0094.846] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d640 | out: lpFindFileData=0x12d640*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x59c68c90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d489150, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PAPYRUS", cAlternateFileName="")) returned 1 [0094.846] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d640 | out: lpFindFileData=0x12d640*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a44b570, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d05ead0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PIXEL", cAlternateFileName="")) returned 1 [0094.846] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d640 | out: lpFindFileData=0x12d640*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a6f8e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d084c30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d084c30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PROFILE", cAlternateFileName="")) returned 1 [0094.846] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d640 | out: lpFindFileData=0x12d640*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a6f8e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d489150, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="QUAD", cAlternateFileName="")) returned 1 [0094.846] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d640 | out: lpFindFileData=0x12d640*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a829930, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d0d0ef0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d0d0ef0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RADIAL", cAlternateFileName="")) returned 1 [0094.846] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d640 | out: lpFindFileData=0x12d640*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a84fa90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d0d0ef0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d0d0ef0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="REFINED", cAlternateFileName="")) returned 1 [0094.846] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d640 | out: lpFindFileData=0x12d640*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a89bd50, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d1db890, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d1db890, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RICEPAPR", cAlternateFileName="")) returned 1 [0094.846] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d640 | out: lpFindFileData=0x12d640*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a71ef90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d489150, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RIPPLE", cAlternateFileName="")) returned 1 [0094.846] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d640 | out: lpFindFileData=0x12d640*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a71ef90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d489150, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RMNSQUE", cAlternateFileName="")) returned 1 [0094.847] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d640 | out: lpFindFileData=0x12d640*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a71ef90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d24dcb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d24dcb0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SATIN", cAlternateFileName="")) returned 1 [0094.847] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d640 | out: lpFindFileData=0x12d640*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a980590, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d2c00d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d2c00d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SKY", cAlternateFileName="")) returned 1 [0094.847] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d640 | out: lpFindFileData=0x12d640*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a980590, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d4d5410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d4d5410, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SLATE", cAlternateFileName="")) returned 1 [0094.847] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d640 | out: lpFindFileData=0x12d640*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5aad71f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d4d5410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d4d5410, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SONORA", cAlternateFileName="")) returned 1 [0094.847] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d640 | out: lpFindFileData=0x12d640*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a71ef90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d4d5410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d4d5410, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SPRING", cAlternateFileName="")) returned 1 [0094.847] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d640 | out: lpFindFileData=0x12d640*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5abe1b90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d3f0bd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d3f0bd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="STRTEDGE", cAlternateFileName="")) returned 1 [0094.847] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d640 | out: lpFindFileData=0x12d640*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a71ef90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d4d5410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d4d5410, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="STUDIO", cAlternateFileName="")) returned 1 [0094.847] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d640 | out: lpFindFileData=0x12d640*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a71ef90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d416d30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d416d30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SUMIPNTG", cAlternateFileName="")) returned 1 [0094.847] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d640 | out: lpFindFileData=0x12d640*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc24e4f00, ftCreationTime.dwHighDateTime=0x1c06b0e, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc24e4f00, ftLastWriteTime.dwHighDateTime=0x1c06b0e, nFileSizeHigh=0x0, nFileSizeLow=0x1c6c, dwReserved0=0x0, dwReserved1=0x0, cFileName="THEMES.INF", cAlternateFileName="")) returned 1 [0094.847] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d640 | out: lpFindFileData=0x12d640*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5ad387f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x7084efd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7084efd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="WATER", cAlternateFileName="")) returned 1 [0094.847] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d640 | out: lpFindFileData=0x12d640*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a71ef90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x7084efd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7084efd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="WATERMAR", cAlternateFileName="")) returned 1 [0094.847] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d640 | out: lpFindFileData=0x12d640*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a71ef90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x7084efd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7084efd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="WATERMAR", cAlternateFileName="")) returned 0 [0094.847] FindClose (in: hFindFile=0x1af3b6b0 | out: hFindFile=0x1af3b6b0) returned 1 [0094.848] SetErrorMode (uMode=0x0) returned 0x1 [0094.848] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON", nBufferLength=0x105, lpBuffer=0x12d390, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON", lpFilePart=0x0) returned 0x40 [0094.848] SetErrorMode (uMode=0x1) returned 0x0 [0094.848] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON\\*", lpFindFileData=0x12d530 | out: lpFindFileData=0x12d530*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x512f1610, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d05ead0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1af3b6b0 [0094.848] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x512f1610, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d05ead0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0094.849] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdad6ec00, ftCreationTime.dwHighDateTime=0x1cab7f1, ftLastAccessTime.dwLowDateTime=0x5eb42550, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xdad6ec00, ftLastWriteTime.dwHighDateTime=0x1cab7f1, nFileSizeHigh=0x0, nFileSizeLow=0xe58e, dwReserved0=0x0, dwReserved1=0x0, cFileName="AFTRNOON.ELM", cAlternateFileName="")) returned 1 [0094.849] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86e63000, ftCreationTime.dwHighDateTime=0x1c43125, ftLastAccessTime.dwLowDateTime=0x512f1610, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x86e63000, ftLastWriteTime.dwHighDateTime=0x1c43125, nFileSizeHigh=0x0, nFileSizeLow=0x22b, dwReserved0=0x0, dwReserved1=0x0, cFileName="AFTRNOON.INF", cAlternateFileName="")) returned 1 [0094.849] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x85b50300, ftCreationTime.dwHighDateTime=0x1c43125, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x85b50300, ftLastWriteTime.dwHighDateTime=0x1c43125, nFileSizeHigh=0x0, nFileSizeLow=0x621, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1 [0094.849] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86e63000, ftCreationTime.dwHighDateTime=0x1c43125, ftLastAccessTime.dwLowDateTime=0x5ad12690, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x86e63000, ftLastWriteTime.dwHighDateTime=0x1c43125, nFileSizeHigh=0x0, nFileSizeLow=0x6292, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1 [0094.849] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86e63000, ftCreationTime.dwHighDateTime=0x1c43125, ftLastAccessTime.dwLowDateTime=0x5ad12690, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x86e63000, ftLastWriteTime.dwHighDateTime=0x1c43125, nFileSizeHigh=0x0, nFileSizeLow=0x6292, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0 [0094.849] FindClose (in: hFindFile=0x1af3b6b0 | out: hFindFile=0x1af3b6b0) returned 1 [0094.849] SetErrorMode (uMode=0x0) returned 0x1 [0094.851] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON\\THMBNAIL.PNG", nBufferLength=0x105, lpBuffer=0x12d5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON\\THMBNAIL.PNG", lpFilePart=0x0) returned 0x4d [0094.851] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON\\THMBNAIL.PNG", nBufferLength=0x105, lpBuffer=0x12d590, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON\\THMBNAIL.PNG", lpFilePart=0x0) returned 0x4d [0094.851] SetErrorMode (uMode=0x1) returned 0x0 [0094.851] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\aftrnoon\\thmbnail.png"), fInfoLevelId=0x0, lpFileInformation=0x12d810 | out: lpFileInformation=0x12d810*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86e63000, ftCreationTime.dwHighDateTime=0x1c43125, ftLastAccessTime.dwLowDateTime=0x5ad12690, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x86e63000, ftLastWriteTime.dwHighDateTime=0x1c43125, nFileSizeHigh=0x0, nFileSizeLow=0x6292)) returned 1 [0094.853] SetErrorMode (uMode=0x0) returned 0x1 [0094.853] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON\\THMBNAIL.PNG", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON\\THMBNAIL.PNG", lpFilePart=0x0) returned 0x4d [0094.853] SetErrorMode (uMode=0x1) returned 0x0 [0094.853] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\aftrnoon\\thmbnail.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1f0 [0094.853] SetErrorMode (uMode=0x0) returned 0x1 [0094.853] GetFileType (hFile=0x1f0) returned 0x1 [0094.853] GetFileSize (in: hFile=0x1f0, lpFileSizeHigh=0x12d8c8 | out: lpFileSizeHigh=0x12d8c8*=0x0) returned 0x6292 [0094.854] ReadFile (in: hFile=0x1f0, lpBuffer=0x2767a40, nNumberOfBytesToRead=0x6292, lpNumberOfBytesRead=0x12d7a8, lpOverlapped=0x0 | out: lpBuffer=0x2767a40*, lpNumberOfBytesRead=0x12d7a8*=0x6292, lpOverlapped=0x0) returned 1 [0094.902] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON\\THMBNAIL.PNG", nBufferLength=0x105, lpBuffer=0x12d270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON\\THMBNAIL.PNG", lpFilePart=0x0) returned 0x4d [0094.902] SetErrorMode (uMode=0x1) returned 0x0 [0094.902] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\aftrnoon\\thmbnail.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1f0 [0094.904] SetErrorMode (uMode=0x0) returned 0x1 [0094.904] GetFileType (hFile=0x1f0) returned 0x1 [0094.904] WriteFile (in: hFile=0x1f0, lpBuffer=0x2866578*, nNumberOfBytesToWrite=0x62a0, lpNumberOfBytesWritten=0x12d828, lpOverlapped=0x0 | out: lpBuffer=0x2866578*, lpNumberOfBytesWritten=0x12d828*=0x62a0, lpOverlapped=0x0) returned 1 [0094.906] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON\\THMBNAIL.PNG", nBufferLength=0x105, lpBuffer=0x12d500, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON\\THMBNAIL.PNG", lpFilePart=0x0) returned 0x4d [0094.906] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON\\THMBNAIL.PNG.encryptedS", nBufferLength=0x105, lpBuffer=0x12d500, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON\\THMBNAIL.PNG.encryptedS", lpFilePart=0x0) returned 0x58 [0094.906] SetErrorMode (uMode=0x1) returned 0x0 [0094.906] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\aftrnoon\\thmbnail.png"), fInfoLevelId=0x0, lpFileInformation=0x12d750 | out: lpFileInformation=0x12d750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86e63000, ftCreationTime.dwHighDateTime=0x1c43125, ftLastAccessTime.dwLowDateTime=0x5ad12690, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x58a3aff0, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x62a0)) returned 1 [0094.906] SetErrorMode (uMode=0x0) returned 0x1 [0094.906] MoveFileW (lpExistingFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\aftrnoon\\thmbnail.png"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON\\THMBNAIL.PNG.encryptedS" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\aftrnoon\\thmbnail.png.encrypteds")) returned 1 [0094.907] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON\\Decrypt Instructions.txt", nBufferLength=0x105, lpBuffer=0x12d240, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON\\Decrypt Instructions.txt", lpFilePart=0x0) returned 0x59 [0094.907] SetErrorMode (uMode=0x1) returned 0x0 [0094.907] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON\\Decrypt Instructions.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\aftrnoon\\decrypt instructions.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1f0 [0094.912] SetErrorMode (uMode=0x0) returned 0x1 [0094.912] GetFileType (hFile=0x1f0) returned 0x1 [0094.912] WriteFile (in: hFile=0x1f0, lpBuffer=0x2870a00*, nNumberOfBytesToWrite=0x773, lpNumberOfBytesWritten=0x12d7a8, lpOverlapped=0x0 | out: lpBuffer=0x2870a00*, lpNumberOfBytesWritten=0x12d7a8*=0x773, lpOverlapped=0x0) returned 1 [0094.914] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON", nBufferLength=0x105, lpBuffer=0x12d430, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON", lpFilePart=0x0) returned 0x40 [0094.914] SetErrorMode (uMode=0x1) returned 0x0 [0094.914] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON\\*", lpFindFileData=0x12d5d0 | out: lpFindFileData=0x12d5d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x512f1610, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x58a3aff0, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x58a3aff0, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1af3b6b0 [0094.914] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x512f1610, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x58a3aff0, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x58a3aff0, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0094.914] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdad6ec00, ftCreationTime.dwHighDateTime=0x1cab7f1, ftLastAccessTime.dwLowDateTime=0x5eb42550, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xdad6ec00, ftLastWriteTime.dwHighDateTime=0x1cab7f1, nFileSizeHigh=0x0, nFileSizeLow=0xe58e, dwReserved0=0x0, dwReserved1=0x0, cFileName="AFTRNOON.ELM", cAlternateFileName="")) returned 1 [0094.914] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86e63000, ftCreationTime.dwHighDateTime=0x1c43125, ftLastAccessTime.dwLowDateTime=0x512f1610, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x86e63000, ftLastWriteTime.dwHighDateTime=0x1c43125, nFileSizeHigh=0x0, nFileSizeLow=0x22b, dwReserved0=0x0, dwReserved1=0x0, cFileName="AFTRNOON.INF", cAlternateFileName="")) returned 1 [0094.914] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x58a3aff0, ftCreationTime.dwHighDateTime=0x1d5e786, ftLastAccessTime.dwLowDateTime=0x58a3aff0, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x58a3aff0, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x773, dwReserved0=0x0, dwReserved1=0x0, cFileName="Decrypt Instructions.txt", cAlternateFileName="DECRYP~1.TXT")) returned 1 [0094.914] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x85b50300, ftCreationTime.dwHighDateTime=0x1c43125, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x85b50300, ftLastWriteTime.dwHighDateTime=0x1c43125, nFileSizeHigh=0x0, nFileSizeLow=0x621, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1 [0094.914] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86e63000, ftCreationTime.dwHighDateTime=0x1c43125, ftLastAccessTime.dwLowDateTime=0x5ad12690, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x58a3aff0, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x62a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG.encryptedS", cAlternateFileName="THMBNA~1.ENC")) returned 1 [0094.914] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86e63000, ftCreationTime.dwHighDateTime=0x1c43125, ftLastAccessTime.dwLowDateTime=0x5ad12690, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x58a3aff0, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x62a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG.encryptedS", cAlternateFileName="THMBNA~1.ENC")) returned 0 [0094.915] FindClose (in: hFindFile=0x1af3b6b0 | out: hFindFile=0x1af3b6b0) returned 1 [0094.915] SetErrorMode (uMode=0x0) returned 0x1 [0094.915] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC", nBufferLength=0x105, lpBuffer=0x12d390, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC", lpFilePart=0x0) returned 0x3e [0094.915] SetErrorMode (uMode=0x1) returned 0x0 [0094.915] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\*", lpFindFileData=0x12d530 | out: lpFindFileData=0x12d530*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5146e3d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1af3b6b0 [0094.931] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5146e3d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0094.931] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdc081900, ftCreationTime.dwHighDateTime=0x1cab7f1, ftLastAccessTime.dwLowDateTime=0x5146e3d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xdc081900, ftLastWriteTime.dwHighDateTime=0x1cab7f1, nFileSizeHigh=0x0, nFileSizeLow=0x10fc7, dwReserved0=0x0, dwReserved1=0x0, cFileName="ARCTIC.ELM", cAlternateFileName="")) returned 1 [0094.931] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8a79b700, ftCreationTime.dwHighDateTime=0x1c43125, ftLastAccessTime.dwLowDateTime=0x5146e3d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8a79b700, ftLastWriteTime.dwHighDateTime=0x1c43125, nFileSizeHigh=0x0, nFileSizeLow=0x201, dwReserved0=0x0, dwReserved1=0x0, cFileName="ARCTIC.INF", cAlternateFileName="")) returned 1 [0094.931] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8a79b700, ftCreationTime.dwHighDateTime=0x1c43125, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8a79b700, ftLastWriteTime.dwHighDateTime=0x1c43125, nFileSizeHigh=0x0, nFileSizeLow=0xba9, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1 [0094.931] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8a79b700, ftCreationTime.dwHighDateTime=0x1c43125, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8a79b700, ftLastWriteTime.dwHighDateTime=0x1c43125, nFileSizeHigh=0x0, nFileSizeLow=0x4d44, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1 [0094.931] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8a79b700, ftCreationTime.dwHighDateTime=0x1c43125, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8a79b700, ftLastWriteTime.dwHighDateTime=0x1c43125, nFileSizeHigh=0x0, nFileSizeLow=0x4d44, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0 [0094.934] FindClose (in: hFindFile=0x1af3b6b0 | out: hFindFile=0x1af3b6b0) returned 1 [0094.934] SetErrorMode (uMode=0x0) returned 0x1 [0094.940] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\THMBNAIL.PNG", nBufferLength=0x105, lpBuffer=0x12d5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\THMBNAIL.PNG", lpFilePart=0x0) returned 0x4b [0094.940] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\THMBNAIL.PNG", nBufferLength=0x105, lpBuffer=0x12d590, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\THMBNAIL.PNG", lpFilePart=0x0) returned 0x4b [0094.940] SetErrorMode (uMode=0x1) returned 0x0 [0094.940] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\arctic\\thmbnail.png"), fInfoLevelId=0x0, lpFileInformation=0x12d810 | out: lpFileInformation=0x12d810*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8a79b700, ftCreationTime.dwHighDateTime=0x1c43125, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8a79b700, ftLastWriteTime.dwHighDateTime=0x1c43125, nFileSizeHigh=0x0, nFileSizeLow=0x4d44)) returned 1 [0094.943] SetErrorMode (uMode=0x0) returned 0x1 [0094.943] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\THMBNAIL.PNG", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\THMBNAIL.PNG", lpFilePart=0x0) returned 0x4b [0094.943] SetErrorMode (uMode=0x1) returned 0x0 [0094.943] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\arctic\\thmbnail.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1f0 [0094.943] SetErrorMode (uMode=0x0) returned 0x1 [0094.943] GetFileType (hFile=0x1f0) returned 0x1 [0094.943] GetFileSize (in: hFile=0x1f0, lpFileSizeHigh=0x12d8c8 | out: lpFileSizeHigh=0x12d8c8*=0x0) returned 0x4d44 [0094.944] ReadFile (in: hFile=0x1f0, lpBuffer=0x28747b8, nNumberOfBytesToRead=0x4d44, lpNumberOfBytesRead=0x12d7a8, lpOverlapped=0x0 | out: lpBuffer=0x28747b8*, lpNumberOfBytesRead=0x12d7a8*=0x4d44, lpOverlapped=0x0) returned 1 [0094.979] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\THMBNAIL.PNG", nBufferLength=0x105, lpBuffer=0x12d270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\THMBNAIL.PNG", lpFilePart=0x0) returned 0x4b [0094.979] SetErrorMode (uMode=0x1) returned 0x0 [0094.979] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\arctic\\thmbnail.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1f0 [0094.980] SetErrorMode (uMode=0x0) returned 0x1 [0094.980] GetFileType (hFile=0x1f0) returned 0x1 [0094.981] WriteFile (in: hFile=0x1f0, lpBuffer=0x2775cb0*, nNumberOfBytesToWrite=0x4d50, lpNumberOfBytesWritten=0x12d828, lpOverlapped=0x0 | out: lpBuffer=0x2775cb0*, lpNumberOfBytesWritten=0x12d828*=0x4d50, lpOverlapped=0x0) returned 1 [0094.982] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\THMBNAIL.PNG", nBufferLength=0x105, lpBuffer=0x12d500, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\THMBNAIL.PNG", lpFilePart=0x0) returned 0x4b [0094.982] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\THMBNAIL.PNG.encryptedS", nBufferLength=0x105, lpBuffer=0x12d500, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\THMBNAIL.PNG.encryptedS", lpFilePart=0x0) returned 0x56 [0094.982] SetErrorMode (uMode=0x1) returned 0x0 [0094.982] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\arctic\\thmbnail.png"), fInfoLevelId=0x0, lpFileInformation=0x12d750 | out: lpFileInformation=0x12d750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8a79b700, ftCreationTime.dwHighDateTime=0x1c43125, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x58ad3570, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x4d50)) returned 1 [0094.983] SetErrorMode (uMode=0x0) returned 0x1 [0094.983] MoveFileW (lpExistingFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\arctic\\thmbnail.png"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\THMBNAIL.PNG.encryptedS" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\arctic\\thmbnail.png.encrypteds")) returned 1 [0094.984] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\Decrypt Instructions.txt", nBufferLength=0x105, lpBuffer=0x12d240, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\Decrypt Instructions.txt", lpFilePart=0x0) returned 0x57 [0094.984] SetErrorMode (uMode=0x1) returned 0x0 [0094.984] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\Decrypt Instructions.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\arctic\\decrypt instructions.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1f0 [0094.986] SetErrorMode (uMode=0x0) returned 0x1 [0094.986] GetFileType (hFile=0x1f0) returned 0x1 [0094.988] WriteFile (in: hFile=0x1f0, lpBuffer=0x277ebb8*, nNumberOfBytesToWrite=0x773, lpNumberOfBytesWritten=0x12d7a8, lpOverlapped=0x0 | out: lpBuffer=0x277ebb8*, lpNumberOfBytesWritten=0x12d7a8*=0x773, lpOverlapped=0x0) returned 1 [0094.989] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC", nBufferLength=0x105, lpBuffer=0x12d430, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC", lpFilePart=0x0) returned 0x3e [0094.989] SetErrorMode (uMode=0x1) returned 0x0 [0094.989] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\*", lpFindFileData=0x12d5d0 | out: lpFindFileData=0x12d5d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5146e3d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x58af96d0, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x58af96d0, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1af3b6b0 [0094.990] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5146e3d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x58af96d0, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x58af96d0, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0094.990] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdc081900, ftCreationTime.dwHighDateTime=0x1cab7f1, ftLastAccessTime.dwLowDateTime=0x5146e3d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xdc081900, ftLastWriteTime.dwHighDateTime=0x1cab7f1, nFileSizeHigh=0x0, nFileSizeLow=0x10fc7, dwReserved0=0x0, dwReserved1=0x0, cFileName="ARCTIC.ELM", cAlternateFileName="")) returned 1 [0094.990] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8a79b700, ftCreationTime.dwHighDateTime=0x1c43125, ftLastAccessTime.dwLowDateTime=0x5146e3d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8a79b700, ftLastWriteTime.dwHighDateTime=0x1c43125, nFileSizeHigh=0x0, nFileSizeLow=0x201, dwReserved0=0x0, dwReserved1=0x0, cFileName="ARCTIC.INF", cAlternateFileName="")) returned 1 [0094.990] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x58af96d0, ftCreationTime.dwHighDateTime=0x1d5e786, ftLastAccessTime.dwLowDateTime=0x58af96d0, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x58af96d0, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x773, dwReserved0=0x0, dwReserved1=0x0, cFileName="Decrypt Instructions.txt", cAlternateFileName="DECRYP~1.TXT")) returned 1 [0094.990] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8a79b700, ftCreationTime.dwHighDateTime=0x1c43125, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8a79b700, ftLastWriteTime.dwHighDateTime=0x1c43125, nFileSizeHigh=0x0, nFileSizeLow=0xba9, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1 [0094.990] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8a79b700, ftCreationTime.dwHighDateTime=0x1c43125, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x58ad3570, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x4d50, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG.encryptedS", cAlternateFileName="THMBNA~1.ENC")) returned 1 [0094.990] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8a79b700, ftCreationTime.dwHighDateTime=0x1c43125, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x58ad3570, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x4d50, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG.encryptedS", cAlternateFileName="THMBNA~1.ENC")) returned 0 [0094.990] FindClose (in: hFindFile=0x1af3b6b0 | out: hFindFile=0x1af3b6b0) returned 1 [0094.990] SetErrorMode (uMode=0x0) returned 0x1 [0094.990] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS", nBufferLength=0x105, lpBuffer=0x12d390, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS", lpFilePart=0x0) returned 0x3c [0094.991] SetErrorMode (uMode=0x1) returned 0x0 [0094.991] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\*", lpFindFileData=0x12d530 | out: lpFindFileData=0x12d530*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51767f50, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d05ead0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1af3b6b0 [0095.008] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51767f50, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d05ead0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0095.008] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdd394600, ftCreationTime.dwHighDateTime=0x1cab7f1, ftLastAccessTime.dwLowDateTime=0x51767f50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xdd394600, ftLastWriteTime.dwHighDateTime=0x1cab7f1, nFileSizeHigh=0x0, nFileSizeLow=0x189be, dwReserved0=0x0, dwReserved1=0x0, cFileName="AXIS.ELM", cAlternateFileName="")) returned 1 [0095.009] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8baae400, ftCreationTime.dwHighDateTime=0x1c43125, ftLastAccessTime.dwLowDateTime=0x5f409670, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8baae400, ftLastWriteTime.dwHighDateTime=0x1c43125, nFileSizeHigh=0x0, nFileSizeLow=0x211, dwReserved0=0x0, dwReserved1=0x0, cFileName="AXIS.INF", cAlternateFileName="")) returned 1 [0095.009] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8baae400, ftCreationTime.dwHighDateTime=0x1c43125, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8baae400, ftLastWriteTime.dwHighDateTime=0x1c43125, nFileSizeHigh=0x0, nFileSizeLow=0xb20, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1 [0095.009] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8baae400, ftCreationTime.dwHighDateTime=0x1c43125, ftLastAccessTime.dwLowDateTime=0x5ad12690, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8baae400, ftLastWriteTime.dwHighDateTime=0x1c43125, nFileSizeHigh=0x0, nFileSizeLow=0x8864, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1 [0095.009] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8baae400, ftCreationTime.dwHighDateTime=0x1c43125, ftLastAccessTime.dwLowDateTime=0x5ad12690, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8baae400, ftLastWriteTime.dwHighDateTime=0x1c43125, nFileSizeHigh=0x0, nFileSizeLow=0x8864, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0 [0095.009] FindClose (in: hFindFile=0x1af3b6b0 | out: hFindFile=0x1af3b6b0) returned 1 [0095.009] SetErrorMode (uMode=0x0) returned 0x1 [0095.010] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\THMBNAIL.PNG", nBufferLength=0x105, lpBuffer=0x12d5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\THMBNAIL.PNG", lpFilePart=0x0) returned 0x49 [0095.011] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\THMBNAIL.PNG", nBufferLength=0x105, lpBuffer=0x12d590, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\THMBNAIL.PNG", lpFilePart=0x0) returned 0x49 [0095.011] SetErrorMode (uMode=0x1) returned 0x0 [0095.011] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\axis\\thmbnail.png"), fInfoLevelId=0x0, lpFileInformation=0x12d810 | out: lpFileInformation=0x12d810*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8baae400, ftCreationTime.dwHighDateTime=0x1c43125, ftLastAccessTime.dwLowDateTime=0x5ad12690, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8baae400, ftLastWriteTime.dwHighDateTime=0x1c43125, nFileSizeHigh=0x0, nFileSizeLow=0x8864)) returned 1 [0095.011] SetErrorMode (uMode=0x0) returned 0x1 [0095.011] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\THMBNAIL.PNG", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\THMBNAIL.PNG", lpFilePart=0x0) returned 0x49 [0095.011] SetErrorMode (uMode=0x1) returned 0x0 [0095.012] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\axis\\thmbnail.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1f0 [0095.012] SetErrorMode (uMode=0x0) returned 0x1 [0095.012] GetFileType (hFile=0x1f0) returned 0x1 [0095.012] GetFileSize (in: hFile=0x1f0, lpFileSizeHigh=0x12d8c8 | out: lpFileSizeHigh=0x12d8c8*=0x0) returned 0x8864 [0095.012] ReadFile (in: hFile=0x1f0, lpBuffer=0x2782918, nNumberOfBytesToRead=0x8864, lpNumberOfBytesRead=0x12d7a8, lpOverlapped=0x0 | out: lpBuffer=0x2782918*, lpNumberOfBytesRead=0x12d7a8*=0x8864, lpOverlapped=0x0) returned 1 [0095.693] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\THMBNAIL.PNG", nBufferLength=0x105, lpBuffer=0x12d270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\THMBNAIL.PNG", lpFilePart=0x0) returned 0x49 [0095.693] SetErrorMode (uMode=0x1) returned 0x0 [0095.693] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\axis\\thmbnail.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1f0 [0095.694] SetErrorMode (uMode=0x0) returned 0x1 [0095.694] GetFileType (hFile=0x1f0) returned 0x1 [0095.694] WriteFile (in: hFile=0x1f0, lpBuffer=0x288d160*, nNumberOfBytesToWrite=0x8870, lpNumberOfBytesWritten=0x12d828, lpOverlapped=0x0 | out: lpBuffer=0x288d160*, lpNumberOfBytesWritten=0x12d828*=0x8870, lpOverlapped=0x0) returned 1 [0095.696] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\THMBNAIL.PNG", nBufferLength=0x105, lpBuffer=0x12d500, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\THMBNAIL.PNG", lpFilePart=0x0) returned 0x49 [0095.696] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\THMBNAIL.PNG.encryptedS", nBufferLength=0x105, lpBuffer=0x12d500, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\THMBNAIL.PNG.encryptedS", lpFilePart=0x0) returned 0x54 [0095.696] SetErrorMode (uMode=0x1) returned 0x0 [0095.696] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\axis\\thmbnail.png"), fInfoLevelId=0x0, lpFileInformation=0x12d750 | out: lpFileInformation=0x12d750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8baae400, ftCreationTime.dwHighDateTime=0x1c43125, ftLastAccessTime.dwLowDateTime=0x5ad12690, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x591ab4b0, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x8870)) returned 1 [0095.696] SetErrorMode (uMode=0x0) returned 0x1 [0095.696] MoveFileW (lpExistingFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\axis\\thmbnail.png"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\THMBNAIL.PNG.encryptedS" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\axis\\thmbnail.png.encrypteds")) returned 1 [0095.702] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\Decrypt Instructions.txt", nBufferLength=0x105, lpBuffer=0x12d240, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\Decrypt Instructions.txt", lpFilePart=0x0) returned 0x55 [0095.702] SetErrorMode (uMode=0x1) returned 0x0 [0095.702] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\Decrypt Instructions.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\axis\\decrypt instructions.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1f0 [0095.705] SetErrorMode (uMode=0x0) returned 0x1 [0095.705] GetFileType (hFile=0x1f0) returned 0x1 [0095.705] WriteFile (in: hFile=0x1f0, lpBuffer=0x2899b88*, nNumberOfBytesToWrite=0x773, lpNumberOfBytesWritten=0x12d7a8, lpOverlapped=0x0 | out: lpBuffer=0x2899b88*, lpNumberOfBytesWritten=0x12d7a8*=0x773, lpOverlapped=0x0) returned 1 [0095.706] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS", nBufferLength=0x105, lpBuffer=0x12d430, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS", lpFilePart=0x0) returned 0x3c [0095.706] SetErrorMode (uMode=0x1) returned 0x0 [0095.706] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\*", lpFindFileData=0x12d5d0 | out: lpFindFileData=0x12d5d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51767f50, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x591d1610, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x591d1610, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1af3b6b0 [0095.706] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51767f50, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x591d1610, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x591d1610, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0095.707] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdd394600, ftCreationTime.dwHighDateTime=0x1cab7f1, ftLastAccessTime.dwLowDateTime=0x51767f50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xdd394600, ftLastWriteTime.dwHighDateTime=0x1cab7f1, nFileSizeHigh=0x0, nFileSizeLow=0x189be, dwReserved0=0x0, dwReserved1=0x0, cFileName="AXIS.ELM", cAlternateFileName="")) returned 1 [0095.707] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8baae400, ftCreationTime.dwHighDateTime=0x1c43125, ftLastAccessTime.dwLowDateTime=0x5f409670, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8baae400, ftLastWriteTime.dwHighDateTime=0x1c43125, nFileSizeHigh=0x0, nFileSizeLow=0x211, dwReserved0=0x0, dwReserved1=0x0, cFileName="AXIS.INF", cAlternateFileName="")) returned 1 [0095.707] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x591d1610, ftCreationTime.dwHighDateTime=0x1d5e786, ftLastAccessTime.dwLowDateTime=0x591d1610, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x591d1610, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x773, dwReserved0=0x0, dwReserved1=0x0, cFileName="Decrypt Instructions.txt", cAlternateFileName="DECRYP~1.TXT")) returned 1 [0095.707] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8baae400, ftCreationTime.dwHighDateTime=0x1c43125, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8baae400, ftLastWriteTime.dwHighDateTime=0x1c43125, nFileSizeHigh=0x0, nFileSizeLow=0xb20, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1 [0095.707] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8baae400, ftCreationTime.dwHighDateTime=0x1c43125, ftLastAccessTime.dwLowDateTime=0x5ad12690, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x591ab4b0, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x8870, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG.encryptedS", cAlternateFileName="THMBNA~1.ENC")) returned 1 [0095.707] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8baae400, ftCreationTime.dwHighDateTime=0x1c43125, ftLastAccessTime.dwLowDateTime=0x5ad12690, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x591ab4b0, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x8870, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG.encryptedS", cAlternateFileName="THMBNA~1.ENC")) returned 0 [0095.707] FindClose (in: hFindFile=0x1af3b6b0 | out: hFindFile=0x1af3b6b0) returned 1 [0095.707] SetErrorMode (uMode=0x0) returned 0x1 [0095.707] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS", nBufferLength=0x105, lpBuffer=0x12d390, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS", lpFilePart=0x0) returned 0x3e [0095.707] SetErrorMode (uMode=0x1) returned 0x0 [0095.707] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\*", lpFindFileData=0x12d530 | out: lpFindFileData=0x12d530*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51a15810, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1af3b6b0 [0096.302] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51a15810, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0096.302] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe32f2700, ftCreationTime.dwHighDateTime=0x1cab7f1, ftLastAccessTime.dwLowDateTime=0x51a15810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe32f2700, ftLastWriteTime.dwHighDateTime=0x1cab7f1, nFileSizeHigh=0x0, nFileSizeLow=0x10db7, dwReserved0=0x0, dwReserved1=0x0, cFileName="BLENDS.ELM", cAlternateFileName="")) returned 1 [0096.302] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb59ad00, ftCreationTime.dwHighDateTime=0x1c4d794, ftLastAccessTime.dwLowDateTime=0x5f729350, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xcb59ad00, ftLastWriteTime.dwHighDateTime=0x1c4d794, nFileSizeHigh=0x0, nFileSizeLow=0x216, dwReserved0=0x0, dwReserved1=0x0, cFileName="BLENDS.INF", cAlternateFileName="")) returned 1 [0096.302] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5a6d2cd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x885, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1 [0096.303] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x5093, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1 [0096.303] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x5093, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0 [0096.303] FindClose (in: hFindFile=0x1af3b6b0 | out: hFindFile=0x1af3b6b0) returned 1 [0096.303] SetErrorMode (uMode=0x0) returned 0x1 [0096.304] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\THMBNAIL.PNG", nBufferLength=0x105, lpBuffer=0x12d5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\THMBNAIL.PNG", lpFilePart=0x0) returned 0x4b [0096.304] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\THMBNAIL.PNG", nBufferLength=0x105, lpBuffer=0x12d590, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\THMBNAIL.PNG", lpFilePart=0x0) returned 0x4b [0096.304] SetErrorMode (uMode=0x1) returned 0x0 [0096.304] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\blends\\thmbnail.png"), fInfoLevelId=0x0, lpFileInformation=0x12d810 | out: lpFileInformation=0x12d810*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x5093)) returned 1 [0096.304] SetErrorMode (uMode=0x0) returned 0x1 [0096.304] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\THMBNAIL.PNG", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\THMBNAIL.PNG", lpFilePart=0x0) returned 0x4b [0096.304] SetErrorMode (uMode=0x1) returned 0x0 [0096.305] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\blends\\thmbnail.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1f0 [0096.305] SetErrorMode (uMode=0x0) returned 0x1 [0096.305] GetFileType (hFile=0x1f0) returned 0x1 [0096.305] GetFileSize (in: hFile=0x1f0, lpFileSizeHigh=0x12d8c8 | out: lpFileSizeHigh=0x12d8c8*=0x0) returned 0x5093 [0096.305] ReadFile (in: hFile=0x1f0, lpBuffer=0x289d900, nNumberOfBytesToRead=0x5093, lpNumberOfBytesRead=0x12d7a8, lpOverlapped=0x0 | out: lpBuffer=0x289d900*, lpNumberOfBytesRead=0x12d7a8*=0x5093, lpOverlapped=0x0) returned 1 [0096.457] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\THMBNAIL.PNG", nBufferLength=0x105, lpBuffer=0x12d270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\THMBNAIL.PNG", lpFilePart=0x0) returned 0x4b [0096.457] SetErrorMode (uMode=0x1) returned 0x0 [0096.457] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\blends\\thmbnail.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1f0 [0096.458] SetErrorMode (uMode=0x0) returned 0x1 [0096.458] GetFileType (hFile=0x1f0) returned 0x1 [0096.459] WriteFile (in: hFile=0x1f0, lpBuffer=0x2791120*, nNumberOfBytesToWrite=0x50a0, lpNumberOfBytesWritten=0x12d828, lpOverlapped=0x0 | out: lpBuffer=0x2791120*, lpNumberOfBytesWritten=0x12d828*=0x50a0, lpOverlapped=0x0) returned 1 [0096.460] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\THMBNAIL.PNG", nBufferLength=0x105, lpBuffer=0x12d500, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\THMBNAIL.PNG", lpFilePart=0x0) returned 0x4b [0096.460] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\THMBNAIL.PNG.encryptedS", nBufferLength=0x105, lpBuffer=0x12d500, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\THMBNAIL.PNG.encryptedS", lpFilePart=0x0) returned 0x56 [0096.460] SetErrorMode (uMode=0x1) returned 0x0 [0096.460] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\blends\\thmbnail.png"), fInfoLevelId=0x0, lpFileInformation=0x12d750 | out: lpFileInformation=0x12d750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x598f5810, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x50a0)) returned 1 [0096.460] SetErrorMode (uMode=0x0) returned 0x1 [0096.461] MoveFileW (lpExistingFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\blends\\thmbnail.png"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\THMBNAIL.PNG.encryptedS" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\blends\\thmbnail.png.encrypteds")) returned 1 [0096.461] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\Decrypt Instructions.txt", nBufferLength=0x105, lpBuffer=0x12d240, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\Decrypt Instructions.txt", lpFilePart=0x0) returned 0x57 [0096.461] SetErrorMode (uMode=0x1) returned 0x0 [0096.461] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\Decrypt Instructions.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\blends\\decrypt instructions.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1f0 [0096.463] SetErrorMode (uMode=0x0) returned 0x1 [0096.463] GetFileType (hFile=0x1f0) returned 0x1 [0096.463] WriteFile (in: hFile=0x1f0, lpBuffer=0x279a378*, nNumberOfBytesToWrite=0x773, lpNumberOfBytesWritten=0x12d7a8, lpOverlapped=0x0 | out: lpBuffer=0x279a378*, lpNumberOfBytesWritten=0x12d7a8*=0x773, lpOverlapped=0x0) returned 1 [0096.465] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS", nBufferLength=0x105, lpBuffer=0x12d430, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS", lpFilePart=0x0) returned 0x3e [0096.465] SetErrorMode (uMode=0x1) returned 0x0 [0096.465] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\*", lpFindFileData=0x12d5d0 | out: lpFindFileData=0x12d5d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51a15810, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x598f5810, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x598f5810, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1af3b6b0 [0096.465] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51a15810, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x598f5810, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x598f5810, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0096.465] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe32f2700, ftCreationTime.dwHighDateTime=0x1cab7f1, ftLastAccessTime.dwLowDateTime=0x51a15810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe32f2700, ftLastWriteTime.dwHighDateTime=0x1cab7f1, nFileSizeHigh=0x0, nFileSizeLow=0x10db7, dwReserved0=0x0, dwReserved1=0x0, cFileName="BLENDS.ELM", cAlternateFileName="")) returned 1 [0096.465] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb59ad00, ftCreationTime.dwHighDateTime=0x1c4d794, ftLastAccessTime.dwLowDateTime=0x5f729350, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xcb59ad00, ftLastWriteTime.dwHighDateTime=0x1c4d794, nFileSizeHigh=0x0, nFileSizeLow=0x216, dwReserved0=0x0, dwReserved1=0x0, cFileName="BLENDS.INF", cAlternateFileName="")) returned 1 [0096.465] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x598f5810, ftCreationTime.dwHighDateTime=0x1d5e786, ftLastAccessTime.dwLowDateTime=0x598f5810, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x598f5810, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x773, dwReserved0=0x0, dwReserved1=0x0, cFileName="Decrypt Instructions.txt", cAlternateFileName="DECRYP~1.TXT")) returned 1 [0096.465] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5a6d2cd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x885, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1 [0096.465] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x598f5810, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x50a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG.encryptedS", cAlternateFileName="THMBNA~1.ENC")) returned 1 [0096.465] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x598f5810, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x50a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG.encryptedS", cAlternateFileName="THMBNA~1.ENC")) returned 0 [0096.465] FindClose (in: hFindFile=0x1af3b6b0 | out: hFindFile=0x1af3b6b0) returned 1 [0096.466] SetErrorMode (uMode=0x0) returned 0x1 [0096.466] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM", nBufferLength=0x105, lpBuffer=0x12d390, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM", lpFilePart=0x0) returned 0x40 [0096.466] SetErrorMode (uMode=0x1) returned 0x0 [0096.466] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\*", lpFindFileData=0x12d530 | out: lpFindFileData=0x12d530*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51a15810, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1af3b6b0 [0096.466] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51a15810, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0096.466] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe6c2ae00, ftCreationTime.dwHighDateTime=0x1cab7f1, ftLastAccessTime.dwLowDateTime=0x5f775610, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe6c2ae00, ftLastWriteTime.dwHighDateTime=0x1cab7f1, nFileSizeHigh=0x0, nFileSizeLow=0xc2ba, dwReserved0=0x0, dwReserved1=0x0, cFileName="BLUECALM.ELM", cAlternateFileName="")) returned 1 [0096.466] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x51a15810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x227, dwReserved0=0x0, dwReserved1=0x0, cFileName="BLUECALM.INF", cAlternateFileName="")) returned 1 [0096.466] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5a6d2cd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x618, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1 [0096.466] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x80f1, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1 [0096.466] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x80f1, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0 [0096.467] FindClose (in: hFindFile=0x1af3b6b0 | out: hFindFile=0x1af3b6b0) returned 1 [0096.467] SetErrorMode (uMode=0x0) returned 0x1 [0096.468] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\THMBNAIL.PNG", nBufferLength=0x105, lpBuffer=0x12d5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\THMBNAIL.PNG", lpFilePart=0x0) returned 0x4d [0096.468] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\THMBNAIL.PNG", nBufferLength=0x105, lpBuffer=0x12d590, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\THMBNAIL.PNG", lpFilePart=0x0) returned 0x4d [0096.468] SetErrorMode (uMode=0x1) returned 0x0 [0096.468] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\bluecalm\\thmbnail.png"), fInfoLevelId=0x0, lpFileInformation=0x12d810 | out: lpFileInformation=0x12d810*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x80f1)) returned 1 [0096.468] SetErrorMode (uMode=0x0) returned 0x1 [0096.468] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\THMBNAIL.PNG", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\THMBNAIL.PNG", lpFilePart=0x0) returned 0x4d [0096.468] SetErrorMode (uMode=0x1) returned 0x0 [0096.468] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\bluecalm\\thmbnail.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1f0 [0096.469] SetErrorMode (uMode=0x0) returned 0x1 [0096.469] GetFileType (hFile=0x1f0) returned 0x1 [0096.469] GetFileSize (in: hFile=0x1f0, lpFileSizeHigh=0x12d8c8 | out: lpFileSizeHigh=0x12d8c8*=0x0) returned 0x80f1 [0096.469] ReadFile (in: hFile=0x1f0, lpBuffer=0x279e168, nNumberOfBytesToRead=0x80f1, lpNumberOfBytesRead=0x12d7a8, lpOverlapped=0x0 | out: lpBuffer=0x279e168*, lpNumberOfBytesRead=0x12d7a8*=0x80f1, lpOverlapped=0x0) returned 1 [0097.297] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\THMBNAIL.PNG", nBufferLength=0x105, lpBuffer=0x12d270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\THMBNAIL.PNG", lpFilePart=0x0) returned 0x4d [0097.297] SetErrorMode (uMode=0x1) returned 0x0 [0097.297] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\bluecalm\\thmbnail.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1f0 [0097.299] SetErrorMode (uMode=0x0) returned 0x1 [0097.299] GetFileType (hFile=0x1f0) returned 0x1 [0097.299] WriteFile (in: hFile=0x1f0, lpBuffer=0x28a6480*, nNumberOfBytesToWrite=0x8100, lpNumberOfBytesWritten=0x12d828, lpOverlapped=0x0 | out: lpBuffer=0x28a6480*, lpNumberOfBytesWritten=0x12d828*=0x8100, lpOverlapped=0x0) returned 1 [0097.300] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\THMBNAIL.PNG", nBufferLength=0x105, lpBuffer=0x12d500, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\THMBNAIL.PNG", lpFilePart=0x0) returned 0x4d [0097.300] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\THMBNAIL.PNG.encryptedS", nBufferLength=0x105, lpBuffer=0x12d500, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\THMBNAIL.PNG.encryptedS", lpFilePart=0x0) returned 0x58 [0097.300] SetErrorMode (uMode=0x1) returned 0x0 [0097.301] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\bluecalm\\thmbnail.png"), fInfoLevelId=0x0, lpFileInformation=0x12d750 | out: lpFileInformation=0x12d750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5a0fe250, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x8100)) returned 1 [0097.301] SetErrorMode (uMode=0x0) returned 0x1 [0097.301] MoveFileW (lpExistingFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\bluecalm\\thmbnail.png"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\THMBNAIL.PNG.encryptedS" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\bluecalm\\thmbnail.png.encrypteds")) returned 1 [0097.301] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\Decrypt Instructions.txt", nBufferLength=0x105, lpBuffer=0x12d240, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\Decrypt Instructions.txt", lpFilePart=0x0) returned 0x59 [0097.302] SetErrorMode (uMode=0x1) returned 0x0 [0097.302] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\Decrypt Instructions.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\bluecalm\\decrypt instructions.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1f0 [0097.304] SetErrorMode (uMode=0x0) returned 0x1 [0097.304] GetFileType (hFile=0x1f0) returned 0x1 [0097.304] WriteFile (in: hFile=0x1f0, lpBuffer=0x28b2768*, nNumberOfBytesToWrite=0x773, lpNumberOfBytesWritten=0x12d7a8, lpOverlapped=0x0 | out: lpBuffer=0x28b2768*, lpNumberOfBytesWritten=0x12d7a8*=0x773, lpOverlapped=0x0) returned 1 [0097.306] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM", nBufferLength=0x105, lpBuffer=0x12d430, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM", lpFilePart=0x0) returned 0x40 [0097.306] SetErrorMode (uMode=0x1) returned 0x0 [0097.306] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\*", lpFindFileData=0x12d5d0 | out: lpFindFileData=0x12d5d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51a15810, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x5a0fe250, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x5a0fe250, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1af3b6b0 [0097.306] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51a15810, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x5a0fe250, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x5a0fe250, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0097.306] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe6c2ae00, ftCreationTime.dwHighDateTime=0x1cab7f1, ftLastAccessTime.dwLowDateTime=0x5f775610, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe6c2ae00, ftLastWriteTime.dwHighDateTime=0x1cab7f1, nFileSizeHigh=0x0, nFileSizeLow=0xc2ba, dwReserved0=0x0, dwReserved1=0x0, cFileName="BLUECALM.ELM", cAlternateFileName="")) returned 1 [0097.306] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x51a15810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x227, dwReserved0=0x0, dwReserved1=0x0, cFileName="BLUECALM.INF", cAlternateFileName="")) returned 1 [0097.307] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5a0fe250, ftCreationTime.dwHighDateTime=0x1d5e786, ftLastAccessTime.dwLowDateTime=0x5a0fe250, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x5a0fe250, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x773, dwReserved0=0x0, dwReserved1=0x0, cFileName="Decrypt Instructions.txt", cAlternateFileName="DECRYP~1.TXT")) returned 1 [0097.307] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5a6d2cd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x618, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1 [0097.307] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5a0fe250, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x8100, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG.encryptedS", cAlternateFileName="THMBNA~1.ENC")) returned 1 [0097.307] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5a0fe250, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x8100, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG.encryptedS", cAlternateFileName="THMBNA~1.ENC")) returned 0 [0097.307] FindClose (in: hFindFile=0x1af3b6b0 | out: hFindFile=0x1af3b6b0) returned 1 [0097.307] SetErrorMode (uMode=0x0) returned 0x1 [0097.307] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT", nBufferLength=0x105, lpBuffer=0x12d390, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT", lpFilePart=0x0) returned 0x40 [0097.307] SetErrorMode (uMode=0x1) returned 0x0 [0097.307] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\*", lpFindFileData=0x12d530 | out: lpFindFileData=0x12d530*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51a15810, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d05ead0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1af3b6b0 [0097.308] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51a15810, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d05ead0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0097.309] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe7f3db00, ftCreationTime.dwHighDateTime=0x1cab7f1, ftLastAccessTime.dwLowDateTime=0x51a15810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe7f3db00, ftLastWriteTime.dwHighDateTime=0x1cab7f1, nFileSizeHigh=0x0, nFileSizeLow=0xda86, dwReserved0=0x0, dwReserved1=0x0, cFileName="BLUEPRNT.ELM", cAlternateFileName="")) returned 1 [0097.309] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5fbc5df0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x225, dwReserved0=0x0, dwReserved1=0x0, cFileName="BLUEPRNT.INF", cAlternateFileName="")) returned 1 [0097.309] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x785, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1 [0097.309] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad12690, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x6b0f, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1 [0097.309] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad12690, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x6b0f, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0 [0097.309] FindClose (in: hFindFile=0x1af3b6b0 | out: hFindFile=0x1af3b6b0) returned 1 [0097.309] SetErrorMode (uMode=0x0) returned 0x1 [0097.310] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\THMBNAIL.PNG", nBufferLength=0x105, lpBuffer=0x12d5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\THMBNAIL.PNG", lpFilePart=0x0) returned 0x4d [0097.310] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\THMBNAIL.PNG", nBufferLength=0x105, lpBuffer=0x12d590, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\THMBNAIL.PNG", lpFilePart=0x0) returned 0x4d [0097.310] SetErrorMode (uMode=0x1) returned 0x0 [0097.310] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\blueprnt\\thmbnail.png"), fInfoLevelId=0x0, lpFileInformation=0x12d810 | out: lpFileInformation=0x12d810*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad12690, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x6b0f)) returned 1 [0097.546] SetErrorMode (uMode=0x0) returned 0x1 [0097.546] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\THMBNAIL.PNG", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\THMBNAIL.PNG", lpFilePart=0x0) returned 0x4d [0097.546] SetErrorMode (uMode=0x1) returned 0x0 [0097.546] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\blueprnt\\thmbnail.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1f0 [0097.546] SetErrorMode (uMode=0x0) returned 0x1 [0097.546] GetFileType (hFile=0x1f0) returned 0x1 [0097.546] GetFileSize (in: hFile=0x1f0, lpFileSizeHigh=0x12d8c8 | out: lpFileSizeHigh=0x12d8c8*=0x0) returned 0x6b0f [0097.546] ReadFile (in: hFile=0x1f0, lpBuffer=0x28b6578, nNumberOfBytesToRead=0x6b0f, lpNumberOfBytesRead=0x12d7a8, lpOverlapped=0x0 | out: lpBuffer=0x28b6578*, lpNumberOfBytesRead=0x12d7a8*=0x6b0f, lpOverlapped=0x0) returned 1 [0097.724] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\THMBNAIL.PNG", nBufferLength=0x105, lpBuffer=0x12d270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\THMBNAIL.PNG", lpFilePart=0x0) returned 0x4d [0097.724] SetErrorMode (uMode=0x1) returned 0x0 [0097.724] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\blueprnt\\thmbnail.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1f0 [0097.726] SetErrorMode (uMode=0x0) returned 0x1 [0097.726] GetFileType (hFile=0x1f0) returned 0x1 [0097.726] WriteFile (in: hFile=0x1f0, lpBuffer=0x27c93e0*, nNumberOfBytesToWrite=0x6b10, lpNumberOfBytesWritten=0x12d828, lpOverlapped=0x0 | out: lpBuffer=0x27c93e0*, lpNumberOfBytesWritten=0x12d828*=0x6b10, lpOverlapped=0x0) returned 1 [0097.727] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\THMBNAIL.PNG", nBufferLength=0x105, lpBuffer=0x12d500, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\THMBNAIL.PNG", lpFilePart=0x0) returned 0x4d [0097.728] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\THMBNAIL.PNG.encryptedS", nBufferLength=0x105, lpBuffer=0x12d500, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\THMBNAIL.PNG.encryptedS", lpFilePart=0x0) returned 0x58 [0097.728] SetErrorMode (uMode=0x1) returned 0x0 [0097.728] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\blueprnt\\thmbnail.png"), fInfoLevelId=0x0, lpFileInformation=0x12d750 | out: lpFileInformation=0x12d750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad12690, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5a502770, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x6b10)) returned 1 [0097.728] SetErrorMode (uMode=0x0) returned 0x1 [0097.728] MoveFileW (lpExistingFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\blueprnt\\thmbnail.png"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\THMBNAIL.PNG.encryptedS" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\blueprnt\\thmbnail.png.encrypteds")) returned 1 [0097.728] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\Decrypt Instructions.txt", nBufferLength=0x105, lpBuffer=0x12d240, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\Decrypt Instructions.txt", lpFilePart=0x0) returned 0x59 [0097.729] SetErrorMode (uMode=0x1) returned 0x0 [0097.729] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\Decrypt Instructions.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\blueprnt\\decrypt instructions.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1f0 [0097.730] SetErrorMode (uMode=0x0) returned 0x1 [0097.731] GetFileType (hFile=0x1f0) returned 0x1 [0097.731] WriteFile (in: hFile=0x1f0, lpBuffer=0x27d40d8*, nNumberOfBytesToWrite=0x773, lpNumberOfBytesWritten=0x12d7a8, lpOverlapped=0x0 | out: lpBuffer=0x27d40d8*, lpNumberOfBytesWritten=0x12d7a8*=0x773, lpOverlapped=0x0) returned 1 [0097.732] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT", nBufferLength=0x105, lpBuffer=0x12d430, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT", lpFilePart=0x0) returned 0x40 [0097.732] SetErrorMode (uMode=0x1) returned 0x0 [0097.732] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\*", lpFindFileData=0x12d5d0 | out: lpFindFileData=0x12d5d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51a15810, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x5a5288d0, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x5a5288d0, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1af3b6b0 [0097.732] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51a15810, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x5a5288d0, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x5a5288d0, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0097.732] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe7f3db00, ftCreationTime.dwHighDateTime=0x1cab7f1, ftLastAccessTime.dwLowDateTime=0x51a15810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe7f3db00, ftLastWriteTime.dwHighDateTime=0x1cab7f1, nFileSizeHigh=0x0, nFileSizeLow=0xda86, dwReserved0=0x0, dwReserved1=0x0, cFileName="BLUEPRNT.ELM", cAlternateFileName="")) returned 1 [0097.732] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5fbc5df0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x225, dwReserved0=0x0, dwReserved1=0x0, cFileName="BLUEPRNT.INF", cAlternateFileName="")) returned 1 [0097.732] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5a5288d0, ftCreationTime.dwHighDateTime=0x1d5e786, ftLastAccessTime.dwLowDateTime=0x5a5288d0, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x5a5288d0, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x773, dwReserved0=0x0, dwReserved1=0x0, cFileName="Decrypt Instructions.txt", cAlternateFileName="DECRYP~1.TXT")) returned 1 [0097.732] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x785, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1 [0097.732] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad12690, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5a502770, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x6b10, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG.encryptedS", cAlternateFileName="THMBNA~1.ENC")) returned 1 [0097.732] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad12690, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5a502770, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x6b10, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG.encryptedS", cAlternateFileName="THMBNA~1.ENC")) returned 0 [0097.732] FindClose (in: hFindFile=0x1af3b6b0 | out: hFindFile=0x1af3b6b0) returned 1 [0097.733] SetErrorMode (uMode=0x0) returned 0x1 [0097.733] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI", nBufferLength=0x105, lpBuffer=0x12d390, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI", lpFilePart=0x0) returned 0x40 [0097.733] SetErrorMode (uMode=0x1) returned 0x0 [0097.733] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\*", lpFindFileData=0x12d530 | out: lpFindFileData=0x12d530*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51a15810, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1af3b6b0 [0097.734] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51a15810, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0097.734] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe9250800, ftCreationTime.dwHighDateTime=0x1cab7f1, ftLastAccessTime.dwLowDateTime=0x51a15810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe9250800, ftLastWriteTime.dwHighDateTime=0x1cab7f1, nFileSizeHigh=0x0, nFileSizeLow=0xeafa, dwReserved0=0x0, dwReserved1=0x0, cFileName="BOLDSTRI.ELM", cAlternateFileName="")) returned 1 [0097.734] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x51a15810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x254, dwReserved0=0x0, dwReserved1=0x0, cFileName="BOLDSTRI.INF", cAlternateFileName="")) returned 1 [0097.734] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0xd97, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1 [0097.734] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x7c5d, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1 [0097.734] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x7c5d, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0 [0097.734] FindClose (in: hFindFile=0x1af3b6b0 | out: hFindFile=0x1af3b6b0) returned 1 [0097.734] SetErrorMode (uMode=0x0) returned 0x1 [0097.735] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\THMBNAIL.PNG", nBufferLength=0x105, lpBuffer=0x12d5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\THMBNAIL.PNG", lpFilePart=0x0) returned 0x4d [0097.735] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\THMBNAIL.PNG", nBufferLength=0x105, lpBuffer=0x12d590, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\THMBNAIL.PNG", lpFilePart=0x0) returned 0x4d [0097.735] SetErrorMode (uMode=0x1) returned 0x0 [0097.735] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\boldstri\\thmbnail.png"), fInfoLevelId=0x0, lpFileInformation=0x12d810 | out: lpFileInformation=0x12d810*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x7c5d)) returned 1 [0097.736] SetErrorMode (uMode=0x0) returned 0x1 [0097.736] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\THMBNAIL.PNG", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\THMBNAIL.PNG", lpFilePart=0x0) returned 0x4d [0097.736] SetErrorMode (uMode=0x1) returned 0x0 [0097.736] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\boldstri\\thmbnail.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1f0 [0097.736] SetErrorMode (uMode=0x0) returned 0x1 [0097.736] GetFileType (hFile=0x1f0) returned 0x1 [0097.736] GetFileSize (in: hFile=0x1f0, lpFileSizeHigh=0x12d8c8 | out: lpFileSizeHigh=0x12d8c8*=0x0) returned 0x7c5d [0097.736] ReadFile (in: hFile=0x1f0, lpBuffer=0x27d7ee8, nNumberOfBytesToRead=0x7c5d, lpNumberOfBytesRead=0x12d7a8, lpOverlapped=0x0 | out: lpBuffer=0x27d7ee8*, lpNumberOfBytesRead=0x12d7a8*=0x7c5d, lpOverlapped=0x0) returned 1 [0097.863] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\THMBNAIL.PNG", nBufferLength=0x105, lpBuffer=0x12d270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\THMBNAIL.PNG", lpFilePart=0x0) returned 0x4d [0097.863] SetErrorMode (uMode=0x1) returned 0x0 [0097.863] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\boldstri\\thmbnail.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1f0 [0097.865] SetErrorMode (uMode=0x0) returned 0x1 [0097.865] GetFileType (hFile=0x1f0) returned 0x1 [0097.865] WriteFile (in: hFile=0x1f0, lpBuffer=0x26d31c8*, nNumberOfBytesToWrite=0x7c60, lpNumberOfBytesWritten=0x12d828, lpOverlapped=0x0 | out: lpBuffer=0x26d31c8*, lpNumberOfBytesWritten=0x12d828*=0x7c60, lpOverlapped=0x0) returned 1 [0097.867] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\THMBNAIL.PNG", nBufferLength=0x105, lpBuffer=0x12d500, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\THMBNAIL.PNG", lpFilePart=0x0) returned 0x4d [0097.867] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\THMBNAIL.PNG.encryptedS", nBufferLength=0x105, lpBuffer=0x12d500, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\THMBNAIL.PNG.encryptedS", lpFilePart=0x0) returned 0x58 [0097.867] SetErrorMode (uMode=0x1) returned 0x0 [0097.867] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\boldstri\\thmbnail.png"), fInfoLevelId=0x0, lpFileInformation=0x12d750 | out: lpFileInformation=0x12d750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5a6593d0, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x7c60)) returned 1 [0097.867] SetErrorMode (uMode=0x0) returned 0x1 [0097.867] MoveFileW (lpExistingFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\boldstri\\thmbnail.png"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\THMBNAIL.PNG.encryptedS" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\boldstri\\thmbnail.png.encrypteds")) returned 1 [0097.868] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\Decrypt Instructions.txt", nBufferLength=0x105, lpBuffer=0x12d240, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\Decrypt Instructions.txt", lpFilePart=0x0) returned 0x59 [0097.868] SetErrorMode (uMode=0x1) returned 0x0 [0097.868] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\Decrypt Instructions.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\boldstri\\decrypt instructions.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1f0 [0097.889] SetErrorMode (uMode=0x0) returned 0x1 [0097.889] GetFileType (hFile=0x1f0) returned 0x1 [0097.889] WriteFile (in: hFile=0x1f0, lpBuffer=0x26df010*, nNumberOfBytesToWrite=0x773, lpNumberOfBytesWritten=0x12d7a8, lpOverlapped=0x0 | out: lpBuffer=0x26df010*, lpNumberOfBytesWritten=0x12d7a8*=0x773, lpOverlapped=0x0) returned 1 [0097.890] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI", nBufferLength=0x105, lpBuffer=0x12d430, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI", lpFilePart=0x0) returned 0x40 [0097.891] SetErrorMode (uMode=0x1) returned 0x0 [0097.891] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\*", lpFindFileData=0x12d5d0 | out: lpFindFileData=0x12d5d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51a15810, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x5a6a5690, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x5a6a5690, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1af3b6b0 [0097.891] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51a15810, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x5a6a5690, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x5a6a5690, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0097.891] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe9250800, ftCreationTime.dwHighDateTime=0x1cab7f1, ftLastAccessTime.dwLowDateTime=0x51a15810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe9250800, ftLastWriteTime.dwHighDateTime=0x1cab7f1, nFileSizeHigh=0x0, nFileSizeLow=0xeafa, dwReserved0=0x0, dwReserved1=0x0, cFileName="BOLDSTRI.ELM", cAlternateFileName="")) returned 1 [0097.891] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x51a15810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x254, dwReserved0=0x0, dwReserved1=0x0, cFileName="BOLDSTRI.INF", cAlternateFileName="")) returned 1 [0097.891] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5a6593d0, ftCreationTime.dwHighDateTime=0x1d5e786, ftLastAccessTime.dwLowDateTime=0x5a6593d0, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x5a6a5690, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x773, dwReserved0=0x0, dwReserved1=0x0, cFileName="Decrypt Instructions.txt", cAlternateFileName="DECRYP~1.TXT")) returned 1 [0097.891] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0xd97, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1 [0097.891] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5a6593d0, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x7c60, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG.encryptedS", cAlternateFileName="THMBNA~1.ENC")) returned 1 [0097.891] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5a6593d0, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x7c60, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG.encryptedS", cAlternateFileName="THMBNA~1.ENC")) returned 0 [0097.891] FindClose (in: hFindFile=0x1af3b6b0 | out: hFindFile=0x1af3b6b0) returned 1 [0097.891] SetErrorMode (uMode=0x0) returned 0x1 [0097.891] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE", nBufferLength=0x105, lpBuffer=0x12d390, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE", lpFilePart=0x0) returned 0x3e [0097.892] SetErrorMode (uMode=0x1) returned 0x0 [0097.892] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\*", lpFindFileData=0x12d530 | out: lpFindFileData=0x12d530*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51a61ad0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1af3b6b0 [0097.893] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51a61ad0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0097.893] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea563500, ftCreationTime.dwHighDateTime=0x1cab7f1, ftLastAccessTime.dwLowDateTime=0x51a61ad0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xea563500, ftLastWriteTime.dwHighDateTime=0x1cab7f1, nFileSizeHigh=0x0, nFileSizeLow=0x1a537, dwReserved0=0x0, dwReserved1=0x0, cFileName="BREEZE.ELM", cAlternateFileName="")) returned 1 [0097.893] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6003c730, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x1c2, dwReserved0=0x0, dwReserved1=0x0, cFileName="BREEZE.INF", cAlternateFileName="")) returned 1 [0097.893] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5a6f8e30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0xaa2, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1 [0097.893] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0xa90c, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1 [0097.893] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0xa90c, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0 [0097.893] FindClose (in: hFindFile=0x1af3b6b0 | out: hFindFile=0x1af3b6b0) returned 1 [0097.893] SetErrorMode (uMode=0x0) returned 0x1 [0097.894] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\THMBNAIL.PNG", nBufferLength=0x105, lpBuffer=0x12d5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\THMBNAIL.PNG", lpFilePart=0x0) returned 0x4b [0097.894] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\THMBNAIL.PNG", nBufferLength=0x105, lpBuffer=0x12d590, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\THMBNAIL.PNG", lpFilePart=0x0) returned 0x4b [0097.894] SetErrorMode (uMode=0x1) returned 0x0 [0097.894] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\breeze\\thmbnail.png"), fInfoLevelId=0x0, lpFileInformation=0x12d810 | out: lpFileInformation=0x12d810*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0xa90c)) returned 1 [0097.895] SetErrorMode (uMode=0x0) returned 0x1 [0097.895] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\THMBNAIL.PNG", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\THMBNAIL.PNG", lpFilePart=0x0) returned 0x4b [0097.895] SetErrorMode (uMode=0x1) returned 0x0 [0097.895] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\breeze\\thmbnail.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1f0 [0097.895] SetErrorMode (uMode=0x0) returned 0x1 [0097.895] GetFileType (hFile=0x1f0) returned 0x1 [0097.895] GetFileSize (in: hFile=0x1f0, lpFileSizeHigh=0x12d8c8 | out: lpFileSizeHigh=0x12d8c8*=0x0) returned 0xa90c [0097.896] ReadFile (in: hFile=0x1f0, lpBuffer=0x26e2dc8, nNumberOfBytesToRead=0xa90c, lpNumberOfBytesRead=0x12d7a8, lpOverlapped=0x0 | out: lpBuffer=0x26e2dc8*, lpNumberOfBytesRead=0x12d7a8*=0xa90c, lpOverlapped=0x0) returned 1 [0097.970] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\THMBNAIL.PNG", nBufferLength=0x105, lpBuffer=0x12d270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\THMBNAIL.PNG", lpFilePart=0x0) returned 0x4b [0097.970] SetErrorMode (uMode=0x1) returned 0x0 [0097.970] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\breeze\\thmbnail.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1f0 [0097.972] SetErrorMode (uMode=0x0) returned 0x1 [0097.972] GetFileType (hFile=0x1f0) returned 0x1 [0097.972] WriteFile (in: hFile=0x1f0, lpBuffer=0x27e2718*, nNumberOfBytesToWrite=0xa910, lpNumberOfBytesWritten=0x12d828, lpOverlapped=0x0 | out: lpBuffer=0x27e2718*, lpNumberOfBytesWritten=0x12d828*=0xa910, lpOverlapped=0x0) returned 1 [0097.974] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\THMBNAIL.PNG", nBufferLength=0x105, lpBuffer=0x12d500, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\THMBNAIL.PNG", lpFilePart=0x0) returned 0x4b [0097.974] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\THMBNAIL.PNG.encryptedS", nBufferLength=0x105, lpBuffer=0x12d500, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\THMBNAIL.PNG.encryptedS", lpFilePart=0x0) returned 0x56 [0097.974] SetErrorMode (uMode=0x1) returned 0x0 [0097.974] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\breeze\\thmbnail.png"), fInfoLevelId=0x0, lpFileInformation=0x12d750 | out: lpFileInformation=0x12d750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5a763d70, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0xa910)) returned 1 [0097.975] SetErrorMode (uMode=0x0) returned 0x1 [0097.975] MoveFileW (lpExistingFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\breeze\\thmbnail.png"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\THMBNAIL.PNG.encryptedS" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\breeze\\thmbnail.png.encrypteds")) returned 1 [0097.975] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\Decrypt Instructions.txt", nBufferLength=0x105, lpBuffer=0x12d240, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\Decrypt Instructions.txt", lpFilePart=0x0) returned 0x57 [0097.975] SetErrorMode (uMode=0x1) returned 0x0 [0097.976] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\Decrypt Instructions.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\breeze\\decrypt instructions.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1f0 [0097.978] SetErrorMode (uMode=0x0) returned 0x1 [0097.978] GetFileType (hFile=0x1f0) returned 0x1 [0097.979] WriteFile (in: hFile=0x1f0, lpBuffer=0x27f11e0*, nNumberOfBytesToWrite=0x773, lpNumberOfBytesWritten=0x12d7a8, lpOverlapped=0x0 | out: lpBuffer=0x27f11e0*, lpNumberOfBytesWritten=0x12d7a8*=0x773, lpOverlapped=0x0) returned 1 [0097.981] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE", nBufferLength=0x105, lpBuffer=0x12d430, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE", lpFilePart=0x0) returned 0x3e [0097.981] SetErrorMode (uMode=0x1) returned 0x0 [0097.981] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\*", lpFindFileData=0x12d5d0 | out: lpFindFileData=0x12d5d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51a61ad0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x5a763d70, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x5a763d70, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1af3b6b0 [0097.981] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51a61ad0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x5a763d70, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x5a763d70, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0097.981] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea563500, ftCreationTime.dwHighDateTime=0x1cab7f1, ftLastAccessTime.dwLowDateTime=0x51a61ad0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xea563500, ftLastWriteTime.dwHighDateTime=0x1cab7f1, nFileSizeHigh=0x0, nFileSizeLow=0x1a537, dwReserved0=0x0, dwReserved1=0x0, cFileName="BREEZE.ELM", cAlternateFileName="")) returned 1 [0097.981] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6003c730, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x1c2, dwReserved0=0x0, dwReserved1=0x0, cFileName="BREEZE.INF", cAlternateFileName="")) returned 1 [0097.981] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5a763d70, ftCreationTime.dwHighDateTime=0x1d5e786, ftLastAccessTime.dwLowDateTime=0x5a763d70, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x5a789ed0, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x773, dwReserved0=0x0, dwReserved1=0x0, cFileName="Decrypt Instructions.txt", cAlternateFileName="DECRYP~1.TXT")) returned 1 [0097.981] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5a6f8e30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0xaa2, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1 [0097.981] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5a763d70, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0xa910, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG.encryptedS", cAlternateFileName="THMBNA~1.ENC")) returned 1 [0097.981] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5a763d70, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0xa910, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG.encryptedS", cAlternateFileName="THMBNA~1.ENC")) returned 0 [0097.982] FindClose (in: hFindFile=0x1af3b6b0 | out: hFindFile=0x1af3b6b0) returned 1 [0097.982] SetErrorMode (uMode=0x0) returned 0x1 [0097.982] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON", nBufferLength=0x105, lpBuffer=0x12d390, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON", lpFilePart=0x0) returned 0x3e [0097.982] SetErrorMode (uMode=0x1) returned 0x0 [0097.982] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\*", lpFindFileData=0x12d530 | out: lpFindFileData=0x12d530*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51c2ab50, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1af3b6b0 [0097.984] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51c2ab50, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0097.984] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeb876200, ftCreationTime.dwHighDateTime=0x1cab7f1, ftLastAccessTime.dwLowDateTime=0x51c2ab50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xeb876200, ftLastWriteTime.dwHighDateTime=0x1cab7f1, nFileSizeHigh=0x0, nFileSizeLow=0xaec9, dwReserved0=0x0, dwReserved1=0x0, cFileName="CANYON.ELM", cAlternateFileName="")) returned 1 [0097.984] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x603362b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x1d1, dwReserved0=0x0, dwReserved1=0x0, cFileName="CANYON.INF", cAlternateFileName="")) returned 1 [0097.984] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5a6f8e30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x3b1, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1 [0097.984] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x7f5f, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1 [0097.984] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x7f5f, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0 [0097.984] FindClose (in: hFindFile=0x1af3b6b0 | out: hFindFile=0x1af3b6b0) returned 1 [0097.985] SetErrorMode (uMode=0x0) returned 0x1 [0097.986] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\THMBNAIL.PNG", nBufferLength=0x105, lpBuffer=0x12d5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\THMBNAIL.PNG", lpFilePart=0x0) returned 0x4b [0097.986] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\THMBNAIL.PNG", nBufferLength=0x105, lpBuffer=0x12d590, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\THMBNAIL.PNG", lpFilePart=0x0) returned 0x4b [0097.986] SetErrorMode (uMode=0x1) returned 0x0 [0097.986] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\canyon\\thmbnail.png"), fInfoLevelId=0x0, lpFileInformation=0x12d810 | out: lpFileInformation=0x12d810*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x7f5f)) returned 1 [0097.986] SetErrorMode (uMode=0x0) returned 0x1 [0097.986] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\THMBNAIL.PNG", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\THMBNAIL.PNG", lpFilePart=0x0) returned 0x4b [0097.986] SetErrorMode (uMode=0x1) returned 0x0 [0097.987] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\canyon\\thmbnail.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1f0 [0097.987] SetErrorMode (uMode=0x0) returned 0x1 [0097.987] GetFileType (hFile=0x1f0) returned 0x1 [0097.987] GetFileSize (in: hFile=0x1f0, lpFileSizeHigh=0x12d8c8 | out: lpFileSizeHigh=0x12d8c8*=0x0) returned 0x7f5f [0097.987] ReadFile (in: hFile=0x1f0, lpBuffer=0x27f4f78, nNumberOfBytesToRead=0x7f5f, lpNumberOfBytesRead=0x12d7a8, lpOverlapped=0x0 | out: lpBuffer=0x27f4f78*, lpNumberOfBytesRead=0x12d7a8*=0x7f5f, lpOverlapped=0x0) returned 1 [0098.125] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\THMBNAIL.PNG", nBufferLength=0x105, lpBuffer=0x12d270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\THMBNAIL.PNG", lpFilePart=0x0) returned 0x4b [0098.125] SetErrorMode (uMode=0x1) returned 0x0 [0098.125] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\canyon\\thmbnail.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1f0 [0098.126] SetErrorMode (uMode=0x0) returned 0x1 [0098.127] GetFileType (hFile=0x1f0) returned 0x1 [0098.127] WriteFile (in: hFile=0x1f0, lpBuffer=0x27055c8*, nNumberOfBytesToWrite=0x7f60, lpNumberOfBytesWritten=0x12d828, lpOverlapped=0x0 | out: lpBuffer=0x27055c8*, lpNumberOfBytesWritten=0x12d828*=0x7f60, lpOverlapped=0x0) returned 1 [0098.128] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\THMBNAIL.PNG", nBufferLength=0x105, lpBuffer=0x12d500, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\THMBNAIL.PNG", lpFilePart=0x0) returned 0x4b [0098.128] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\THMBNAIL.PNG.encryptedS", nBufferLength=0x105, lpBuffer=0x12d500, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\THMBNAIL.PNG.encryptedS", lpFilePart=0x0) returned 0x56 [0098.128] SetErrorMode (uMode=0x1) returned 0x0 [0098.128] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\canyon\\thmbnail.png"), fInfoLevelId=0x0, lpFileInformation=0x12d750 | out: lpFileInformation=0x12d750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5a8e0b30, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x7f60)) returned 1 [0098.128] SetErrorMode (uMode=0x0) returned 0x1 [0098.128] MoveFileW (lpExistingFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\canyon\\thmbnail.png"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\THMBNAIL.PNG.encryptedS" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\canyon\\thmbnail.png.encrypteds")) returned 1 [0098.129] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\Decrypt Instructions.txt", nBufferLength=0x105, lpBuffer=0x12d240, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\Decrypt Instructions.txt", lpFilePart=0x0) returned 0x57 [0098.129] SetErrorMode (uMode=0x1) returned 0x0 [0098.129] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\Decrypt Instructions.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\canyon\\decrypt instructions.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1f0 [0098.131] SetErrorMode (uMode=0x0) returned 0x1 [0098.131] GetFileType (hFile=0x1f0) returned 0x1 [0098.131] WriteFile (in: hFile=0x1f0, lpBuffer=0x27116e0*, nNumberOfBytesToWrite=0x773, lpNumberOfBytesWritten=0x12d7a8, lpOverlapped=0x0 | out: lpBuffer=0x27116e0*, lpNumberOfBytesWritten=0x12d7a8*=0x773, lpOverlapped=0x0) returned 1 [0098.132] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON", nBufferLength=0x105, lpBuffer=0x12d430, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON", lpFilePart=0x0) returned 0x3e [0098.132] SetErrorMode (uMode=0x1) returned 0x0 [0098.132] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\*", lpFindFileData=0x12d5d0 | out: lpFindFileData=0x12d5d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51c2ab50, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x5a8e0b30, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x5a8e0b30, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1af3b6b0 [0098.132] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51c2ab50, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x5a8e0b30, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x5a8e0b30, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0098.133] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeb876200, ftCreationTime.dwHighDateTime=0x1cab7f1, ftLastAccessTime.dwLowDateTime=0x51c2ab50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xeb876200, ftLastWriteTime.dwHighDateTime=0x1cab7f1, nFileSizeHigh=0x0, nFileSizeLow=0xaec9, dwReserved0=0x0, dwReserved1=0x0, cFileName="CANYON.ELM", cAlternateFileName="")) returned 1 [0098.133] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x603362b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x1d1, dwReserved0=0x0, dwReserved1=0x0, cFileName="CANYON.INF", cAlternateFileName="")) returned 1 [0098.133] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5a8e0b30, ftCreationTime.dwHighDateTime=0x1d5e786, ftLastAccessTime.dwLowDateTime=0x5a8e0b30, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x5a8e0b30, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x773, dwReserved0=0x0, dwReserved1=0x0, cFileName="Decrypt Instructions.txt", cAlternateFileName="DECRYP~1.TXT")) returned 1 [0098.133] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5a6f8e30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x3b1, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1 [0098.133] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5a8e0b30, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x7f60, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG.encryptedS", cAlternateFileName="THMBNA~1.ENC")) returned 1 [0098.133] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5a8e0b30, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x7f60, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG.encryptedS", cAlternateFileName="THMBNA~1.ENC")) returned 0 [0098.133] FindClose (in: hFindFile=0x1af3b6b0 | out: hFindFile=0x1af3b6b0) returned 1 [0098.133] SetErrorMode (uMode=0x0) returned 0x1 [0098.133] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES", nBufferLength=0x105, lpBuffer=0x12d390, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES", lpFilePart=0x0) returned 0x40 [0098.133] SetErrorMode (uMode=0x1) returned 0x0 [0098.133] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\*", lpFindFileData=0x12d530 | out: lpFindFileData=0x12d530*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51c2ab50, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d05ead0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1af3b6b0 [0098.156] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51c2ab50, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d05ead0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0098.156] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xecb88f00, ftCreationTime.dwHighDateTime=0x1cab7f1, ftLastAccessTime.dwLowDateTime=0x603362b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xecb88f00, ftLastWriteTime.dwHighDateTime=0x1cab7f1, nFileSizeHigh=0x0, nFileSizeLow=0xe1ba, dwReserved0=0x0, dwReserved1=0x0, cFileName="CAPSULES.ELM", cAlternateFileName="")) returned 1 [0098.156] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf86a7300, ftCreationTime.dwHighDateTime=0x1c47827, ftLastAccessTime.dwLowDateTime=0x51c2ab50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf86a7300, ftLastWriteTime.dwHighDateTime=0x1c47827, nFileSizeHigh=0x0, nFileSizeLow=0x1f5, dwReserved0=0x0, dwReserved1=0x0, cFileName="CAPSULES.INF", cAlternateFileName="")) returned 1 [0098.156] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x7fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1 [0098.156] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad12690, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x74e5, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1 [0098.156] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad12690, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x74e5, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0 [0098.156] FindClose (in: hFindFile=0x1af3b6b0 | out: hFindFile=0x1af3b6b0) returned 1 [0098.158] SetErrorMode (uMode=0x0) returned 0x1 [0098.159] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\THMBNAIL.PNG", nBufferLength=0x105, lpBuffer=0x12d5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\THMBNAIL.PNG", lpFilePart=0x0) returned 0x4d [0098.159] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\THMBNAIL.PNG", nBufferLength=0x105, lpBuffer=0x12d590, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\THMBNAIL.PNG", lpFilePart=0x0) returned 0x4d [0098.159] SetErrorMode (uMode=0x1) returned 0x0 [0098.160] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\capsules\\thmbnail.png"), fInfoLevelId=0x0, lpFileInformation=0x12d810 | out: lpFileInformation=0x12d810*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad12690, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x74e5)) returned 1 [0098.160] SetErrorMode (uMode=0x0) returned 0x1 [0098.160] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\THMBNAIL.PNG", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\THMBNAIL.PNG", lpFilePart=0x0) returned 0x4d [0098.160] SetErrorMode (uMode=0x1) returned 0x0 [0098.160] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\capsules\\thmbnail.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1f0 [0098.160] SetErrorMode (uMode=0x0) returned 0x1 [0098.160] GetFileType (hFile=0x1f0) returned 0x1 [0098.160] GetFileSize (in: hFile=0x1f0, lpFileSizeHigh=0x12d8c8 | out: lpFileSizeHigh=0x12d8c8*=0x0) returned 0x74e5 [0098.161] ReadFile (in: hFile=0x1f0, lpBuffer=0x27154d0, nNumberOfBytesToRead=0x74e5, lpNumberOfBytesRead=0x12d7a8, lpOverlapped=0x0 | out: lpBuffer=0x27154d0*, lpNumberOfBytesRead=0x12d7a8*=0x74e5, lpOverlapped=0x0) returned 1 [0098.190] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\THMBNAIL.PNG", nBufferLength=0x105, lpBuffer=0x12d270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\THMBNAIL.PNG", lpFilePart=0x0) returned 0x4d [0098.190] SetErrorMode (uMode=0x1) returned 0x0 [0098.190] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\capsules\\thmbnail.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1f0 [0098.192] SetErrorMode (uMode=0x0) returned 0x1 [0098.192] GetFileType (hFile=0x1f0) returned 0x1 [0098.192] WriteFile (in: hFile=0x1f0, lpBuffer=0x2819b98*, nNumberOfBytesToWrite=0x74f0, lpNumberOfBytesWritten=0x12d828, lpOverlapped=0x0 | out: lpBuffer=0x2819b98*, lpNumberOfBytesWritten=0x12d828*=0x74f0, lpOverlapped=0x0) returned 1 [0098.194] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\THMBNAIL.PNG", nBufferLength=0x105, lpBuffer=0x12d500, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\THMBNAIL.PNG", lpFilePart=0x0) returned 0x4d [0098.194] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\THMBNAIL.PNG.encryptedS", nBufferLength=0x105, lpBuffer=0x12d500, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\THMBNAIL.PNG.encryptedS", lpFilePart=0x0) returned 0x58 [0098.194] SetErrorMode (uMode=0x1) returned 0x0 [0098.194] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\capsules\\thmbnail.png"), fInfoLevelId=0x0, lpFileInformation=0x12d750 | out: lpFileInformation=0x12d750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad12690, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5a9790b0, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x74f0)) returned 1 [0098.194] SetErrorMode (uMode=0x0) returned 0x1 [0098.194] MoveFileW (lpExistingFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\capsules\\thmbnail.png"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\THMBNAIL.PNG.encryptedS" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\capsules\\thmbnail.png.encrypteds")) returned 1 [0098.195] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\Decrypt Instructions.txt", nBufferLength=0x105, lpBuffer=0x12d240, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\Decrypt Instructions.txt", lpFilePart=0x0) returned 0x59 [0098.195] SetErrorMode (uMode=0x1) returned 0x0 [0098.195] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\Decrypt Instructions.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\capsules\\decrypt instructions.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1f0 [0098.201] SetErrorMode (uMode=0x0) returned 0x1 [0098.201] GetFileType (hFile=0x1f0) returned 0x1 [0098.202] WriteFile (in: hFile=0x1f0, lpBuffer=0x2825270*, nNumberOfBytesToWrite=0x773, lpNumberOfBytesWritten=0x12d7a8, lpOverlapped=0x0 | out: lpBuffer=0x2825270*, lpNumberOfBytesWritten=0x12d7a8*=0x773, lpOverlapped=0x0) returned 1 [0098.203] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES", nBufferLength=0x105, lpBuffer=0x12d430, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES", lpFilePart=0x0) returned 0x40 [0098.203] SetErrorMode (uMode=0x1) returned 0x0 [0098.203] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\*", lpFindFileData=0x12d5d0 | out: lpFindFileData=0x12d5d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51c2ab50, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x5a99f210, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x5a99f210, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1af3b6b0 [0098.203] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51c2ab50, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x5a99f210, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x5a99f210, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0098.203] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xecb88f00, ftCreationTime.dwHighDateTime=0x1cab7f1, ftLastAccessTime.dwLowDateTime=0x603362b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xecb88f00, ftLastWriteTime.dwHighDateTime=0x1cab7f1, nFileSizeHigh=0x0, nFileSizeLow=0xe1ba, dwReserved0=0x0, dwReserved1=0x0, cFileName="CAPSULES.ELM", cAlternateFileName="")) returned 1 [0098.203] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf86a7300, ftCreationTime.dwHighDateTime=0x1c47827, ftLastAccessTime.dwLowDateTime=0x51c2ab50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf86a7300, ftLastWriteTime.dwHighDateTime=0x1c47827, nFileSizeHigh=0x0, nFileSizeLow=0x1f5, dwReserved0=0x0, dwReserved1=0x0, cFileName="CAPSULES.INF", cAlternateFileName="")) returned 1 [0098.204] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5a9790b0, ftCreationTime.dwHighDateTime=0x1d5e786, ftLastAccessTime.dwLowDateTime=0x5a9790b0, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x5a99f210, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x773, dwReserved0=0x0, dwReserved1=0x0, cFileName="Decrypt Instructions.txt", cAlternateFileName="DECRYP~1.TXT")) returned 1 [0098.204] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x7fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1 [0098.204] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad12690, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5a9790b0, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x74f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG.encryptedS", cAlternateFileName="THMBNA~1.ENC")) returned 1 [0098.204] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad12690, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5a9790b0, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x74f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG.encryptedS", cAlternateFileName="THMBNA~1.ENC")) returned 0 [0098.204] FindClose (in: hFindFile=0x1af3b6b0 | out: hFindFile=0x1af3b6b0) returned 1 [0098.204] SetErrorMode (uMode=0x0) returned 0x1 [0098.204] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE", nBufferLength=0x105, lpBuffer=0x12d390, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE", lpFilePart=0x0) returned 0x3f [0098.204] SetErrorMode (uMode=0x1) returned 0x0 [0098.204] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\*", lpFindFileData=0x12d530 | out: lpFindFileData=0x12d530*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51c50cb0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1af3b6b0 [0098.243] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51c50cb0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0098.243] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xede9bc00, ftCreationTime.dwHighDateTime=0x1cab7f1, ftLastAccessTime.dwLowDateTime=0x51c50cb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xede9bc00, ftLastWriteTime.dwHighDateTime=0x1cab7f1, nFileSizeHigh=0x0, nFileSizeLow=0xba44, dwReserved0=0x0, dwReserved1=0x0, cFileName="CASCADE.ELM", cAlternateFileName="")) returned 1 [0098.243] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x51c50cb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x262, dwReserved0=0x0, dwReserved1=0x0, cFileName="CASCADE.INF", cAlternateFileName="")) returned 1 [0098.243] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x553, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1 [0098.243] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x4f93, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1 [0098.244] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x4f93, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0 [0098.244] FindClose (in: hFindFile=0x1af3b6b0 | out: hFindFile=0x1af3b6b0) returned 1 [0098.244] SetErrorMode (uMode=0x0) returned 0x1 [0098.245] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\THMBNAIL.PNG", nBufferLength=0x105, lpBuffer=0x12d5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\THMBNAIL.PNG", lpFilePart=0x0) returned 0x4c [0098.245] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\THMBNAIL.PNG", nBufferLength=0x105, lpBuffer=0x12d590, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\THMBNAIL.PNG", lpFilePart=0x0) returned 0x4c [0098.245] SetErrorMode (uMode=0x1) returned 0x0 [0098.245] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\cascade\\thmbnail.png"), fInfoLevelId=0x0, lpFileInformation=0x12d810 | out: lpFileInformation=0x12d810*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x4f93)) returned 1 [0098.246] SetErrorMode (uMode=0x0) returned 0x1 [0098.246] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\THMBNAIL.PNG", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\THMBNAIL.PNG", lpFilePart=0x0) returned 0x4c [0098.246] SetErrorMode (uMode=0x1) returned 0x0 [0098.246] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\cascade\\thmbnail.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1f0 [0098.246] SetErrorMode (uMode=0x0) returned 0x1 [0098.246] GetFileType (hFile=0x1f0) returned 0x1 [0098.246] GetFileSize (in: hFile=0x1f0, lpFileSizeHigh=0x12d8c8 | out: lpFileSizeHigh=0x12d8c8*=0x0) returned 0x4f93 [0098.246] ReadFile (in: hFile=0x1f0, lpBuffer=0x2829048, nNumberOfBytesToRead=0x4f93, lpNumberOfBytesRead=0x12d7a8, lpOverlapped=0x0 | out: lpBuffer=0x2829048*, lpNumberOfBytesRead=0x12d7a8*=0x4f93, lpOverlapped=0x0) returned 1 [0098.969] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\THMBNAIL.PNG", nBufferLength=0x105, lpBuffer=0x12d270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\THMBNAIL.PNG", lpFilePart=0x0) returned 0x4c [0098.969] SetErrorMode (uMode=0x1) returned 0x0 [0098.969] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\cascade\\thmbnail.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1f0 [0098.971] SetErrorMode (uMode=0x0) returned 0x1 [0098.971] GetFileType (hFile=0x1f0) returned 0x1 [0098.971] WriteFile (in: hFile=0x1f0, lpBuffer=0x270e4c8*, nNumberOfBytesToWrite=0x4fa0, lpNumberOfBytesWritten=0x12d828, lpOverlapped=0x0 | out: lpBuffer=0x270e4c8*, lpNumberOfBytesWritten=0x12d828*=0x4fa0, lpOverlapped=0x0) returned 1 [0098.974] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\THMBNAIL.PNG", nBufferLength=0x105, lpBuffer=0x12d500, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\THMBNAIL.PNG", lpFilePart=0x0) returned 0x4c [0098.974] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\THMBNAIL.PNG.encryptedS", nBufferLength=0x105, lpBuffer=0x12d500, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\THMBNAIL.PNG.encryptedS", lpFilePart=0x0) returned 0x57 [0098.974] SetErrorMode (uMode=0x1) returned 0x0 [0098.974] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\cascade\\thmbnail.png"), fInfoLevelId=0x0, lpFileInformation=0x12d750 | out: lpFileInformation=0x12d750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5b0e9570, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x4fa0)) returned 1 [0098.974] SetErrorMode (uMode=0x0) returned 0x1 [0098.975] MoveFileW (lpExistingFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\cascade\\thmbnail.png"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\THMBNAIL.PNG.encryptedS" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\cascade\\thmbnail.png.encrypteds")) returned 1 [0098.992] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\Decrypt Instructions.txt", nBufferLength=0x105, lpBuffer=0x12d240, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\Decrypt Instructions.txt", lpFilePart=0x0) returned 0x58 [0098.992] SetErrorMode (uMode=0x1) returned 0x0 [0098.992] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\Decrypt Instructions.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\cascade\\decrypt instructions.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1f0 [0099.011] SetErrorMode (uMode=0x0) returned 0x1 [0099.011] GetFileType (hFile=0x1f0) returned 0x1 [0099.011] WriteFile (in: hFile=0x1f0, lpBuffer=0x2717640*, nNumberOfBytesToWrite=0x773, lpNumberOfBytesWritten=0x12d7a8, lpOverlapped=0x0 | out: lpBuffer=0x2717640*, lpNumberOfBytesWritten=0x12d7a8*=0x773, lpOverlapped=0x0) returned 1 [0099.013] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE", nBufferLength=0x105, lpBuffer=0x12d430, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE", lpFilePart=0x0) returned 0x3f [0099.013] SetErrorMode (uMode=0x1) returned 0x0 [0099.013] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\*", lpFindFileData=0x12d5d0 | out: lpFindFileData=0x12d5d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51c50cb0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x5b15b990, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x5b15b990, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1af3b6b0 [0099.013] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51c50cb0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x5b15b990, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x5b15b990, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0099.013] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xede9bc00, ftCreationTime.dwHighDateTime=0x1cab7f1, ftLastAccessTime.dwLowDateTime=0x51c50cb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xede9bc00, ftLastWriteTime.dwHighDateTime=0x1cab7f1, nFileSizeHigh=0x0, nFileSizeLow=0xba44, dwReserved0=0x0, dwReserved1=0x0, cFileName="CASCADE.ELM", cAlternateFileName="")) returned 1 [0099.013] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x51c50cb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x262, dwReserved0=0x0, dwReserved1=0x0, cFileName="CASCADE.INF", cAlternateFileName="")) returned 1 [0099.013] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5b135830, ftCreationTime.dwHighDateTime=0x1d5e786, ftLastAccessTime.dwLowDateTime=0x5b135830, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x5b15b990, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x773, dwReserved0=0x0, dwReserved1=0x0, cFileName="Decrypt Instructions.txt", cAlternateFileName="DECRYP~1.TXT")) returned 1 [0099.013] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x553, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1 [0099.013] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5b0e9570, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x4fa0, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG.encryptedS", cAlternateFileName="THMBNA~1.ENC")) returned 1 [0099.014] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5b0e9570, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x4fa0, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG.encryptedS", cAlternateFileName="THMBNA~1.ENC")) returned 0 [0099.014] FindClose (in: hFindFile=0x1af3b6b0 | out: hFindFile=0x1af3b6b0) returned 1 [0099.014] SetErrorMode (uMode=0x0) returned 0x1 [0099.014] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS", nBufferLength=0x105, lpBuffer=0x12d390, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS", lpFilePart=0x0) returned 0x3f [0099.014] SetErrorMode (uMode=0x1) returned 0x0 [0099.014] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\*", lpFindFileData=0x12d530 | out: lpFindFileData=0x12d530*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51cc30d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d05ead0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1af3b6b0 [0099.362] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51cc30d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d05ead0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0099.362] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf17d4300, ftCreationTime.dwHighDateTime=0x1cab7f1, ftLastAccessTime.dwLowDateTime=0x6041aaf0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf17d4300, ftLastWriteTime.dwHighDateTime=0x1cab7f1, nFileSizeHigh=0x0, nFileSizeLow=0xd613, dwReserved0=0x0, dwReserved1=0x0, cFileName="COMPASS.ELM", cAlternateFileName="")) returned 1 [0099.362] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x51cc30d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x1e6, dwReserved0=0x0, dwReserved1=0x0, cFileName="COMPASS.INF", cAlternateFileName="")) returned 1 [0099.362] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x50d, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1 [0099.362] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad12690, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x505f, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1 [0099.362] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad12690, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x505f, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0 [0099.362] FindClose (in: hFindFile=0x1af3b6b0 | out: hFindFile=0x1af3b6b0) returned 1 [0099.362] SetErrorMode (uMode=0x0) returned 0x1 [0099.363] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\THMBNAIL.PNG", nBufferLength=0x105, lpBuffer=0x12d5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\THMBNAIL.PNG", lpFilePart=0x0) returned 0x4c [0099.363] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\THMBNAIL.PNG", nBufferLength=0x105, lpBuffer=0x12d590, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\THMBNAIL.PNG", lpFilePart=0x0) returned 0x4c [0099.363] SetErrorMode (uMode=0x1) returned 0x0 [0099.363] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\compass\\thmbnail.png"), fInfoLevelId=0x0, lpFileInformation=0x12d810 | out: lpFileInformation=0x12d810*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad12690, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x505f)) returned 1 [0099.364] SetErrorMode (uMode=0x0) returned 0x1 [0099.364] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\THMBNAIL.PNG", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\THMBNAIL.PNG", lpFilePart=0x0) returned 0x4c [0099.364] SetErrorMode (uMode=0x1) returned 0x0 [0099.364] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\compass\\thmbnail.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1f0 [0099.364] SetErrorMode (uMode=0x0) returned 0x1 [0099.364] GetFileType (hFile=0x1f0) returned 0x1 [0099.364] GetFileSize (in: hFile=0x1f0, lpFileSizeHigh=0x12d8c8 | out: lpFileSizeHigh=0x12d8c8*=0x0) returned 0x505f [0099.364] ReadFile (in: hFile=0x1f0, lpBuffer=0x271b3f8, nNumberOfBytesToRead=0x505f, lpNumberOfBytesRead=0x12d7a8, lpOverlapped=0x0 | out: lpBuffer=0x271b3f8*, lpNumberOfBytesRead=0x12d7a8*=0x505f, lpOverlapped=0x0) returned 1 [0099.380] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\THMBNAIL.PNG", nBufferLength=0x105, lpBuffer=0x12d270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\THMBNAIL.PNG", lpFilePart=0x0) returned 0x4c [0099.380] SetErrorMode (uMode=0x1) returned 0x0 [0099.380] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\compass\\thmbnail.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1f0 [0099.381] SetErrorMode (uMode=0x0) returned 0x1 [0099.381] GetFileType (hFile=0x1f0) returned 0x1 [0099.381] WriteFile (in: hFile=0x1f0, lpBuffer=0x28143f0*, nNumberOfBytesToWrite=0x5060, lpNumberOfBytesWritten=0x12d828, lpOverlapped=0x0 | out: lpBuffer=0x28143f0*, lpNumberOfBytesWritten=0x12d828*=0x5060, lpOverlapped=0x0) returned 1 [0099.383] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\THMBNAIL.PNG", nBufferLength=0x105, lpBuffer=0x12d500, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\THMBNAIL.PNG", lpFilePart=0x0) returned 0x4c [0099.383] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\THMBNAIL.PNG.encryptedS", nBufferLength=0x105, lpBuffer=0x12d500, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\THMBNAIL.PNG.encryptedS", lpFilePart=0x0) returned 0x57 [0099.383] SetErrorMode (uMode=0x1) returned 0x0 [0099.383] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\compass\\thmbnail.png"), fInfoLevelId=0x0, lpFileInformation=0x12d750 | out: lpFileInformation=0x12d750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad12690, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5b4eda90, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x5060)) returned 1 [0099.383] SetErrorMode (uMode=0x0) returned 0x1 [0099.383] MoveFileW (lpExistingFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\compass\\thmbnail.png"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\THMBNAIL.PNG.encryptedS" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\compass\\thmbnail.png.encrypteds")) returned 1 [0099.384] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\Decrypt Instructions.txt", nBufferLength=0x105, lpBuffer=0x12d240, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\Decrypt Instructions.txt", lpFilePart=0x0) returned 0x58 [0099.384] SetErrorMode (uMode=0x1) returned 0x0 [0099.384] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\Decrypt Instructions.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\compass\\decrypt instructions.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1f0 [0099.386] SetErrorMode (uMode=0x0) returned 0x1 [0099.386] GetFileType (hFile=0x1f0) returned 0x1 [0099.386] WriteFile (in: hFile=0x1f0, lpBuffer=0x281d628*, nNumberOfBytesToWrite=0x773, lpNumberOfBytesWritten=0x12d7a8, lpOverlapped=0x0 | out: lpBuffer=0x281d628*, lpNumberOfBytesWritten=0x12d7a8*=0x773, lpOverlapped=0x0) returned 1 [0099.387] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS", nBufferLength=0x105, lpBuffer=0x12d430, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS", lpFilePart=0x0) returned 0x3f [0099.387] SetErrorMode (uMode=0x1) returned 0x0 [0099.387] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\*", lpFindFileData=0x12d5d0 | out: lpFindFileData=0x12d5d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51cc30d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x5b4eda90, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x5b4eda90, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1af3b6b0 [0099.388] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51cc30d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x5b4eda90, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x5b4eda90, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0099.388] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf17d4300, ftCreationTime.dwHighDateTime=0x1cab7f1, ftLastAccessTime.dwLowDateTime=0x6041aaf0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf17d4300, ftLastWriteTime.dwHighDateTime=0x1cab7f1, nFileSizeHigh=0x0, nFileSizeLow=0xd613, dwReserved0=0x0, dwReserved1=0x0, cFileName="COMPASS.ELM", cAlternateFileName="")) returned 1 [0099.388] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x51cc30d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x1e6, dwReserved0=0x0, dwReserved1=0x0, cFileName="COMPASS.INF", cAlternateFileName="")) returned 1 [0099.388] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5b4eda90, ftCreationTime.dwHighDateTime=0x1d5e786, ftLastAccessTime.dwLowDateTime=0x5b4eda90, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x5b4eda90, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x773, dwReserved0=0x0, dwReserved1=0x0, cFileName="Decrypt Instructions.txt", cAlternateFileName="DECRYP~1.TXT")) returned 1 [0099.388] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x50d, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1 [0099.388] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad12690, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5b4eda90, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x5060, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG.encryptedS", cAlternateFileName="THMBNA~1.ENC")) returned 1 [0099.388] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad12690, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5b4eda90, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x5060, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG.encryptedS", cAlternateFileName="THMBNA~1.ENC")) returned 0 [0099.388] FindClose (in: hFindFile=0x1af3b6b0 | out: hFindFile=0x1af3b6b0) returned 1 [0099.388] SetErrorMode (uMode=0x0) returned 0x1 [0099.388] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE", nBufferLength=0x105, lpBuffer=0x12d390, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE", lpFilePart=0x0) returned 0x40 [0099.389] SetErrorMode (uMode=0x1) returned 0x0 [0099.389] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\*", lpFindFileData=0x12d530 | out: lpFindFileData=0x12d530*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51cc30d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d05ead0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1af3b6b0 [0099.389] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51cc30d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d05ead0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0099.389] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf2ae7000, ftCreationTime.dwHighDateTime=0x1cab7f1, ftLastAccessTime.dwLowDateTime=0x51cc30d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf2ae7000, ftLastWriteTime.dwHighDateTime=0x1cab7f1, nFileSizeHigh=0x0, nFileSizeLow=0xb1d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="CONCRETE.ELM", cAlternateFileName="")) returned 1 [0099.389] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x60440c50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x1e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CONCRETE.INF", cAlternateFileName="")) returned 1 [0099.389] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x507, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1 [0099.389] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad12690, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x6fb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1 [0099.389] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad12690, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x6fb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0 [0099.389] FindClose (in: hFindFile=0x1af3b6b0 | out: hFindFile=0x1af3b6b0) returned 1 [0099.390] SetErrorMode (uMode=0x0) returned 0x1 [0099.391] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\THMBNAIL.PNG", nBufferLength=0x105, lpBuffer=0x12d5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\THMBNAIL.PNG", lpFilePart=0x0) returned 0x4d [0099.391] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\THMBNAIL.PNG", nBufferLength=0x105, lpBuffer=0x12d590, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\THMBNAIL.PNG", lpFilePart=0x0) returned 0x4d [0099.391] SetErrorMode (uMode=0x1) returned 0x0 [0099.391] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\concrete\\thmbnail.png"), fInfoLevelId=0x0, lpFileInformation=0x12d810 | out: lpFileInformation=0x12d810*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad12690, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x6fb3)) returned 1 [0099.391] SetErrorMode (uMode=0x0) returned 0x1 [0099.391] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\THMBNAIL.PNG", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\THMBNAIL.PNG", lpFilePart=0x0) returned 0x4d [0099.391] SetErrorMode (uMode=0x1) returned 0x0 [0099.392] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\concrete\\thmbnail.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1f0 [0099.392] SetErrorMode (uMode=0x0) returned 0x1 [0099.392] GetFileType (hFile=0x1f0) returned 0x1 [0099.392] GetFileSize (in: hFile=0x1f0, lpFileSizeHigh=0x12d8c8 | out: lpFileSizeHigh=0x12d8c8*=0x0) returned 0x6fb3 [0099.392] ReadFile (in: hFile=0x1f0, lpBuffer=0x2821418, nNumberOfBytesToRead=0x6fb3, lpNumberOfBytesRead=0x12d7a8, lpOverlapped=0x0 | out: lpBuffer=0x2821418*, lpNumberOfBytesRead=0x12d7a8*=0x6fb3, lpOverlapped=0x0) returned 1 [0099.512] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\THMBNAIL.PNG", nBufferLength=0x105, lpBuffer=0x12d270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\THMBNAIL.PNG", lpFilePart=0x0) returned 0x4d [0099.512] SetErrorMode (uMode=0x1) returned 0x0 [0099.512] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\concrete\\thmbnail.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1f0 [0099.514] SetErrorMode (uMode=0x0) returned 0x1 [0099.514] GetFileType (hFile=0x1f0) returned 0x1 [0099.514] WriteFile (in: hFile=0x1f0, lpBuffer=0x2735c88*, nNumberOfBytesToWrite=0x6fc0, lpNumberOfBytesWritten=0x12d828, lpOverlapped=0x0 | out: lpBuffer=0x2735c88*, lpNumberOfBytesWritten=0x12d828*=0x6fc0, lpOverlapped=0x0) returned 1 [0099.516] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\THMBNAIL.PNG", nBufferLength=0x105, lpBuffer=0x12d500, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\THMBNAIL.PNG", lpFilePart=0x0) returned 0x4d [0099.516] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\THMBNAIL.PNG.encryptedS", nBufferLength=0x105, lpBuffer=0x12d500, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\THMBNAIL.PNG.encryptedS", lpFilePart=0x0) returned 0x58 [0099.516] SetErrorMode (uMode=0x1) returned 0x0 [0099.516] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\concrete\\thmbnail.png"), fInfoLevelId=0x0, lpFileInformation=0x12d750 | out: lpFileInformation=0x12d750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad12690, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5b61e590, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x6fc0)) returned 1 [0099.516] SetErrorMode (uMode=0x0) returned 0x1 [0099.516] MoveFileW (lpExistingFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\concrete\\thmbnail.png"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\THMBNAIL.PNG.encryptedS" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\concrete\\thmbnail.png.encrypteds")) returned 1 [0099.518] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\Decrypt Instructions.txt", nBufferLength=0x105, lpBuffer=0x12d240, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\Decrypt Instructions.txt", lpFilePart=0x0) returned 0x59 [0099.518] SetErrorMode (uMode=0x1) returned 0x0 [0099.518] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\Decrypt Instructions.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\concrete\\decrypt instructions.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1f0 [0099.521] SetErrorMode (uMode=0x0) returned 0x1 [0099.521] GetFileType (hFile=0x1f0) returned 0x1 [0099.521] WriteFile (in: hFile=0x1f0, lpBuffer=0x2740e30*, nNumberOfBytesToWrite=0x773, lpNumberOfBytesWritten=0x12d7a8, lpOverlapped=0x0 | out: lpBuffer=0x2740e30*, lpNumberOfBytesWritten=0x12d7a8*=0x773, lpOverlapped=0x0) returned 1 [0099.523] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE", nBufferLength=0x105, lpBuffer=0x12d430, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE", lpFilePart=0x0) returned 0x40 [0099.523] SetErrorMode (uMode=0x1) returned 0x0 [0099.523] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\*", lpFindFileData=0x12d5d0 | out: lpFindFileData=0x12d5d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51cc30d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x5b61e590, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x5b61e590, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1af3b6b0 [0099.523] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51cc30d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x5b61e590, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x5b61e590, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0099.523] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf2ae7000, ftCreationTime.dwHighDateTime=0x1cab7f1, ftLastAccessTime.dwLowDateTime=0x51cc30d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf2ae7000, ftLastWriteTime.dwHighDateTime=0x1cab7f1, nFileSizeHigh=0x0, nFileSizeLow=0xb1d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="CONCRETE.ELM", cAlternateFileName="")) returned 1 [0099.524] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x60440c50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x1e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CONCRETE.INF", cAlternateFileName="")) returned 1 [0099.524] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5b61e590, ftCreationTime.dwHighDateTime=0x1d5e786, ftLastAccessTime.dwLowDateTime=0x5b61e590, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x5b61e590, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x773, dwReserved0=0x0, dwReserved1=0x0, cFileName="Decrypt Instructions.txt", cAlternateFileName="DECRYP~1.TXT")) returned 1 [0099.524] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x507, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1 [0099.524] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad12690, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5b61e590, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x6fc0, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG.encryptedS", cAlternateFileName="THMBNA~1.ENC")) returned 1 [0099.524] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad12690, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5b61e590, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x6fc0, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG.encryptedS", cAlternateFileName="THMBNA~1.ENC")) returned 0 [0099.524] FindClose (in: hFindFile=0x1af3b6b0 | out: hFindFile=0x1af3b6b0) returned 1 [0099.524] SetErrorMode (uMode=0x0) returned 0x1 [0099.524] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE", nBufferLength=0x105, lpBuffer=0x12d390, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE", lpFilePart=0x0) returned 0x40 [0099.524] SetErrorMode (uMode=0x1) returned 0x0 [0099.524] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\*", lpFindFileData=0x12d530 | out: lpFindFileData=0x12d530*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a6f8e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6073a7d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6073a7d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1af3b6b0 [0099.694] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a6f8e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6073a7d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6073a7d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0099.694] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf641f700, ftCreationTime.dwHighDateTime=0x1cab7f1, ftLastAccessTime.dwLowDateTime=0x6073a7d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf641f700, ftLastWriteTime.dwHighDateTime=0x1cab7f1, nFileSizeHigh=0x0, nFileSizeLow=0x116dc, dwReserved0=0x0, dwReserved1=0x0, cFileName="DEEPBLUE.ELM", cAlternateFileName="")) returned 1 [0099.694] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6073a7d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x239, dwReserved0=0x0, dwReserved1=0x0, cFileName="DEEPBLUE.INF", cAlternateFileName="")) returned 1 [0099.694] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5a6f8e30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0xf75, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1 [0099.695] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad12690, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x81fd, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1 [0099.695] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad12690, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x81fd, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0 [0099.695] FindClose (in: hFindFile=0x1af3b6b0 | out: hFindFile=0x1af3b6b0) returned 1 [0099.695] SetErrorMode (uMode=0x0) returned 0x1 [0099.696] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\THMBNAIL.PNG", nBufferLength=0x105, lpBuffer=0x12d5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\THMBNAIL.PNG", lpFilePart=0x0) returned 0x4d [0099.696] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\THMBNAIL.PNG", nBufferLength=0x105, lpBuffer=0x12d590, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\THMBNAIL.PNG", lpFilePart=0x0) returned 0x4d [0099.696] SetErrorMode (uMode=0x1) returned 0x0 [0099.696] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\deepblue\\thmbnail.png"), fInfoLevelId=0x0, lpFileInformation=0x12d810 | out: lpFileInformation=0x12d810*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad12690, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x81fd)) returned 1 [0100.511] SetErrorMode (uMode=0x0) returned 0x1 [0100.511] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\THMBNAIL.PNG", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\THMBNAIL.PNG", lpFilePart=0x0) returned 0x4d [0100.511] SetErrorMode (uMode=0x1) returned 0x0 [0100.511] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\deepblue\\thmbnail.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1f0 [0100.512] SetErrorMode (uMode=0x0) returned 0x1 [0100.512] GetFileType (hFile=0x1f0) returned 0x1 [0100.512] GetFileSize (in: hFile=0x1f0, lpFileSizeHigh=0x12d8c8 | out: lpFileSizeHigh=0x12d8c8*=0x0) returned 0x81fd [0100.512] ReadFile (in: hFile=0x1f0, lpBuffer=0x2744c40, nNumberOfBytesToRead=0x81fd, lpNumberOfBytesRead=0x12d7a8, lpOverlapped=0x0 | out: lpBuffer=0x2744c40*, lpNumberOfBytesRead=0x12d7a8*=0x81fd, lpOverlapped=0x0) returned 1 [0100.713] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\THMBNAIL.PNG", nBufferLength=0x105, lpBuffer=0x12d270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\THMBNAIL.PNG", lpFilePart=0x0) returned 0x4d [0100.713] SetErrorMode (uMode=0x1) returned 0x0 [0100.713] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\deepblue\\thmbnail.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1f0 [0100.715] SetErrorMode (uMode=0x0) returned 0x1 [0100.715] GetFileType (hFile=0x1f0) returned 0x1 [0100.715] WriteFile (in: hFile=0x1f0, lpBuffer=0x284d458*, nNumberOfBytesToWrite=0x8200, lpNumberOfBytesWritten=0x12d828, lpOverlapped=0x0 | out: lpBuffer=0x284d458*, lpNumberOfBytesWritten=0x12d828*=0x8200, lpOverlapped=0x0) returned 1 [0100.717] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\THMBNAIL.PNG", nBufferLength=0x105, lpBuffer=0x12d500, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\THMBNAIL.PNG", lpFilePart=0x0) returned 0x4d [0100.717] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\THMBNAIL.PNG.encryptedS", nBufferLength=0x105, lpBuffer=0x12d500, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\THMBNAIL.PNG.encryptedS", lpFilePart=0x0) returned 0x58 [0100.717] SetErrorMode (uMode=0x1) returned 0x0 [0100.717] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\deepblue\\thmbnail.png"), fInfoLevelId=0x0, lpFileInformation=0x12d750 | out: lpFileInformation=0x12d750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad12690, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5c192f70, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x8200)) returned 1 [0100.717] SetErrorMode (uMode=0x0) returned 0x1 [0100.717] MoveFileW (lpExistingFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\deepblue\\thmbnail.png"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\THMBNAIL.PNG.encryptedS" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\deepblue\\thmbnail.png.encrypteds")) returned 1 [0100.718] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\Decrypt Instructions.txt", nBufferLength=0x105, lpBuffer=0x12d240, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\Decrypt Instructions.txt", lpFilePart=0x0) returned 0x59 [0100.718] SetErrorMode (uMode=0x1) returned 0x0 [0100.718] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\Decrypt Instructions.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\deepblue\\decrypt instructions.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1f0 [0100.722] SetErrorMode (uMode=0x0) returned 0x1 [0100.722] GetFileType (hFile=0x1f0) returned 0x1 [0100.722] WriteFile (in: hFile=0x1f0, lpBuffer=0x2859840*, nNumberOfBytesToWrite=0x773, lpNumberOfBytesWritten=0x12d7a8, lpOverlapped=0x0 | out: lpBuffer=0x2859840*, lpNumberOfBytesWritten=0x12d7a8*=0x773, lpOverlapped=0x0) returned 1 [0100.724] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE", nBufferLength=0x105, lpBuffer=0x12d430, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE", lpFilePart=0x0) returned 0x40 [0100.724] SetErrorMode (uMode=0x1) returned 0x0 [0100.724] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\*", lpFindFileData=0x12d5d0 | out: lpFindFileData=0x12d5d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a6f8e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x5c192f70, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x5c192f70, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1af3b6b0 [0100.724] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a6f8e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x5c192f70, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x5c192f70, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0100.724] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5c192f70, ftCreationTime.dwHighDateTime=0x1d5e786, ftLastAccessTime.dwLowDateTime=0x5c192f70, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x5c192f70, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x773, dwReserved0=0x0, dwReserved1=0x0, cFileName="Decrypt Instructions.txt", cAlternateFileName="DECRYP~1.TXT")) returned 1 [0100.724] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf641f700, ftCreationTime.dwHighDateTime=0x1cab7f1, ftLastAccessTime.dwLowDateTime=0x6073a7d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf641f700, ftLastWriteTime.dwHighDateTime=0x1cab7f1, nFileSizeHigh=0x0, nFileSizeLow=0x116dc, dwReserved0=0x0, dwReserved1=0x0, cFileName="DEEPBLUE.ELM", cAlternateFileName="")) returned 1 [0100.724] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6073a7d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x239, dwReserved0=0x0, dwReserved1=0x0, cFileName="DEEPBLUE.INF", cAlternateFileName="")) returned 1 [0100.724] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5a6f8e30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0xf75, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1 [0100.724] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad12690, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5c192f70, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x8200, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG.encryptedS", cAlternateFileName="THMBNA~1.ENC")) returned 1 [0100.724] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad12690, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5c192f70, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x8200, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG.encryptedS", cAlternateFileName="THMBNA~1.ENC")) returned 0 [0100.725] FindClose (in: hFindFile=0x1af3b6b0 | out: hFindFile=0x1af3b6b0) returned 1 [0100.725] SetErrorMode (uMode=0x0) returned 0x1 [0100.725] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO", nBufferLength=0x105, lpBuffer=0x12d390, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO", lpFilePart=0x0) returned 0x3c [0100.725] SetErrorMode (uMode=0x1) returned 0x0 [0100.725] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\*", lpFindFileData=0x12d530 | out: lpFindFileData=0x12d530*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a6f8e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x60891430, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x60891430, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1af3b6b0 [0101.913] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a6f8e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x60891430, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x60891430, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0101.913] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf8a45100, ftCreationTime.dwHighDateTime=0x1cab7f1, ftLastAccessTime.dwLowDateTime=0x60891430, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf8a45100, ftLastWriteTime.dwHighDateTime=0x1cab7f1, nFileSizeHigh=0x0, nFileSizeLow=0xb0ce, dwReserved0=0x0, dwReserved1=0x0, cFileName="ECHO.ELM", cAlternateFileName="")) returned 1 [0101.913] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x608b7590, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x1f7, dwReserved0=0x0, dwReserved1=0x0, cFileName="ECHO.INF", cAlternateFileName="")) returned 1 [0101.913] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5a6f8e30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x5ad, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1 [0101.913] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad12690, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x6212, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1 [0101.913] FindNextFileW (in: hFindFile=0x1af3b6b0, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad12690, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x6212, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0 [0101.913] FindClose (in: hFindFile=0x1af3b6b0 | out: hFindFile=0x1af3b6b0) returned 1 [0101.914] SetErrorMode (uMode=0x0) returned 0x1 [0101.915] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\THMBNAIL.PNG", nBufferLength=0x105, lpBuffer=0x12d5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\THMBNAIL.PNG", lpFilePart=0x0) returned 0x49 [0101.915] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\THMBNAIL.PNG", nBufferLength=0x105, lpBuffer=0x12d590, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\THMBNAIL.PNG", lpFilePart=0x0) returned 0x49 [0101.915] SetErrorMode (uMode=0x1) returned 0x0 [0101.915] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\echo\\thmbnail.png"), fInfoLevelId=0x0, lpFileInformation=0x12d810 | out: lpFileInformation=0x12d810*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad12690, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x6212)) returned 1 [0101.916] SetErrorMode (uMode=0x0) returned 0x1 [0101.916] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\THMBNAIL.PNG", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\THMBNAIL.PNG", lpFilePart=0x0) returned 0x49 [0101.916] SetErrorMode (uMode=0x1) returned 0x0 [0101.916] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\echo\\thmbnail.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1f0 [0101.916] SetErrorMode (uMode=0x0) returned 0x1 [0101.916] GetFileType (hFile=0x1f0) returned 0x1 [0101.916] GetFileSize (in: hFile=0x1f0, lpFileSizeHigh=0x12d8c8 | out: lpFileSizeHigh=0x12d8c8*=0x0) returned 0x6212 [0101.916] ReadFile (in: hFile=0x1f0, lpBuffer=0x285d5c0, nNumberOfBytesToRead=0x6212, lpNumberOfBytesRead=0x12d7a8, lpOverlapped=0x0 | out: lpBuffer=0x285d5c0*, lpNumberOfBytesRead=0x12d7a8*=0x6212, lpOverlapped=0x0) returned 1 [0101.951] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\THMBNAIL.PNG", nBufferLength=0x105, lpBuffer=0x12d270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\THMBNAIL.PNG", lpFilePart=0x0) returned 0x49 [0101.951] SetErrorMode (uMode=0x1) returned 0x0 [0101.951] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\echo\\thmbnail.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1f0 [0101.952] SetErrorMode (uMode=0x0) returned 0x1 [0101.953] GetFileType (hFile=0x1f0) returned 0x1 [0101.953] WriteFile (in: hFile=0x1f0, lpBuffer=0x274ae70*, nNumberOfBytesToWrite=0x6220, lpNumberOfBytesWritten=0x12d828, lpOverlapped=0x0 | out: lpBuffer=0x274ae70*, lpNumberOfBytesWritten=0x12d828*=0x6220, lpOverlapped=0x0) returned 1 [0101.955] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\THMBNAIL.PNG", nBufferLength=0x105, lpBuffer=0x12d500, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\THMBNAIL.PNG", lpFilePart=0x0) returned 0x49 [0101.955] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\THMBNAIL.PNG.encryptedS", nBufferLength=0x105, lpBuffer=0x12d500, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\THMBNAIL.PNG.encryptedS", lpFilePart=0x0) returned 0x54 [0101.955] SetErrorMode (uMode=0x1) returned 0x0 [0101.955] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\echo\\thmbnail.png"), fInfoLevelId=0x0, lpFileInformation=0x12d750 | out: lpFileInformation=0x12d750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad12690, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5cd53c10, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x6220)) returned 1 [0101.955] SetErrorMode (uMode=0x0) returned 0x1 [0101.955] MoveFileW (lpExistingFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\echo\\thmbnail.png"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\THMBNAIL.PNG.encryptedS" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\echo\\thmbnail.png.encrypteds")) returned 1 [0101.960] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\Decrypt Instructions.txt", nBufferLength=0x105, lpBuffer=0x12d240, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\Decrypt Instructions.txt", lpFilePart=0x0) returned 0x55 [0101.960] SetErrorMode (uMode=0x1) returned 0x0 [0101.960] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\Decrypt Instructions.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\echo\\decrypt instructions.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x280 [0102.020] SetErrorMode (uMode=0x0) returned 0x1 [0102.020] GetFileType (hFile=0x280) returned 0x1 [0102.020] WriteFile (in: hFile=0x280, lpBuffer=0x2755248*, nNumberOfBytesToWrite=0x773, lpNumberOfBytesWritten=0x12d7a8, lpOverlapped=0x0 | out: lpBuffer=0x2755248*, lpNumberOfBytesWritten=0x12d7a8*=0x773, lpOverlapped=0x0) returned 1 [0102.021] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO", nBufferLength=0x105, lpBuffer=0x12d430, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO", lpFilePart=0x0) returned 0x3c [0102.021] SetErrorMode (uMode=0x1) returned 0x0 [0102.021] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\*", lpFindFileData=0x12d5d0 | out: lpFindFileData=0x12d5d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a6f8e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x5ce122f0, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x5ce122f0, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x26b5c0 [0102.022] FindNextFileW (in: hFindFile=0x26b5c0, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a6f8e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x5ce122f0, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x5ce122f0, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0102.022] FindNextFileW (in: hFindFile=0x26b5c0, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5cd79d70, ftCreationTime.dwHighDateTime=0x1d5e786, ftLastAccessTime.dwLowDateTime=0x5cd79d70, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x5ce122f0, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x773, dwReserved0=0x0, dwReserved1=0x0, cFileName="Decrypt Instructions.txt", cAlternateFileName="DECRYP~1.TXT")) returned 1 [0102.022] FindNextFileW (in: hFindFile=0x26b5c0, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf8a45100, ftCreationTime.dwHighDateTime=0x1cab7f1, ftLastAccessTime.dwLowDateTime=0x60891430, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf8a45100, ftLastWriteTime.dwHighDateTime=0x1cab7f1, nFileSizeHigh=0x0, nFileSizeLow=0xb0ce, dwReserved0=0x0, dwReserved1=0x0, cFileName="ECHO.ELM", cAlternateFileName="")) returned 1 [0102.022] FindNextFileW (in: hFindFile=0x26b5c0, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x608b7590, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x1f7, dwReserved0=0x0, dwReserved1=0x0, cFileName="ECHO.INF", cAlternateFileName="")) returned 1 [0102.022] FindNextFileW (in: hFindFile=0x26b5c0, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5a6f8e30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x5ad, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1 [0102.022] FindNextFileW (in: hFindFile=0x26b5c0, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad12690, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5cd53c10, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x6220, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG.encryptedS", cAlternateFileName="THMBNA~1.ENC")) returned 1 [0102.022] FindNextFileW (in: hFindFile=0x26b5c0, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad12690, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5cd53c10, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x6220, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG.encryptedS", cAlternateFileName="THMBNA~1.ENC")) returned 0 [0102.022] FindClose (in: hFindFile=0x26b5c0 | out: hFindFile=0x26b5c0) returned 1 [0102.022] SetErrorMode (uMode=0x0) returned 0x1 [0102.022] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE", nBufferLength=0x105, lpBuffer=0x12d390, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE", lpFilePart=0x0) returned 0x3f [0102.022] SetErrorMode (uMode=0x1) returned 0x0 [0102.023] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\*", lpFindFileData=0x12d530 | out: lpFindFileData=0x12d530*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51e3fe90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d05ead0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x26b5c0 [0102.024] FindNextFileW (in: hFindFile=0x26b5c0, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51e3fe90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d05ead0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0102.024] FindNextFileW (in: hFindFile=0x26b5c0, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf9d57e00, ftCreationTime.dwHighDateTime=0x1cab7f1, ftLastAccessTime.dwLowDateTime=0x51eb22b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf9d57e00, ftLastWriteTime.dwHighDateTime=0x1cab7f1, nFileSizeHigh=0x0, nFileSizeLow=0x1cf31, dwReserved0=0x0, dwReserved1=0x0, cFileName="ECLIPSE.ELM", cAlternateFileName="")) returned 1 [0102.024] FindNextFileW (in: hFindFile=0x26b5c0, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x608b7590, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x253, dwReserved0=0x0, dwReserved1=0x0, cFileName="ECLIPSE.INF", cAlternateFileName="")) returned 1 [0102.024] FindNextFileW (in: hFindFile=0x26b5c0, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x543, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1 [0102.024] FindNextFileW (in: hFindFile=0x26b5c0, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x7e93, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1 [0102.024] FindNextFileW (in: hFindFile=0x26b5c0, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x7e93, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0 [0102.024] FindClose (in: hFindFile=0x26b5c0 | out: hFindFile=0x26b5c0) returned 1 [0102.024] SetErrorMode (uMode=0x0) returned 0x1 [0102.025] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\THMBNAIL.PNG", nBufferLength=0x105, lpBuffer=0x12d5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\THMBNAIL.PNG", lpFilePart=0x0) returned 0x4c [0102.025] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\THMBNAIL.PNG", nBufferLength=0x105, lpBuffer=0x12d590, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\THMBNAIL.PNG", lpFilePart=0x0) returned 0x4c [0102.026] SetErrorMode (uMode=0x1) returned 0x0 [0102.026] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\eclipse\\thmbnail.png"), fInfoLevelId=0x0, lpFileInformation=0x12d810 | out: lpFileInformation=0x12d810*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x7e93)) returned 1 [0102.026] SetErrorMode (uMode=0x0) returned 0x1 [0102.026] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\THMBNAIL.PNG", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\THMBNAIL.PNG", lpFilePart=0x0) returned 0x4c [0102.026] SetErrorMode (uMode=0x1) returned 0x0 [0102.026] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\eclipse\\thmbnail.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x280 [0102.026] SetErrorMode (uMode=0x0) returned 0x1 [0102.026] GetFileType (hFile=0x280) returned 0x1 [0102.028] GetFileSize (in: hFile=0x280, lpFileSizeHigh=0x12d8c8 | out: lpFileSizeHigh=0x12d8c8*=0x0) returned 0x7e93 [0102.028] ReadFile (in: hFile=0x280, lpBuffer=0x2758fe0, nNumberOfBytesToRead=0x7e93, lpNumberOfBytesRead=0x12d7a8, lpOverlapped=0x0 | out: lpBuffer=0x2758fe0*, lpNumberOfBytesRead=0x12d7a8*=0x7e93, lpOverlapped=0x0) returned 1 [0102.056] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\THMBNAIL.PNG", nBufferLength=0x105, lpBuffer=0x12d270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\THMBNAIL.PNG", lpFilePart=0x0) returned 0x4c [0102.056] SetErrorMode (uMode=0x1) returned 0x0 [0102.056] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\eclipse\\thmbnail.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x280 [0102.058] SetErrorMode (uMode=0x0) returned 0x1 [0102.058] GetFileType (hFile=0x280) returned 0x1 [0102.058] WriteFile (in: hFile=0x280, lpBuffer=0x2860718*, nNumberOfBytesToWrite=0x7ea0, lpNumberOfBytesWritten=0x12d828, lpOverlapped=0x0 | out: lpBuffer=0x2860718*, lpNumberOfBytesWritten=0x12d828*=0x7ea0, lpOverlapped=0x0) returned 1 [0102.060] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\THMBNAIL.PNG", nBufferLength=0x105, lpBuffer=0x12d500, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\THMBNAIL.PNG", lpFilePart=0x0) returned 0x4c [0102.060] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\THMBNAIL.PNG.encryptedS", nBufferLength=0x105, lpBuffer=0x12d500, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\THMBNAIL.PNG.encryptedS", lpFilePart=0x0) returned 0x57 [0102.060] SetErrorMode (uMode=0x1) returned 0x0 [0102.060] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\eclipse\\thmbnail.png"), fInfoLevelId=0x0, lpFileInformation=0x12d750 | out: lpFileInformation=0x12d750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5ce5e5b0, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x7ea0)) returned 1 [0102.060] SetErrorMode (uMode=0x0) returned 0x1 [0102.060] MoveFileW (lpExistingFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\eclipse\\thmbnail.png"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\THMBNAIL.PNG.encryptedS" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\eclipse\\thmbnail.png.encrypteds")) returned 1 [0102.061] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\Decrypt Instructions.txt", nBufferLength=0x105, lpBuffer=0x12d240, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\Decrypt Instructions.txt", lpFilePart=0x0) returned 0x58 [0102.061] SetErrorMode (uMode=0x1) returned 0x0 [0102.061] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\Decrypt Instructions.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\eclipse\\decrypt instructions.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x280 [0102.068] SetErrorMode (uMode=0x0) returned 0x1 [0102.068] GetFileType (hFile=0x280) returned 0x1 [0102.068] WriteFile (in: hFile=0x280, lpBuffer=0x286c790*, nNumberOfBytesToWrite=0x773, lpNumberOfBytesWritten=0x12d7a8, lpOverlapped=0x0 | out: lpBuffer=0x286c790*, lpNumberOfBytesWritten=0x12d7a8*=0x773, lpOverlapped=0x0) returned 1 [0102.069] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE", nBufferLength=0x105, lpBuffer=0x12d430, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE", lpFilePart=0x0) returned 0x3f [0102.069] SetErrorMode (uMode=0x1) returned 0x0 [0102.069] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\*", lpFindFileData=0x12d5d0 | out: lpFindFileData=0x12d5d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51e3fe90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x5ce84710, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x5ce84710, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x26b5c0 [0102.070] FindNextFileW (in: hFindFile=0x26b5c0, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51e3fe90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x5ce84710, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x5ce84710, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0102.070] FindNextFileW (in: hFindFile=0x26b5c0, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5ce5e5b0, ftCreationTime.dwHighDateTime=0x1d5e786, ftLastAccessTime.dwLowDateTime=0x5ce5e5b0, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x5ce84710, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x773, dwReserved0=0x0, dwReserved1=0x0, cFileName="Decrypt Instructions.txt", cAlternateFileName="DECRYP~1.TXT")) returned 1 [0102.070] FindNextFileW (in: hFindFile=0x26b5c0, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf9d57e00, ftCreationTime.dwHighDateTime=0x1cab7f1, ftLastAccessTime.dwLowDateTime=0x51eb22b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf9d57e00, ftLastWriteTime.dwHighDateTime=0x1cab7f1, nFileSizeHigh=0x0, nFileSizeLow=0x1cf31, dwReserved0=0x0, dwReserved1=0x0, cFileName="ECLIPSE.ELM", cAlternateFileName="")) returned 1 [0102.070] FindNextFileW (in: hFindFile=0x26b5c0, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x608b7590, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x253, dwReserved0=0x0, dwReserved1=0x0, cFileName="ECLIPSE.INF", cAlternateFileName="")) returned 1 [0102.070] FindNextFileW (in: hFindFile=0x26b5c0, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x543, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1 [0102.070] FindNextFileW (in: hFindFile=0x26b5c0, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5ce5e5b0, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x7ea0, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG.encryptedS", cAlternateFileName="THMBNA~1.ENC")) returned 1 [0102.070] FindNextFileW (in: hFindFile=0x26b5c0, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5ce5e5b0, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x7ea0, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG.encryptedS", cAlternateFileName="THMBNA~1.ENC")) returned 0 [0102.070] FindClose (in: hFindFile=0x26b5c0 | out: hFindFile=0x26b5c0) returned 1 [0102.070] SetErrorMode (uMode=0x0) returned 0x1 [0102.070] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE", nBufferLength=0x105, lpBuffer=0x12d390, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE", lpFilePart=0x0) returned 0x3c [0102.071] SetErrorMode (uMode=0x1) returned 0x0 [0102.071] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\*", lpFindFileData=0x12d530 | out: lpFindFileData=0x12d530*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51f70990, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x26b5c0 [0102.072] FindNextFileW (in: hFindFile=0x26b5c0, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51f70990, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0102.072] FindNextFileW (in: hFindFile=0x26b5c0, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfb06ab00, ftCreationTime.dwHighDateTime=0x1cab7f1, ftLastAccessTime.dwLowDateTime=0x51f70990, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfb06ab00, ftLastWriteTime.dwHighDateTime=0x1cab7f1, nFileSizeHigh=0x0, nFileSizeLow=0xb8f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="EDGE.ELM", cAlternateFileName="")) returned 1 [0102.072] FindNextFileW (in: hFindFile=0x26b5c0, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x51f70990, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x211, dwReserved0=0x0, dwReserved1=0x0, cFileName="EDGE.INF", cAlternateFileName="")) returned 1 [0102.072] FindNextFileW (in: hFindFile=0x26b5c0, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x543, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1 [0102.072] FindNextFileW (in: hFindFile=0x26b5c0, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x6722, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1 [0102.072] FindNextFileW (in: hFindFile=0x26b5c0, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x6722, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0 [0102.072] FindClose (in: hFindFile=0x26b5c0 | out: hFindFile=0x26b5c0) returned 1 [0102.072] SetErrorMode (uMode=0x0) returned 0x1 [0102.073] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\THMBNAIL.PNG", nBufferLength=0x105, lpBuffer=0x12d5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\THMBNAIL.PNG", lpFilePart=0x0) returned 0x49 [0102.074] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\THMBNAIL.PNG", nBufferLength=0x105, lpBuffer=0x12d590, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\THMBNAIL.PNG", lpFilePart=0x0) returned 0x49 [0102.074] SetErrorMode (uMode=0x1) returned 0x0 [0102.074] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\edge\\thmbnail.png"), fInfoLevelId=0x0, lpFileInformation=0x12d810 | out: lpFileInformation=0x12d810*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x6722)) returned 1 [0102.074] SetErrorMode (uMode=0x0) returned 0x1 [0102.074] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\THMBNAIL.PNG", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\THMBNAIL.PNG", lpFilePart=0x0) returned 0x49 [0102.074] SetErrorMode (uMode=0x1) returned 0x0 [0102.074] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\edge\\thmbnail.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x280 [0102.074] SetErrorMode (uMode=0x0) returned 0x1 [0102.075] GetFileType (hFile=0x280) returned 0x1 [0102.075] GetFileSize (in: hFile=0x280, lpFileSizeHigh=0x12d8c8 | out: lpFileSizeHigh=0x12d8c8*=0x0) returned 0x6722 [0102.075] ReadFile (in: hFile=0x280, lpBuffer=0x28704f0, nNumberOfBytesToRead=0x6722, lpNumberOfBytesRead=0x12d7a8, lpOverlapped=0x0 | out: lpBuffer=0x28704f0*, lpNumberOfBytesRead=0x12d7a8*=0x6722, lpOverlapped=0x0) returned 1 [0102.352] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\THMBNAIL.PNG", nBufferLength=0x105, lpBuffer=0x12d270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\THMBNAIL.PNG", lpFilePart=0x0) returned 0x49 [0102.353] SetErrorMode (uMode=0x1) returned 0x0 [0102.353] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\edge\\thmbnail.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x280 [0102.354] SetErrorMode (uMode=0x0) returned 0x1 [0102.354] GetFileType (hFile=0x280) returned 0x1 [0102.355] WriteFile (in: hFile=0x280, lpBuffer=0x2783eb8*, nNumberOfBytesToWrite=0x6730, lpNumberOfBytesWritten=0x12d828, lpOverlapped=0x0 | out: lpBuffer=0x2783eb8*, lpNumberOfBytesWritten=0x12d828*=0x6730, lpOverlapped=0x0) returned 1 [0102.357] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\THMBNAIL.PNG", nBufferLength=0x105, lpBuffer=0x12d500, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\THMBNAIL.PNG", lpFilePart=0x0) returned 0x49 [0102.357] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\THMBNAIL.PNG.encryptedS", nBufferLength=0x105, lpBuffer=0x12d500, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\THMBNAIL.PNG.encryptedS", lpFilePart=0x0) returned 0x54 [0102.357] SetErrorMode (uMode=0x1) returned 0x0 [0102.357] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\edge\\thmbnail.png"), fInfoLevelId=0x0, lpFileInformation=0x12d750 | out: lpFileInformation=0x12d750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5d131fd0, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x6730)) returned 1 [0102.357] SetErrorMode (uMode=0x0) returned 0x1 [0102.357] MoveFileW (lpExistingFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\edge\\thmbnail.png"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\THMBNAIL.PNG.encryptedS" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\edge\\thmbnail.png.encrypteds")) returned 1 [0102.358] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\Decrypt Instructions.txt", nBufferLength=0x105, lpBuffer=0x12d240, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\Decrypt Instructions.txt", lpFilePart=0x0) returned 0x55 [0102.358] SetErrorMode (uMode=0x1) returned 0x0 [0102.359] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\Decrypt Instructions.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\edge\\decrypt instructions.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x280 [0102.361] SetErrorMode (uMode=0x0) returned 0x1 [0102.361] GetFileType (hFile=0x280) returned 0x1 [0102.362] WriteFile (in: hFile=0x280, lpBuffer=0x278e7a0*, nNumberOfBytesToWrite=0x773, lpNumberOfBytesWritten=0x12d7a8, lpOverlapped=0x0 | out: lpBuffer=0x278e7a0*, lpNumberOfBytesWritten=0x12d7a8*=0x773, lpOverlapped=0x0) returned 1 [0102.363] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE", nBufferLength=0x105, lpBuffer=0x12d430, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE", lpFilePart=0x0) returned 0x3c [0102.363] SetErrorMode (uMode=0x1) returned 0x0 [0102.363] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\*", lpFindFileData=0x12d5d0 | out: lpFindFileData=0x12d5d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51f70990, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x5d131fd0, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x5d131fd0, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x26b5c0 [0102.363] FindNextFileW (in: hFindFile=0x26b5c0, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51f70990, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x5d131fd0, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x5d131fd0, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0102.364] FindNextFileW (in: hFindFile=0x26b5c0, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5d131fd0, ftCreationTime.dwHighDateTime=0x1d5e786, ftLastAccessTime.dwLowDateTime=0x5d131fd0, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x5d158130, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x773, dwReserved0=0x0, dwReserved1=0x0, cFileName="Decrypt Instructions.txt", cAlternateFileName="DECRYP~1.TXT")) returned 1 [0102.364] FindNextFileW (in: hFindFile=0x26b5c0, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfb06ab00, ftCreationTime.dwHighDateTime=0x1cab7f1, ftLastAccessTime.dwLowDateTime=0x51f70990, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfb06ab00, ftLastWriteTime.dwHighDateTime=0x1cab7f1, nFileSizeHigh=0x0, nFileSizeLow=0xb8f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="EDGE.ELM", cAlternateFileName="")) returned 1 [0102.364] FindNextFileW (in: hFindFile=0x26b5c0, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x51f70990, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x211, dwReserved0=0x0, dwReserved1=0x0, cFileName="EDGE.INF", cAlternateFileName="")) returned 1 [0102.364] FindNextFileW (in: hFindFile=0x26b5c0, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x543, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1 [0102.364] FindNextFileW (in: hFindFile=0x26b5c0, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5d131fd0, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x6730, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG.encryptedS", cAlternateFileName="THMBNA~1.ENC")) returned 1 [0102.364] FindNextFileW (in: hFindFile=0x26b5c0, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5d131fd0, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x6730, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG.encryptedS", cAlternateFileName="THMBNA~1.ENC")) returned 0 [0102.364] FindClose (in: hFindFile=0x26b5c0 | out: hFindFile=0x26b5c0) returned 1 [0102.364] SetErrorMode (uMode=0x0) returned 0x1 [0102.364] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN", nBufferLength=0x105, lpBuffer=0x12d390, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN", lpFilePart=0x0) returned 0x40 [0102.364] SetErrorMode (uMode=0x1) returned 0x0 [0102.364] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\*", lpFindFileData=0x12d530 | out: lpFindFileData=0x12d530*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51fe2db0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d05ead0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x26b5c0 [0102.376] FindNextFileW (in: hFindFile=0x26b5c0, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51fe2db0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d05ead0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0102.376] FindNextFileW (in: hFindFile=0x26b5c0, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfc37d800, ftCreationTime.dwHighDateTime=0x1cab7f1, ftLastAccessTime.dwLowDateTime=0x52008f10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfc37d800, ftLastWriteTime.dwHighDateTime=0x1cab7f1, nFileSizeHigh=0x0, nFileSizeLow=0x12dee, dwReserved0=0x0, dwReserved1=0x0, cFileName="EVRGREEN.ELM", cAlternateFileName="")) returned 1 [0102.376] FindNextFileW (in: hFindFile=0x26b5c0, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6099bdd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x223, dwReserved0=0x0, dwReserved1=0x0, cFileName="EVRGREEN.INF", cAlternateFileName="")) returned 1 [0102.376] FindNextFileW (in: hFindFile=0x26b5c0, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x54a, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1 [0102.376] FindNextFileW (in: hFindFile=0x26b5c0, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x7eb1, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1 [0102.376] FindNextFileW (in: hFindFile=0x26b5c0, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x7eb1, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0 [0102.376] FindClose (in: hFindFile=0x26b5c0 | out: hFindFile=0x26b5c0) returned 1 [0102.376] SetErrorMode (uMode=0x0) returned 0x1 [0102.378] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\THMBNAIL.PNG", nBufferLength=0x105, lpBuffer=0x12d5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\THMBNAIL.PNG", lpFilePart=0x0) returned 0x4d [0102.378] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\THMBNAIL.PNG", nBufferLength=0x105, lpBuffer=0x12d590, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\THMBNAIL.PNG", lpFilePart=0x0) returned 0x4d [0102.378] SetErrorMode (uMode=0x1) returned 0x0 [0102.378] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\evrgreen\\thmbnail.png"), fInfoLevelId=0x0, lpFileInformation=0x12d810 | out: lpFileInformation=0x12d810*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x7eb1)) returned 1 [0102.378] SetErrorMode (uMode=0x0) returned 0x1 [0102.378] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\THMBNAIL.PNG", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\THMBNAIL.PNG", lpFilePart=0x0) returned 0x4d [0102.378] SetErrorMode (uMode=0x1) returned 0x0 [0102.378] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\evrgreen\\thmbnail.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x280 [0102.379] SetErrorMode (uMode=0x0) returned 0x1 [0102.379] GetFileType (hFile=0x280) returned 0x1 [0102.379] GetFileSize (in: hFile=0x280, lpFileSizeHigh=0x12d8c8 | out: lpFileSizeHigh=0x12d8c8*=0x0) returned 0x7eb1 [0102.379] ReadFile (in: hFile=0x280, lpBuffer=0x2792570, nNumberOfBytesToRead=0x7eb1, lpNumberOfBytesRead=0x12d7a8, lpOverlapped=0x0 | out: lpBuffer=0x2792570*, lpNumberOfBytesRead=0x12d7a8*=0x7eb1, lpOverlapped=0x0) returned 1 [0102.403] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\THMBNAIL.PNG", nBufferLength=0x105, lpBuffer=0x12d270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\THMBNAIL.PNG", lpFilePart=0x0) returned 0x4d [0102.403] SetErrorMode (uMode=0x1) returned 0x0 [0102.403] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\evrgreen\\thmbnail.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x280 [0102.405] SetErrorMode (uMode=0x0) returned 0x1 [0102.405] GetFileType (hFile=0x280) returned 0x1 [0102.405] WriteFile (in: hFile=0x280, lpBuffer=0x2899d48*, nNumberOfBytesToWrite=0x7ec0, lpNumberOfBytesWritten=0x12d828, lpOverlapped=0x0 | out: lpBuffer=0x2899d48*, lpNumberOfBytesWritten=0x12d828*=0x7ec0, lpOverlapped=0x0) returned 1 [0102.407] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\THMBNAIL.PNG", nBufferLength=0x105, lpBuffer=0x12d500, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\THMBNAIL.PNG", lpFilePart=0x0) returned 0x4d [0102.407] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\THMBNAIL.PNG.encryptedS", nBufferLength=0x105, lpBuffer=0x12d500, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\THMBNAIL.PNG.encryptedS", lpFilePart=0x0) returned 0x58 [0102.407] SetErrorMode (uMode=0x1) returned 0x0 [0102.407] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\evrgreen\\thmbnail.png"), fInfoLevelId=0x0, lpFileInformation=0x12d750 | out: lpFileInformation=0x12d750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5d1a43f0, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x7ec0)) returned 1 [0102.407] SetErrorMode (uMode=0x0) returned 0x1 [0102.407] MoveFileW (lpExistingFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\evrgreen\\thmbnail.png"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\THMBNAIL.PNG.encryptedS" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\evrgreen\\thmbnail.png.encrypteds")) returned 1 [0102.412] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\Decrypt Instructions.txt", nBufferLength=0x105, lpBuffer=0x12d240, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\Decrypt Instructions.txt", lpFilePart=0x0) returned 0x59 [0102.412] SetErrorMode (uMode=0x1) returned 0x0 [0102.413] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\Decrypt Instructions.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\evrgreen\\decrypt instructions.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x31c [0102.419] SetErrorMode (uMode=0x0) returned 0x1 [0102.419] GetFileType (hFile=0x31c) returned 0x1 [0102.419] WriteFile (in: hFile=0x31c, lpBuffer=0x28a5df0*, nNumberOfBytesToWrite=0x773, lpNumberOfBytesWritten=0x12d7a8, lpOverlapped=0x0 | out: lpBuffer=0x28a5df0*, lpNumberOfBytesWritten=0x12d7a8*=0x773, lpOverlapped=0x0) returned 1 [0102.421] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN", nBufferLength=0x105, lpBuffer=0x12d430, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN", lpFilePart=0x0) returned 0x40 [0102.421] SetErrorMode (uMode=0x1) returned 0x0 [0102.421] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\*", lpFindFileData=0x12d5d0 | out: lpFindFileData=0x12d5d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51fe2db0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x5d1ca550, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x5d1ca550, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x26bc80 [0102.421] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51fe2db0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x5d1ca550, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x5d1ca550, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0102.422] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5d1ca550, ftCreationTime.dwHighDateTime=0x1d5e786, ftLastAccessTime.dwLowDateTime=0x5d1ca550, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x5d1ca550, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x773, dwReserved0=0x0, dwReserved1=0x0, cFileName="Decrypt Instructions.txt", cAlternateFileName="DECRYP~1.TXT")) returned 1 [0102.422] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfc37d800, ftCreationTime.dwHighDateTime=0x1cab7f1, ftLastAccessTime.dwLowDateTime=0x52008f10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfc37d800, ftLastWriteTime.dwHighDateTime=0x1cab7f1, nFileSizeHigh=0x0, nFileSizeLow=0x12dee, dwReserved0=0x0, dwReserved1=0x0, cFileName="EVRGREEN.ELM", cAlternateFileName="")) returned 1 [0102.422] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6099bdd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x223, dwReserved0=0x0, dwReserved1=0x0, cFileName="EVRGREEN.INF", cAlternateFileName="")) returned 1 [0102.422] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x54a, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1 [0102.422] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5d1a43f0, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x7ec0, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG.encryptedS", cAlternateFileName="THMBNA~1.ENC")) returned 1 [0102.422] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5d1a43f0, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x7ec0, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG.encryptedS", cAlternateFileName="THMBNA~1.ENC")) returned 0 [0102.422] FindClose (in: hFindFile=0x26bc80 | out: hFindFile=0x26bc80) returned 1 [0102.423] SetErrorMode (uMode=0x0) returned 0x1 [0102.423] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN", nBufferLength=0x105, lpBuffer=0x12d390, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN", lpFilePart=0x0) returned 0x40 [0102.423] SetErrorMode (uMode=0x1) returned 0x0 [0102.423] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\*", lpFindFileData=0x12d530 | out: lpFindFileData=0x12d530*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a6f8e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x60af2a30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x60af2a30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x26bc80 [0102.423] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a6f8e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x60af2a30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x60af2a30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0102.423] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfd690500, ftCreationTime.dwHighDateTime=0x1cab7f1, ftLastAccessTime.dwLowDateTime=0x60af2a30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfd690500, ftLastWriteTime.dwHighDateTime=0x1cab7f1, nFileSizeHigh=0x0, nFileSizeLow=0x19539, dwReserved0=0x0, dwReserved1=0x0, cFileName="EXPEDITN.ELM", cAlternateFileName="")) returned 1 [0102.424] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x60af2a30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x255, dwReserved0=0x0, dwReserved1=0x0, cFileName="EXPEDITN.INF", cAlternateFileName="")) returned 1 [0102.424] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5a6f8e30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x1400, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1 [0102.424] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0xed34, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1 [0102.424] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0xed34, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0 [0102.424] FindClose (in: hFindFile=0x26bc80 | out: hFindFile=0x26bc80) returned 1 [0102.424] SetErrorMode (uMode=0x0) returned 0x1 [0102.427] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\THMBNAIL.PNG", nBufferLength=0x105, lpBuffer=0x12d5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\THMBNAIL.PNG", lpFilePart=0x0) returned 0x4d [0102.427] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\THMBNAIL.PNG", nBufferLength=0x105, lpBuffer=0x12d590, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\THMBNAIL.PNG", lpFilePart=0x0) returned 0x4d [0102.427] SetErrorMode (uMode=0x1) returned 0x0 [0102.427] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\expeditn\\thmbnail.png"), fInfoLevelId=0x0, lpFileInformation=0x12d810 | out: lpFileInformation=0x12d810*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0xed34)) returned 1 [0102.430] SetErrorMode (uMode=0x0) returned 0x1 [0102.430] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\THMBNAIL.PNG", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\THMBNAIL.PNG", lpFilePart=0x0) returned 0x4d [0102.430] SetErrorMode (uMode=0x1) returned 0x0 [0102.430] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\expeditn\\thmbnail.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x31c [0102.430] SetErrorMode (uMode=0x0) returned 0x1 [0102.430] GetFileType (hFile=0x31c) returned 0x1 [0102.430] GetFileSize (in: hFile=0x31c, lpFileSizeHigh=0x12d8c8 | out: lpFileSizeHigh=0x12d8c8*=0x0) returned 0xed34 [0102.430] ReadFile (in: hFile=0x31c, lpBuffer=0x28a9c00, nNumberOfBytesToRead=0xed34, lpNumberOfBytesRead=0x12d7a8, lpOverlapped=0x0 | out: lpBuffer=0x28a9c00*, lpNumberOfBytesRead=0x12d7a8*=0xed34, lpOverlapped=0x0) returned 1 [0102.509] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\THMBNAIL.PNG", nBufferLength=0x105, lpBuffer=0x12d270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\THMBNAIL.PNG", lpFilePart=0x0) returned 0x4d [0102.509] SetErrorMode (uMode=0x1) returned 0x0 [0102.509] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\expeditn\\thmbnail.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x31c [0102.511] SetErrorMode (uMode=0x0) returned 0x1 [0102.511] GetFileType (hFile=0x31c) returned 0x1 [0102.511] WriteFile (in: hFile=0x31c, lpBuffer=0x27aaf18*, nNumberOfBytesToWrite=0xed40, lpNumberOfBytesWritten=0x12d828, lpOverlapped=0x0 | out: lpBuffer=0x27aaf18*, lpNumberOfBytesWritten=0x12d828*=0xed40, lpOverlapped=0x0) returned 1 [0102.514] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\THMBNAIL.PNG", nBufferLength=0x105, lpBuffer=0x12d500, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\THMBNAIL.PNG", lpFilePart=0x0) returned 0x4d [0102.514] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\THMBNAIL.PNG.encryptedS", nBufferLength=0x105, lpBuffer=0x12d500, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\THMBNAIL.PNG.encryptedS", lpFilePart=0x0) returned 0x58 [0102.514] SetErrorMode (uMode=0x1) returned 0x0 [0102.514] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\expeditn\\thmbnail.png"), fInfoLevelId=0x0, lpFileInformation=0x12d750 | out: lpFileInformation=0x12d750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5d2aed90, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0xed40)) returned 1 [0102.514] SetErrorMode (uMode=0x0) returned 0x1 [0102.514] MoveFileW (lpExistingFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\expeditn\\thmbnail.png"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\THMBNAIL.PNG.encryptedS" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\expeditn\\thmbnail.png.encrypteds")) returned 1 [0102.515] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\Decrypt Instructions.txt", nBufferLength=0x105, lpBuffer=0x12d240, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\Decrypt Instructions.txt", lpFilePart=0x0) returned 0x59 [0102.515] SetErrorMode (uMode=0x1) returned 0x0 [0102.515] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\Decrypt Instructions.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\expeditn\\decrypt instructions.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x31c [0102.520] SetErrorMode (uMode=0x0) returned 0x1 [0102.520] GetFileType (hFile=0x31c) returned 0x1 [0102.520] WriteFile (in: hFile=0x31c, lpBuffer=0x27bde40*, nNumberOfBytesToWrite=0x773, lpNumberOfBytesWritten=0x12d7a8, lpOverlapped=0x0 | out: lpBuffer=0x27bde40*, lpNumberOfBytesWritten=0x12d7a8*=0x773, lpOverlapped=0x0) returned 1 [0102.522] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN", nBufferLength=0x105, lpBuffer=0x12d430, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN", lpFilePart=0x0) returned 0x40 [0102.522] SetErrorMode (uMode=0x1) returned 0x0 [0102.522] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\*", lpFindFileData=0x12d5d0 | out: lpFindFileData=0x12d5d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a6f8e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x5d2d4ef0, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x5d2d4ef0, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x26bc80 [0102.522] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a6f8e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x5d2d4ef0, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x5d2d4ef0, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0102.522] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5d2aed90, ftCreationTime.dwHighDateTime=0x1d5e786, ftLastAccessTime.dwLowDateTime=0x5d2aed90, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x5d2d4ef0, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x773, dwReserved0=0x0, dwReserved1=0x0, cFileName="Decrypt Instructions.txt", cAlternateFileName="DECRYP~1.TXT")) returned 1 [0102.522] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfd690500, ftCreationTime.dwHighDateTime=0x1cab7f1, ftLastAccessTime.dwLowDateTime=0x60af2a30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfd690500, ftLastWriteTime.dwHighDateTime=0x1cab7f1, nFileSizeHigh=0x0, nFileSizeLow=0x19539, dwReserved0=0x0, dwReserved1=0x0, cFileName="EXPEDITN.ELM", cAlternateFileName="")) returned 1 [0102.522] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x60af2a30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x255, dwReserved0=0x0, dwReserved1=0x0, cFileName="EXPEDITN.INF", cAlternateFileName="")) returned 1 [0102.523] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5a6f8e30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x1400, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1 [0102.523] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5d2aed90, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0xed40, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG.encryptedS", cAlternateFileName="THMBNA~1.ENC")) returned 1 [0102.523] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5d2aed90, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0xed40, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG.encryptedS", cAlternateFileName="THMBNA~1.ENC")) returned 0 [0102.523] FindClose (in: hFindFile=0x26bc80 | out: hFindFile=0x26bc80) returned 1 [0102.523] SetErrorMode (uMode=0x0) returned 0x1 [0102.523] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE", nBufferLength=0x105, lpBuffer=0x12d390, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE", lpFilePart=0x0) returned 0x3b [0102.523] SetErrorMode (uMode=0x1) returned 0x0 [0102.523] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\*", lpFindFileData=0x12d530 | out: lpFindFileData=0x12d530*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a6f8e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x61cccf30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x61cccf30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x26bc80 [0103.113] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a6f8e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x61cccf30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x61cccf30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0103.113] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x35ee600, ftCreationTime.dwHighDateTime=0x1cab7f2, ftLastAccessTime.dwLowDateTime=0x61cccf30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x35ee600, ftLastWriteTime.dwHighDateTime=0x1cab7f2, nFileSizeHigh=0x0, nFileSizeLow=0x109d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ICE.ELM", cAlternateFileName="")) returned 1 [0103.113] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x61cccf30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x1ad, dwReserved0=0x0, dwReserved1=0x0, cFileName="ICE.INF", cAlternateFileName="")) returned 1 [0103.113] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5a6f8e30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x9f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1 [0103.113] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x4981, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1 [0103.113] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x4981, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0 [0103.113] FindClose (in: hFindFile=0x26bc80 | out: hFindFile=0x26bc80) returned 1 [0103.113] SetErrorMode (uMode=0x0) returned 0x1 [0103.115] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\THMBNAIL.PNG", nBufferLength=0x105, lpBuffer=0x12d5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\THMBNAIL.PNG", lpFilePart=0x0) returned 0x48 [0103.115] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\THMBNAIL.PNG", nBufferLength=0x105, lpBuffer=0x12d590, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\THMBNAIL.PNG", lpFilePart=0x0) returned 0x48 [0103.115] SetErrorMode (uMode=0x1) returned 0x0 [0103.115] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\ice\\thmbnail.png"), fInfoLevelId=0x0, lpFileInformation=0x12d810 | out: lpFileInformation=0x12d810*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x4981)) returned 1 [0103.115] SetErrorMode (uMode=0x0) returned 0x1 [0103.115] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\THMBNAIL.PNG", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\THMBNAIL.PNG", lpFilePart=0x0) returned 0x48 [0103.115] SetErrorMode (uMode=0x1) returned 0x0 [0103.116] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\ice\\thmbnail.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x31c [0103.116] SetErrorMode (uMode=0x0) returned 0x1 [0103.116] GetFileType (hFile=0x31c) returned 0x1 [0103.116] GetFileSize (in: hFile=0x31c, lpFileSizeHigh=0x12d8c8 | out: lpFileSizeHigh=0x12d8c8*=0x0) returned 0x4981 [0103.116] ReadFile (in: hFile=0x31c, lpBuffer=0x27c1b88, nNumberOfBytesToRead=0x4981, lpNumberOfBytesRead=0x12d7a8, lpOverlapped=0x0 | out: lpBuffer=0x27c1b88*, lpNumberOfBytesRead=0x12d7a8*=0x4981, lpOverlapped=0x0) returned 1 [0103.140] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\THMBNAIL.PNG", nBufferLength=0x105, lpBuffer=0x12d270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\THMBNAIL.PNG", lpFilePart=0x0) returned 0x48 [0103.140] SetErrorMode (uMode=0x1) returned 0x0 [0103.140] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\ice\\thmbnail.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x31c [0103.142] SetErrorMode (uMode=0x0) returned 0x1 [0103.142] GetFileType (hFile=0x31c) returned 0x1 [0103.142] WriteFile (in: hFile=0x31c, lpBuffer=0x28b8970*, nNumberOfBytesToWrite=0x4990, lpNumberOfBytesWritten=0x12d828, lpOverlapped=0x0 | out: lpBuffer=0x28b8970*, lpNumberOfBytesWritten=0x12d828*=0x4990, lpOverlapped=0x0) returned 1 [0103.144] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\THMBNAIL.PNG", nBufferLength=0x105, lpBuffer=0x12d500, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\THMBNAIL.PNG", lpFilePart=0x0) returned 0x48 [0103.144] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\THMBNAIL.PNG.encryptedS", nBufferLength=0x105, lpBuffer=0x12d500, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\THMBNAIL.PNG.encryptedS", lpFilePart=0x0) returned 0x53 [0103.144] SetErrorMode (uMode=0x1) returned 0x0 [0103.144] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\ice\\thmbnail.png"), fInfoLevelId=0x0, lpFileInformation=0x12d750 | out: lpFileInformation=0x12d750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5d8c85f0, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x4990)) returned 1 [0103.144] SetErrorMode (uMode=0x0) returned 0x1 [0103.144] MoveFileW (lpExistingFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\ice\\thmbnail.png"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\THMBNAIL.PNG.encryptedS" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\ice\\thmbnail.png.encrypteds")) returned 1 [0103.145] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\Decrypt Instructions.txt", nBufferLength=0x105, lpBuffer=0x12d240, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\Decrypt Instructions.txt", lpFilePart=0x0) returned 0x54 [0103.145] SetErrorMode (uMode=0x1) returned 0x0 [0103.145] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\Decrypt Instructions.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\ice\\decrypt instructions.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x31c [0103.155] SetErrorMode (uMode=0x0) returned 0x1 [0103.155] GetFileType (hFile=0x31c) returned 0x1 [0103.155] WriteFile (in: hFile=0x31c, lpBuffer=0x28c14a8*, nNumberOfBytesToWrite=0x773, lpNumberOfBytesWritten=0x12d7a8, lpOverlapped=0x0 | out: lpBuffer=0x28c14a8*, lpNumberOfBytesWritten=0x12d7a8*=0x773, lpOverlapped=0x0) returned 1 [0103.157] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE", nBufferLength=0x105, lpBuffer=0x12d430, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE", lpFilePart=0x0) returned 0x3b [0103.157] SetErrorMode (uMode=0x1) returned 0x0 [0103.157] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\*", lpFindFileData=0x12d5d0 | out: lpFindFileData=0x12d5d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a6f8e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x5d8c85f0, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x5d8c85f0, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x26bc80 [0103.157] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a6f8e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x5d8c85f0, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x5d8c85f0, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0103.157] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5d8c85f0, ftCreationTime.dwHighDateTime=0x1d5e786, ftLastAccessTime.dwLowDateTime=0x5d8c85f0, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x5d8c85f0, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x773, dwReserved0=0x0, dwReserved1=0x0, cFileName="Decrypt Instructions.txt", cAlternateFileName="DECRYP~1.TXT")) returned 1 [0103.157] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x35ee600, ftCreationTime.dwHighDateTime=0x1cab7f2, ftLastAccessTime.dwLowDateTime=0x61cccf30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x35ee600, ftLastWriteTime.dwHighDateTime=0x1cab7f2, nFileSizeHigh=0x0, nFileSizeLow=0x109d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ICE.ELM", cAlternateFileName="")) returned 1 [0103.157] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x61cccf30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x1ad, dwReserved0=0x0, dwReserved1=0x0, cFileName="ICE.INF", cAlternateFileName="")) returned 1 [0103.158] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5a6f8e30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x9f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1 [0103.158] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5d8c85f0, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x4990, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG.encryptedS", cAlternateFileName="THMBNA~1.ENC")) returned 1 [0103.158] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5d8c85f0, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x4990, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG.encryptedS", cAlternateFileName="THMBNA~1.ENC")) returned 0 [0103.158] FindClose (in: hFindFile=0x26bc80 | out: hFindFile=0x26bc80) returned 1 [0103.158] SetErrorMode (uMode=0x0) returned 0x1 [0103.158] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST", nBufferLength=0x105, lpBuffer=0x12d390, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST", lpFilePart=0x0) returned 0x3e [0103.158] SetErrorMode (uMode=0x1) returned 0x0 [0103.158] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\*", lpFindFileData=0x12d530 | out: lpFindFileData=0x12d530*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x539538d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d489150, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x26bc80 [0103.202] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x539538d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d489150, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0103.202] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4901300, ftCreationTime.dwHighDateTime=0x1cab7f2, ftLastAccessTime.dwLowDateTime=0x539538d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x4901300, ftLastWriteTime.dwHighDateTime=0x1cab7f2, nFileSizeHigh=0x0, nFileSizeLow=0x184e9, dwReserved0=0x0, dwReserved1=0x0, cFileName="INDUST.ELM", cAlternateFileName="")) returned 1 [0103.202] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x61cf3090, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x225, dwReserved0=0x0, dwReserved1=0x0, cFileName="INDUST.INF", cAlternateFileName="")) returned 1 [0103.202] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5a6f8e30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x143b, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1 [0103.202] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x8317, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1 [0103.202] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x8317, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0 [0103.203] FindClose (in: hFindFile=0x26bc80 | out: hFindFile=0x26bc80) returned 1 [0103.203] SetErrorMode (uMode=0x0) returned 0x1 [0103.204] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\THMBNAIL.PNG", nBufferLength=0x105, lpBuffer=0x12d5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\THMBNAIL.PNG", lpFilePart=0x0) returned 0x4b [0103.204] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\THMBNAIL.PNG", nBufferLength=0x105, lpBuffer=0x12d590, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\THMBNAIL.PNG", lpFilePart=0x0) returned 0x4b [0103.204] SetErrorMode (uMode=0x1) returned 0x0 [0103.204] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\indust\\thmbnail.png"), fInfoLevelId=0x0, lpFileInformation=0x12d810 | out: lpFileInformation=0x12d810*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x8317)) returned 1 [0103.205] SetErrorMode (uMode=0x0) returned 0x1 [0103.205] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\THMBNAIL.PNG", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\THMBNAIL.PNG", lpFilePart=0x0) returned 0x4b [0103.205] SetErrorMode (uMode=0x1) returned 0x0 [0103.205] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\indust\\thmbnail.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x31c [0103.205] SetErrorMode (uMode=0x0) returned 0x1 [0103.205] GetFileType (hFile=0x31c) returned 0x1 [0103.205] GetFileSize (in: hFile=0x31c, lpFileSizeHigh=0x12d8c8 | out: lpFileSizeHigh=0x12d8c8*=0x0) returned 0x8317 [0103.205] ReadFile (in: hFile=0x31c, lpBuffer=0x28c5200, nNumberOfBytesToRead=0x8317, lpNumberOfBytesRead=0x12d7a8, lpOverlapped=0x0 | out: lpBuffer=0x28c5200*, lpNumberOfBytesRead=0x12d7a8*=0x8317, lpOverlapped=0x0) returned 1 [0103.296] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\THMBNAIL.PNG", nBufferLength=0x105, lpBuffer=0x12d270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\THMBNAIL.PNG", lpFilePart=0x0) returned 0x4b [0103.296] SetErrorMode (uMode=0x1) returned 0x0 [0103.297] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\indust\\thmbnail.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x31c [0103.298] SetErrorMode (uMode=0x0) returned 0x1 [0103.299] GetFileType (hFile=0x31c) returned 0x1 [0103.299] WriteFile (in: hFile=0x31c, lpBuffer=0x27d6f48*, nNumberOfBytesToWrite=0x8320, lpNumberOfBytesWritten=0x12d828, lpOverlapped=0x0 | out: lpBuffer=0x27d6f48*, lpNumberOfBytesWritten=0x12d828*=0x8320, lpOverlapped=0x0) returned 1 [0103.300] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\THMBNAIL.PNG", nBufferLength=0x105, lpBuffer=0x12d500, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\THMBNAIL.PNG", lpFilePart=0x0) returned 0x4b [0103.301] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\THMBNAIL.PNG.encryptedS", nBufferLength=0x105, lpBuffer=0x12d500, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\THMBNAIL.PNG.encryptedS", lpFilePart=0x0) returned 0x56 [0103.301] SetErrorMode (uMode=0x1) returned 0x0 [0103.301] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\indust\\thmbnail.png"), fInfoLevelId=0x0, lpFileInformation=0x12d750 | out: lpFileInformation=0x12d750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5da453b0, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x8320)) returned 1 [0103.301] SetErrorMode (uMode=0x0) returned 0x1 [0103.301] MoveFileW (lpExistingFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\indust\\thmbnail.png"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\THMBNAIL.PNG.encryptedS" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\indust\\thmbnail.png.encrypteds")) returned 1 [0103.303] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\Decrypt Instructions.txt", nBufferLength=0x105, lpBuffer=0x12d240, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\Decrypt Instructions.txt", lpFilePart=0x0) returned 0x57 [0103.303] SetErrorMode (uMode=0x1) returned 0x0 [0103.303] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\Decrypt Instructions.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\indust\\decrypt instructions.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x31c [0103.305] SetErrorMode (uMode=0x0) returned 0x1 [0103.305] GetFileType (hFile=0x31c) returned 0x1 [0103.306] WriteFile (in: hFile=0x31c, lpBuffer=0x27e3420*, nNumberOfBytesToWrite=0x773, lpNumberOfBytesWritten=0x12d7a8, lpOverlapped=0x0 | out: lpBuffer=0x27e3420*, lpNumberOfBytesWritten=0x12d7a8*=0x773, lpOverlapped=0x0) returned 1 [0103.307] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST", nBufferLength=0x105, lpBuffer=0x12d430, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST", lpFilePart=0x0) returned 0x3e [0103.307] SetErrorMode (uMode=0x1) returned 0x0 [0103.307] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\*", lpFindFileData=0x12d5d0 | out: lpFindFileData=0x12d5d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x539538d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x5da453b0, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x5da453b0, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x26bc80 [0103.307] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x539538d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x5da453b0, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x5da453b0, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0103.307] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5da453b0, ftCreationTime.dwHighDateTime=0x1d5e786, ftLastAccessTime.dwLowDateTime=0x5da453b0, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x5da453b0, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x773, dwReserved0=0x0, dwReserved1=0x0, cFileName="Decrypt Instructions.txt", cAlternateFileName="DECRYP~1.TXT")) returned 1 [0103.307] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4901300, ftCreationTime.dwHighDateTime=0x1cab7f2, ftLastAccessTime.dwLowDateTime=0x539538d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x4901300, ftLastWriteTime.dwHighDateTime=0x1cab7f2, nFileSizeHigh=0x0, nFileSizeLow=0x184e9, dwReserved0=0x0, dwReserved1=0x0, cFileName="INDUST.ELM", cAlternateFileName="")) returned 1 [0103.307] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x61cf3090, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x225, dwReserved0=0x0, dwReserved1=0x0, cFileName="INDUST.INF", cAlternateFileName="")) returned 1 [0103.308] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5a6f8e30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x143b, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1 [0103.308] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5da453b0, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x8320, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG.encryptedS", cAlternateFileName="THMBNA~1.ENC")) returned 1 [0103.308] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5da453b0, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x8320, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG.encryptedS", cAlternateFileName="THMBNA~1.ENC")) returned 0 [0103.308] FindClose (in: hFindFile=0x26bc80 | out: hFindFile=0x26bc80) returned 1 [0103.308] SetErrorMode (uMode=0x0) returned 0x1 [0103.308] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS", nBufferLength=0x105, lpBuffer=0x12d390, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS", lpFilePart=0x0) returned 0x3c [0103.308] SetErrorMode (uMode=0x1) returned 0x0 [0103.308] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\*", lpFindFileData=0x12d530 | out: lpFindFileData=0x12d530*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a6f8e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x65d5e3f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x65d5e3f0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x26bc80 [0103.308] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a6f8e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x65d5e3f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x65d5e3f0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0103.309] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f26d00, ftCreationTime.dwHighDateTime=0x1cab7f2, ftLastAccessTime.dwLowDateTime=0x65d5e3f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6f26d00, ftLastWriteTime.dwHighDateTime=0x1cab7f2, nFileSizeHigh=0x0, nFileSizeLow=0x1015d, dwReserved0=0x0, dwReserved1=0x0, cFileName="IRIS.ELM", cAlternateFileName="")) returned 1 [0103.309] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x65d5e3f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x1ce, dwReserved0=0x0, dwReserved1=0x0, cFileName="IRIS.INF", cAlternateFileName="")) returned 1 [0103.309] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5a6f8e30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x9ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1 [0103.309] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x4c1d, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1 [0103.309] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x4c1d, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0 [0103.309] FindClose (in: hFindFile=0x26bc80 | out: hFindFile=0x26bc80) returned 1 [0103.309] SetErrorMode (uMode=0x0) returned 0x1 [0103.310] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\THMBNAIL.PNG", nBufferLength=0x105, lpBuffer=0x12d5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\THMBNAIL.PNG", lpFilePart=0x0) returned 0x49 [0103.310] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\THMBNAIL.PNG", nBufferLength=0x105, lpBuffer=0x12d590, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\THMBNAIL.PNG", lpFilePart=0x0) returned 0x49 [0103.310] SetErrorMode (uMode=0x1) returned 0x0 [0103.310] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\iris\\thmbnail.png"), fInfoLevelId=0x0, lpFileInformation=0x12d810 | out: lpFileInformation=0x12d810*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x4c1d)) returned 1 [0103.310] SetErrorMode (uMode=0x0) returned 0x1 [0103.310] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\THMBNAIL.PNG", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\THMBNAIL.PNG", lpFilePart=0x0) returned 0x49 [0103.310] SetErrorMode (uMode=0x1) returned 0x0 [0103.311] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\iris\\thmbnail.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x31c [0103.311] SetErrorMode (uMode=0x0) returned 0x1 [0103.311] GetFileType (hFile=0x31c) returned 0x1 [0103.311] GetFileSize (in: hFile=0x31c, lpFileSizeHigh=0x12d8c8 | out: lpFileSizeHigh=0x12d8c8*=0x0) returned 0x4c1d [0103.311] ReadFile (in: hFile=0x31c, lpBuffer=0x27e7180, nNumberOfBytesToRead=0x4c1d, lpNumberOfBytesRead=0x12d7a8, lpOverlapped=0x0 | out: lpBuffer=0x27e7180*, lpNumberOfBytesRead=0x12d7a8*=0x4c1d, lpOverlapped=0x0) returned 1 [0103.334] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\THMBNAIL.PNG", nBufferLength=0x105, lpBuffer=0x12d270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\THMBNAIL.PNG", lpFilePart=0x0) returned 0x49 [0103.334] SetErrorMode (uMode=0x1) returned 0x0 [0103.334] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\iris\\thmbnail.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x31c [0103.336] SetErrorMode (uMode=0x0) returned 0x1 [0103.336] GetFileType (hFile=0x31c) returned 0x1 [0103.336] WriteFile (in: hFile=0x31c, lpBuffer=0x26cd118*, nNumberOfBytesToWrite=0x4c20, lpNumberOfBytesWritten=0x12d828, lpOverlapped=0x0 | out: lpBuffer=0x26cd118*, lpNumberOfBytesWritten=0x12d828*=0x4c20, lpOverlapped=0x0) returned 1 [0103.337] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\THMBNAIL.PNG", nBufferLength=0x105, lpBuffer=0x12d500, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\THMBNAIL.PNG", lpFilePart=0x0) returned 0x49 [0103.338] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\THMBNAIL.PNG.encryptedS", nBufferLength=0x105, lpBuffer=0x12d500, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\THMBNAIL.PNG.encryptedS", lpFilePart=0x0) returned 0x54 [0103.338] SetErrorMode (uMode=0x1) returned 0x0 [0103.338] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\iris\\thmbnail.png"), fInfoLevelId=0x0, lpFileInformation=0x12d750 | out: lpFileInformation=0x12d750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5da91670, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x4c20)) returned 1 [0103.338] SetErrorMode (uMode=0x0) returned 0x1 [0103.338] MoveFileW (lpExistingFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\iris\\thmbnail.png"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\THMBNAIL.PNG.encryptedS" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\iris\\thmbnail.png.encrypteds")) returned 1 [0103.339] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\Decrypt Instructions.txt", nBufferLength=0x105, lpBuffer=0x12d240, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\Decrypt Instructions.txt", lpFilePart=0x0) returned 0x55 [0103.339] SetErrorMode (uMode=0x1) returned 0x0 [0103.339] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\Decrypt Instructions.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\iris\\decrypt instructions.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x31c [0103.341] SetErrorMode (uMode=0x0) returned 0x1 [0103.341] GetFileType (hFile=0x31c) returned 0x1 [0103.341] WriteFile (in: hFile=0x31c, lpBuffer=0x26d5ef0*, nNumberOfBytesToWrite=0x773, lpNumberOfBytesWritten=0x12d7a8, lpOverlapped=0x0 | out: lpBuffer=0x26d5ef0*, lpNumberOfBytesWritten=0x12d7a8*=0x773, lpOverlapped=0x0) returned 1 [0103.342] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS", nBufferLength=0x105, lpBuffer=0x12d430, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS", lpFilePart=0x0) returned 0x3c [0103.342] SetErrorMode (uMode=0x1) returned 0x0 [0103.342] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\*", lpFindFileData=0x12d5d0 | out: lpFindFileData=0x12d5d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a6f8e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x5da91670, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x5da91670, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x26bc80 [0103.342] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a6f8e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x5da91670, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x5da91670, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0103.343] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5da91670, ftCreationTime.dwHighDateTime=0x1d5e786, ftLastAccessTime.dwLowDateTime=0x5da91670, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x5da91670, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x773, dwReserved0=0x0, dwReserved1=0x0, cFileName="Decrypt Instructions.txt", cAlternateFileName="DECRYP~1.TXT")) returned 1 [0103.343] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f26d00, ftCreationTime.dwHighDateTime=0x1cab7f2, ftLastAccessTime.dwLowDateTime=0x65d5e3f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6f26d00, ftLastWriteTime.dwHighDateTime=0x1cab7f2, nFileSizeHigh=0x0, nFileSizeLow=0x1015d, dwReserved0=0x0, dwReserved1=0x0, cFileName="IRIS.ELM", cAlternateFileName="")) returned 1 [0103.343] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x65d5e3f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x1ce, dwReserved0=0x0, dwReserved1=0x0, cFileName="IRIS.INF", cAlternateFileName="")) returned 1 [0103.343] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5a6f8e30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x9ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1 [0103.343] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5da91670, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x4c20, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG.encryptedS", cAlternateFileName="THMBNA~1.ENC")) returned 1 [0103.343] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5da91670, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x4c20, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG.encryptedS", cAlternateFileName="THMBNA~1.ENC")) returned 0 [0103.343] FindClose (in: hFindFile=0x26bc80 | out: hFindFile=0x26bc80) returned 1 [0103.343] SetErrorMode (uMode=0x0) returned 0x1 [0103.343] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL", nBufferLength=0x105, lpBuffer=0x12d390, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL", lpFilePart=0x0) returned 0x3f [0103.343] SetErrorMode (uMode=0x1) returned 0x0 [0103.343] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL\\*", lpFindFileData=0x12d530 | out: lpFindFileData=0x12d530*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x567be5d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d489150, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x26bc80 [0103.378] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x567be5d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d489150, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0103.378] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8239a00, ftCreationTime.dwHighDateTime=0x1cab7f2, ftLastAccessTime.dwLowDateTime=0x66220ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8239a00, ftLastWriteTime.dwHighDateTime=0x1cab7f2, nFileSizeHigh=0x0, nFileSizeLow=0xba32, dwReserved0=0x0, dwReserved1=0x0, cFileName="JOURNAL.ELM", cAlternateFileName="")) returned 1 [0103.378] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x567e4730, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x1f3, dwReserved0=0x0, dwReserved1=0x0, cFileName="JOURNAL.INF", cAlternateFileName="")) returned 1 [0103.378] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5a6f8e30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x4d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1 [0103.378] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x47ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1 [0103.378] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x47ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0 [0103.378] FindClose (in: hFindFile=0x26bc80 | out: hFindFile=0x26bc80) returned 1 [0103.378] SetErrorMode (uMode=0x0) returned 0x1 [0103.379] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL\\THMBNAIL.PNG", nBufferLength=0x105, lpBuffer=0x12d5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL\\THMBNAIL.PNG", lpFilePart=0x0) returned 0x4c [0103.379] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL\\THMBNAIL.PNG", nBufferLength=0x105, lpBuffer=0x12d590, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL\\THMBNAIL.PNG", lpFilePart=0x0) returned 0x4c [0103.379] SetErrorMode (uMode=0x1) returned 0x0 [0103.379] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\journal\\thmbnail.png"), fInfoLevelId=0x0, lpFileInformation=0x12d810 | out: lpFileInformation=0x12d810*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x47ed)) returned 1 [0103.380] SetErrorMode (uMode=0x0) returned 0x1 [0103.380] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL\\THMBNAIL.PNG", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL\\THMBNAIL.PNG", lpFilePart=0x0) returned 0x4c [0103.380] SetErrorMode (uMode=0x1) returned 0x0 [0103.380] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\journal\\thmbnail.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x31c [0103.380] SetErrorMode (uMode=0x0) returned 0x1 [0103.380] GetFileType (hFile=0x31c) returned 0x1 [0103.380] GetFileSize (in: hFile=0x31c, lpFileSizeHigh=0x12d8c8 | out: lpFileSizeHigh=0x12d8c8*=0x0) returned 0x47ed [0103.380] ReadFile (in: hFile=0x31c, lpBuffer=0x26d9c88, nNumberOfBytesToRead=0x47ed, lpNumberOfBytesRead=0x12d7a8, lpOverlapped=0x0 | out: lpBuffer=0x26d9c88*, lpNumberOfBytesRead=0x12d7a8*=0x47ed, lpOverlapped=0x0) returned 1 [0103.397] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL\\THMBNAIL.PNG", nBufferLength=0x105, lpBuffer=0x12d270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL\\THMBNAIL.PNG", lpFilePart=0x0) returned 0x4c [0103.397] SetErrorMode (uMode=0x1) returned 0x0 [0103.398] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\journal\\thmbnail.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x31c [0103.399] SetErrorMode (uMode=0x0) returned 0x1 [0103.399] GetFileType (hFile=0x31c) returned 0x1 [0103.399] WriteFile (in: hFile=0x31c, lpBuffer=0x27d0250*, nNumberOfBytesToWrite=0x47f0, lpNumberOfBytesWritten=0x12d828, lpOverlapped=0x0 | out: lpBuffer=0x27d0250*, lpNumberOfBytesWritten=0x12d828*=0x47f0, lpOverlapped=0x0) returned 1 [0103.400] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL\\THMBNAIL.PNG", nBufferLength=0x105, lpBuffer=0x12d500, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL\\THMBNAIL.PNG", lpFilePart=0x0) returned 0x4c [0103.400] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL\\THMBNAIL.PNG.encryptedS", nBufferLength=0x105, lpBuffer=0x12d500, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL\\THMBNAIL.PNG.encryptedS", lpFilePart=0x0) returned 0x57 [0103.400] SetErrorMode (uMode=0x1) returned 0x0 [0103.401] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\journal\\thmbnail.png"), fInfoLevelId=0x0, lpFileInformation=0x12d750 | out: lpFileInformation=0x12d750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5db29bf0, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x47f0)) returned 1 [0103.401] SetErrorMode (uMode=0x0) returned 0x1 [0103.401] MoveFileW (lpExistingFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\journal\\thmbnail.png"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL\\THMBNAIL.PNG.encryptedS" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\journal\\thmbnail.png.encrypteds")) returned 1 [0103.402] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL\\Decrypt Instructions.txt", nBufferLength=0x105, lpBuffer=0x12d240, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL\\Decrypt Instructions.txt", lpFilePart=0x0) returned 0x58 [0103.403] SetErrorMode (uMode=0x1) returned 0x0 [0103.403] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL\\Decrypt Instructions.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\journal\\decrypt instructions.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x31c [0103.405] SetErrorMode (uMode=0x0) returned 0x1 [0103.406] GetFileType (hFile=0x31c) returned 0x1 [0103.406] WriteFile (in: hFile=0x31c, lpBuffer=0x27d8c18*, nNumberOfBytesToWrite=0x773, lpNumberOfBytesWritten=0x12d7a8, lpOverlapped=0x0 | out: lpBuffer=0x27d8c18*, lpNumberOfBytesWritten=0x12d7a8*=0x773, lpOverlapped=0x0) returned 1 [0103.407] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL", nBufferLength=0x105, lpBuffer=0x12d430, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL", lpFilePart=0x0) returned 0x3f [0103.407] SetErrorMode (uMode=0x1) returned 0x0 [0103.407] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL\\*", lpFindFileData=0x12d5d0 | out: lpFindFileData=0x12d5d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x567be5d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x5db29bf0, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x5db29bf0, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x26bc80 [0103.407] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x567be5d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x5db29bf0, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x5db29bf0, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0103.407] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5db29bf0, ftCreationTime.dwHighDateTime=0x1d5e786, ftLastAccessTime.dwLowDateTime=0x5db29bf0, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x5db29bf0, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x773, dwReserved0=0x0, dwReserved1=0x0, cFileName="Decrypt Instructions.txt", cAlternateFileName="DECRYP~1.TXT")) returned 1 [0103.407] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8239a00, ftCreationTime.dwHighDateTime=0x1cab7f2, ftLastAccessTime.dwLowDateTime=0x66220ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8239a00, ftLastWriteTime.dwHighDateTime=0x1cab7f2, nFileSizeHigh=0x0, nFileSizeLow=0xba32, dwReserved0=0x0, dwReserved1=0x0, cFileName="JOURNAL.ELM", cAlternateFileName="")) returned 1 [0103.407] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x567e4730, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x1f3, dwReserved0=0x0, dwReserved1=0x0, cFileName="JOURNAL.INF", cAlternateFileName="")) returned 1 [0103.407] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5a6f8e30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x4d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1 [0103.407] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5db29bf0, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x47f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG.encryptedS", cAlternateFileName="THMBNA~1.ENC")) returned 1 [0103.408] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5db29bf0, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x47f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG.encryptedS", cAlternateFileName="THMBNA~1.ENC")) returned 0 [0103.408] FindClose (in: hFindFile=0x26bc80 | out: hFindFile=0x26bc80) returned 1 [0103.408] SetErrorMode (uMode=0x0) returned 0x1 [0103.408] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS", nBufferLength=0x105, lpBuffer=0x12d390, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS", lpFilePart=0x0) returned 0x3e [0103.408] SetErrorMode (uMode=0x1) returned 0x0 [0103.408] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS\\*", lpFindFileData=0x12d530 | out: lpFindFileData=0x12d530*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x567e4730, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d489150, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x26bc80 [0103.422] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x567e4730, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d489150, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0103.422] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x954c700, ftCreationTime.dwHighDateTime=0x1cab7f2, ftLastAccessTime.dwLowDateTime=0x567e4730, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x954c700, ftLastWriteTime.dwHighDateTime=0x1cab7f2, nFileSizeHigh=0x0, nFileSizeLow=0xe743, dwReserved0=0x0, dwReserved1=0x0, cFileName="LAYERS.ELM", cAlternateFileName="")) returned 1 [0103.422] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x66247150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x215, dwReserved0=0x0, dwReserved1=0x0, cFileName="LAYERS.INF", cAlternateFileName="")) returned 1 [0103.422] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5a6f8e30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x67b, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1 [0103.422] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0xaf32, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1 [0103.422] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0xaf32, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0 [0103.422] FindClose (in: hFindFile=0x26bc80 | out: hFindFile=0x26bc80) returned 1 [0103.422] SetErrorMode (uMode=0x0) returned 0x1 [0103.425] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS\\THMBNAIL.PNG", nBufferLength=0x105, lpBuffer=0x12d5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS\\THMBNAIL.PNG", lpFilePart=0x0) returned 0x4b [0103.425] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS\\THMBNAIL.PNG", nBufferLength=0x105, lpBuffer=0x12d590, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS\\THMBNAIL.PNG", lpFilePart=0x0) returned 0x4b [0103.425] SetErrorMode (uMode=0x1) returned 0x0 [0103.425] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\layers\\thmbnail.png"), fInfoLevelId=0x0, lpFileInformation=0x12d810 | out: lpFileInformation=0x12d810*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0xaf32)) returned 1 [0103.426] SetErrorMode (uMode=0x0) returned 0x1 [0103.426] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS\\THMBNAIL.PNG", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS\\THMBNAIL.PNG", lpFilePart=0x0) returned 0x4b [0103.426] SetErrorMode (uMode=0x1) returned 0x0 [0103.427] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\layers\\thmbnail.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x31c [0103.427] SetErrorMode (uMode=0x0) returned 0x1 [0103.427] GetFileType (hFile=0x31c) returned 0x1 [0103.427] GetFileSize (in: hFile=0x31c, lpFileSizeHigh=0x12d8c8 | out: lpFileSizeHigh=0x12d8c8*=0x0) returned 0xaf32 [0103.427] ReadFile (in: hFile=0x31c, lpBuffer=0x27dc9b0, nNumberOfBytesToRead=0xaf32, lpNumberOfBytesRead=0x12d7a8, lpOverlapped=0x0 | out: lpBuffer=0x27dc9b0*, lpNumberOfBytesRead=0x12d7a8*=0xaf32, lpOverlapped=0x0) returned 1 [0103.487] CloseHandle (hObject=0x31c) returned 1 [0103.522] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS\\THMBNAIL.PNG", nBufferLength=0x105, lpBuffer=0x12d270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS\\THMBNAIL.PNG", lpFilePart=0x0) returned 0x4b [0103.522] SetErrorMode (uMode=0x1) returned 0x0 [0103.522] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\layers\\thmbnail.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x31c [0103.524] SetErrorMode (uMode=0x0) returned 0x1 [0103.524] GetFileType (hFile=0x31c) returned 0x1 [0103.524] WriteFile (in: hFile=0x31c, lpBuffer=0x26eefb8*, nNumberOfBytesToWrite=0xaf40, lpNumberOfBytesWritten=0x12d828, lpOverlapped=0x0 | out: lpBuffer=0x26eefb8*, lpNumberOfBytesWritten=0x12d828*=0xaf40, lpOverlapped=0x0) returned 1 [0103.526] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS\\THMBNAIL.PNG", nBufferLength=0x105, lpBuffer=0x12d500, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS\\THMBNAIL.PNG", lpFilePart=0x0) returned 0x4b [0103.526] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS\\THMBNAIL.PNG.encryptedS", nBufferLength=0x105, lpBuffer=0x12d500, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS\\THMBNAIL.PNG.encryptedS", lpFilePart=0x0) returned 0x56 [0103.526] SetErrorMode (uMode=0x1) returned 0x0 [0103.526] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\layers\\thmbnail.png"), fInfoLevelId=0x0, lpFileInformation=0x12d750 | out: lpFileInformation=0x12d750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5dc5a6f0, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0xaf40)) returned 1 [0103.526] SetErrorMode (uMode=0x0) returned 0x1 [0103.526] MoveFileW (lpExistingFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\layers\\thmbnail.png"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS\\THMBNAIL.PNG.encryptedS" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\layers\\thmbnail.png.encrypteds")) returned 1 [0103.528] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS\\Decrypt Instructions.txt", nBufferLength=0x105, lpBuffer=0x12d240, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS\\Decrypt Instructions.txt", lpFilePart=0x0) returned 0x57 [0103.529] SetErrorMode (uMode=0x1) returned 0x0 [0103.529] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS\\Decrypt Instructions.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\layers\\decrypt instructions.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x31c [0103.530] SetErrorMode (uMode=0x0) returned 0x1 [0103.531] GetFileType (hFile=0x31c) returned 0x1 [0103.531] WriteFile (in: hFile=0x31c, lpBuffer=0x26fe0b0*, nNumberOfBytesToWrite=0x773, lpNumberOfBytesWritten=0x12d7a8, lpOverlapped=0x0 | out: lpBuffer=0x26fe0b0*, lpNumberOfBytesWritten=0x12d7a8*=0x773, lpOverlapped=0x0) returned 1 [0103.532] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS", nBufferLength=0x105, lpBuffer=0x12d430, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS", lpFilePart=0x0) returned 0x3e [0103.532] SetErrorMode (uMode=0x1) returned 0x0 [0103.532] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS\\*", lpFindFileData=0x12d5d0 | out: lpFindFileData=0x12d5d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x567e4730, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x5dc5a6f0, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x5dc5a6f0, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x26bc80 [0103.532] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x567e4730, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x5dc5a6f0, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x5dc5a6f0, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0103.532] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5dc5a6f0, ftCreationTime.dwHighDateTime=0x1d5e786, ftLastAccessTime.dwLowDateTime=0x5dc5a6f0, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x5dc5a6f0, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x773, dwReserved0=0x0, dwReserved1=0x0, cFileName="Decrypt Instructions.txt", cAlternateFileName="DECRYP~1.TXT")) returned 1 [0103.532] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x954c700, ftCreationTime.dwHighDateTime=0x1cab7f2, ftLastAccessTime.dwLowDateTime=0x567e4730, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x954c700, ftLastWriteTime.dwHighDateTime=0x1cab7f2, nFileSizeHigh=0x0, nFileSizeLow=0xe743, dwReserved0=0x0, dwReserved1=0x0, cFileName="LAYERS.ELM", cAlternateFileName="")) returned 1 [0103.532] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x66247150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x215, dwReserved0=0x0, dwReserved1=0x0, cFileName="LAYERS.INF", cAlternateFileName="")) returned 1 [0103.532] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5a6f8e30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x67b, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1 [0103.532] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5dc5a6f0, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0xaf40, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG.encryptedS", cAlternateFileName="THMBNA~1.ENC")) returned 1 [0103.532] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5dc5a6f0, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0xaf40, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG.encryptedS", cAlternateFileName="THMBNA~1.ENC")) returned 0 [0103.533] FindClose (in: hFindFile=0x26bc80 | out: hFindFile=0x26bc80) returned 1 [0103.533] SetErrorMode (uMode=0x0) returned 0x1 [0103.533] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL", nBufferLength=0x105, lpBuffer=0x12d390, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL", lpFilePart=0x0) returned 0x3d [0103.533] SetErrorMode (uMode=0x1) returned 0x0 [0103.533] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL\\*", lpFindFileData=0x12d530 | out: lpFindFileData=0x12d530*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a6f8e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x66247150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x66247150, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x26bc80 [0103.534] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a6f8e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x66247150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x66247150, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0103.534] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa85f400, ftCreationTime.dwHighDateTime=0x1cab7f2, ftLastAccessTime.dwLowDateTime=0x66247150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa85f400, ftLastWriteTime.dwHighDateTime=0x1cab7f2, nFileSizeHigh=0x0, nFileSizeLow=0xe2ec, dwReserved0=0x0, dwReserved1=0x0, cFileName="LEVEL.ELM", cAlternateFileName="")) returned 1 [0103.534] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x66247150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x20e, dwReserved0=0x0, dwReserved1=0x0, cFileName="LEVEL.INF", cAlternateFileName="")) returned 1 [0103.534] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5a6f8e30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x563, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1 [0103.534] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0xbbf3, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1 [0103.534] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0xbbf3, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0 [0103.534] FindClose (in: hFindFile=0x26bc80 | out: hFindFile=0x26bc80) returned 1 [0103.534] SetErrorMode (uMode=0x0) returned 0x1 [0103.535] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL\\THMBNAIL.PNG", nBufferLength=0x105, lpBuffer=0x12d5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL\\THMBNAIL.PNG", lpFilePart=0x0) returned 0x4a [0103.535] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL\\THMBNAIL.PNG", nBufferLength=0x105, lpBuffer=0x12d590, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL\\THMBNAIL.PNG", lpFilePart=0x0) returned 0x4a [0103.535] SetErrorMode (uMode=0x1) returned 0x0 [0103.536] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\level\\thmbnail.png"), fInfoLevelId=0x0, lpFileInformation=0x12d810 | out: lpFileInformation=0x12d810*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0xbbf3)) returned 1 [0103.536] SetErrorMode (uMode=0x0) returned 0x1 [0103.536] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL\\THMBNAIL.PNG", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL\\THMBNAIL.PNG", lpFilePart=0x0) returned 0x4a [0103.536] SetErrorMode (uMode=0x1) returned 0x0 [0103.536] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\level\\thmbnail.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x31c [0103.536] SetErrorMode (uMode=0x0) returned 0x1 [0103.536] GetFileType (hFile=0x31c) returned 0x1 [0103.536] GetFileSize (in: hFile=0x31c, lpFileSizeHigh=0x12d8c8 | out: lpFileSizeHigh=0x12d8c8*=0x0) returned 0xbbf3 [0103.536] ReadFile (in: hFile=0x31c, lpBuffer=0x2701e10, nNumberOfBytesToRead=0xbbf3, lpNumberOfBytesRead=0x12d7a8, lpOverlapped=0x0 | out: lpBuffer=0x2701e10*, lpNumberOfBytesRead=0x12d7a8*=0xbbf3, lpOverlapped=0x0) returned 1 [0103.584] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL\\THMBNAIL.PNG", nBufferLength=0x105, lpBuffer=0x12d270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL\\THMBNAIL.PNG", lpFilePart=0x0) returned 0x4a [0103.584] SetErrorMode (uMode=0x1) returned 0x0 [0103.584] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\level\\thmbnail.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x31c [0103.586] SetErrorMode (uMode=0x0) returned 0x1 [0103.586] GetFileType (hFile=0x31c) returned 0x1 [0103.586] WriteFile (in: hFile=0x31c, lpBuffer=0x2805030*, nNumberOfBytesToWrite=0xbc00, lpNumberOfBytesWritten=0x12d828, lpOverlapped=0x0 | out: lpBuffer=0x2805030*, lpNumberOfBytesWritten=0x12d828*=0xbc00, lpOverlapped=0x0) returned 1 [0103.588] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL\\THMBNAIL.PNG", nBufferLength=0x105, lpBuffer=0x12d500, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL\\THMBNAIL.PNG", lpFilePart=0x0) returned 0x4a [0103.588] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL\\THMBNAIL.PNG.encryptedS", nBufferLength=0x105, lpBuffer=0x12d500, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL\\THMBNAIL.PNG.encryptedS", lpFilePart=0x0) returned 0x55 [0103.588] SetErrorMode (uMode=0x1) returned 0x0 [0103.588] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\level\\thmbnail.png"), fInfoLevelId=0x0, lpFileInformation=0x12d750 | out: lpFileInformation=0x12d750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5dcf2c70, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0xbc00)) returned 1 [0103.588] SetErrorMode (uMode=0x0) returned 0x1 [0103.588] MoveFileW (lpExistingFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\level\\thmbnail.png"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL\\THMBNAIL.PNG.encryptedS" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\level\\thmbnail.png.encrypteds")) returned 1 [0103.589] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL\\Decrypt Instructions.txt", nBufferLength=0x105, lpBuffer=0x12d240, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL\\Decrypt Instructions.txt", lpFilePart=0x0) returned 0x56 [0103.589] SetErrorMode (uMode=0x1) returned 0x0 [0103.589] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL\\Decrypt Instructions.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\level\\decrypt instructions.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x31c [0103.788] SetErrorMode (uMode=0x0) returned 0x1 [0103.788] GetFileType (hFile=0x31c) returned 0x1 [0103.788] WriteFile (in: hFile=0x31c, lpBuffer=0x2814de8*, nNumberOfBytesToWrite=0x773, lpNumberOfBytesWritten=0x12d7a8, lpOverlapped=0x0 | out: lpBuffer=0x2814de8*, lpNumberOfBytesWritten=0x12d7a8*=0x773, lpOverlapped=0x0) returned 1 [0103.789] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL", nBufferLength=0x105, lpBuffer=0x12d430, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL", lpFilePart=0x0) returned 0x3d [0103.789] SetErrorMode (uMode=0x1) returned 0x0 [0103.790] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL\\*", lpFindFileData=0x12d5d0 | out: lpFindFileData=0x12d5d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a6f8e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x5dee1e50, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x5dee1e50, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x26bc80 [0103.790] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a6f8e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x5dee1e50, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x5dee1e50, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0103.790] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5dcf2c70, ftCreationTime.dwHighDateTime=0x1d5e786, ftLastAccessTime.dwLowDateTime=0x5dcf2c70, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x5dee1e50, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x773, dwReserved0=0x0, dwReserved1=0x0, cFileName="Decrypt Instructions.txt", cAlternateFileName="DECRYP~1.TXT")) returned 1 [0103.790] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa85f400, ftCreationTime.dwHighDateTime=0x1cab7f2, ftLastAccessTime.dwLowDateTime=0x66247150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa85f400, ftLastWriteTime.dwHighDateTime=0x1cab7f2, nFileSizeHigh=0x0, nFileSizeLow=0xe2ec, dwReserved0=0x0, dwReserved1=0x0, cFileName="LEVEL.ELM", cAlternateFileName="")) returned 1 [0103.790] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x66247150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x20e, dwReserved0=0x0, dwReserved1=0x0, cFileName="LEVEL.INF", cAlternateFileName="")) returned 1 [0103.790] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5a6f8e30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x563, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1 [0103.790] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5dcf2c70, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0xbc00, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG.encryptedS", cAlternateFileName="THMBNA~1.ENC")) returned 1 [0103.790] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5dcf2c70, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0xbc00, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG.encryptedS", cAlternateFileName="THMBNA~1.ENC")) returned 0 [0103.791] FindClose (in: hFindFile=0x26bc80 | out: hFindFile=0x26bc80) returned 1 [0103.791] SetErrorMode (uMode=0x0) returned 0x1 [0103.791] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK", nBufferLength=0x105, lpBuffer=0x12d390, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK", lpFilePart=0x0) returned 0x3f [0103.791] SetErrorMode (uMode=0x1) returned 0x0 [0103.791] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK\\*", lpFindFileData=0x12d530 | out: lpFindFileData=0x12d530*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x59544a90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d489150, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x26bc80 [0103.792] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x59544a90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d489150, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0103.792] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x107bd500, ftCreationTime.dwHighDateTime=0x1cab7f2, ftLastAccessTime.dwLowDateTime=0x59544a90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x107bd500, ftLastWriteTime.dwHighDateTime=0x1cab7f2, nFileSizeHigh=0x0, nFileSizeLow=0xc649, dwReserved0=0x0, dwReserved1=0x0, cFileName="NETWORK.ELM", cAlternateFileName="")) returned 1 [0103.792] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6a3bce50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x249, dwReserved0=0x0, dwReserved1=0x0, cFileName="NETWORK.INF", cAlternateFileName="")) returned 1 [0103.792] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5a6f8e30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x554, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1 [0103.792] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x2d35, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1 [0103.792] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x2d35, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0 [0103.792] FindClose (in: hFindFile=0x26bc80 | out: hFindFile=0x26bc80) returned 1 [0103.792] SetErrorMode (uMode=0x0) returned 0x1 [0103.794] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK\\THMBNAIL.PNG", nBufferLength=0x105, lpBuffer=0x12d5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK\\THMBNAIL.PNG", lpFilePart=0x0) returned 0x4c [0103.808] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK\\THMBNAIL.PNG", nBufferLength=0x105, lpBuffer=0x12d590, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK\\THMBNAIL.PNG", lpFilePart=0x0) returned 0x4c [0103.808] SetErrorMode (uMode=0x1) returned 0x0 [0103.808] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\network\\thmbnail.png"), fInfoLevelId=0x0, lpFileInformation=0x12d810 | out: lpFileInformation=0x12d810*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x2d35)) returned 1 [0103.809] SetErrorMode (uMode=0x0) returned 0x1 [0103.809] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK\\THMBNAIL.PNG", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK\\THMBNAIL.PNG", lpFilePart=0x0) returned 0x4c [0103.809] SetErrorMode (uMode=0x1) returned 0x0 [0103.809] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\network\\thmbnail.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x31c [0103.809] SetErrorMode (uMode=0x0) returned 0x1 [0103.810] GetFileType (hFile=0x31c) returned 0x1 [0103.810] GetFileSize (in: hFile=0x31c, lpFileSizeHigh=0x12d8c8 | out: lpFileSizeHigh=0x12d8c8*=0x0) returned 0x2d35 [0103.810] ReadFile (in: hFile=0x31c, lpBuffer=0x2818b80, nNumberOfBytesToRead=0x2d35, lpNumberOfBytesRead=0x12d7a8, lpOverlapped=0x0 | out: lpBuffer=0x2818b80*, lpNumberOfBytesRead=0x12d7a8*=0x2d35, lpOverlapped=0x0) returned 1 [0103.925] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK\\THMBNAIL.PNG", nBufferLength=0x105, lpBuffer=0x12d270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK\\THMBNAIL.PNG", lpFilePart=0x0) returned 0x4c [0103.925] SetErrorMode (uMode=0x1) returned 0x0 [0103.925] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\network\\thmbnail.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x31c [0103.927] SetErrorMode (uMode=0x0) returned 0x1 [0103.927] GetFileType (hFile=0x31c) returned 0x1 [0103.927] WriteFile (in: hFile=0x31c, lpBuffer=0x26e91d8*, nNumberOfBytesToWrite=0x2d40, lpNumberOfBytesWritten=0x12d828, lpOverlapped=0x0 | out: lpBuffer=0x26e91d8*, lpNumberOfBytesWritten=0x12d828*=0x2d40, lpOverlapped=0x0) returned 1 [0103.929] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK\\THMBNAIL.PNG", nBufferLength=0x105, lpBuffer=0x12d500, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK\\THMBNAIL.PNG", lpFilePart=0x0) returned 0x4c [0103.929] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK\\THMBNAIL.PNG.encryptedS", nBufferLength=0x105, lpBuffer=0x12d500, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK\\THMBNAIL.PNG.encryptedS", lpFilePart=0x0) returned 0x57 [0103.929] SetErrorMode (uMode=0x1) returned 0x0 [0103.929] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\network\\thmbnail.png"), fInfoLevelId=0x0, lpFileInformation=0x12d750 | out: lpFileInformation=0x12d750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5e038ab0, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x2d40)) returned 1 [0103.929] SetErrorMode (uMode=0x0) returned 0x1 [0103.929] MoveFileW (lpExistingFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\network\\thmbnail.png"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK\\THMBNAIL.PNG.encryptedS" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\network\\thmbnail.png.encrypteds")) returned 1 [0103.931] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK\\Decrypt Instructions.txt", nBufferLength=0x105, lpBuffer=0x12d240, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK\\Decrypt Instructions.txt", lpFilePart=0x0) returned 0x58 [0103.931] SetErrorMode (uMode=0x1) returned 0x0 [0103.931] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK\\Decrypt Instructions.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\network\\decrypt instructions.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x31c [0103.990] SetErrorMode (uMode=0x0) returned 0x1 [0103.990] GetFileType (hFile=0x31c) returned 0x1 [0103.991] WriteFile (in: hFile=0x31c, lpBuffer=0x26f00f0*, nNumberOfBytesToWrite=0x773, lpNumberOfBytesWritten=0x12d7a8, lpOverlapped=0x0 | out: lpBuffer=0x26f00f0*, lpNumberOfBytesWritten=0x12d7a8*=0x773, lpOverlapped=0x0) returned 1 [0103.996] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK", nBufferLength=0x105, lpBuffer=0x12d430, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK", lpFilePart=0x0) returned 0x3f [0103.996] SetErrorMode (uMode=0x1) returned 0x0 [0103.996] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK\\*", lpFindFileData=0x12d5d0 | out: lpFindFileData=0x12d5d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x59544a90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x5e0d1030, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x5e0d1030, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x26bc80 [0103.997] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x59544a90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x5e0d1030, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x5e0d1030, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0103.997] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5e038ab0, ftCreationTime.dwHighDateTime=0x1d5e786, ftLastAccessTime.dwLowDateTime=0x5e038ab0, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x5e0d1030, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x773, dwReserved0=0x0, dwReserved1=0x0, cFileName="Decrypt Instructions.txt", cAlternateFileName="DECRYP~1.TXT")) returned 1 [0103.997] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x107bd500, ftCreationTime.dwHighDateTime=0x1cab7f2, ftLastAccessTime.dwLowDateTime=0x59544a90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x107bd500, ftLastWriteTime.dwHighDateTime=0x1cab7f2, nFileSizeHigh=0x0, nFileSizeLow=0xc649, dwReserved0=0x0, dwReserved1=0x0, cFileName="NETWORK.ELM", cAlternateFileName="")) returned 1 [0103.997] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6a3bce50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x249, dwReserved0=0x0, dwReserved1=0x0, cFileName="NETWORK.INF", cAlternateFileName="")) returned 1 [0103.997] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5a6f8e30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x554, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1 [0103.997] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5e038ab0, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x2d40, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG.encryptedS", cAlternateFileName="THMBNA~1.ENC")) returned 1 [0103.997] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5e038ab0, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x2d40, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG.encryptedS", cAlternateFileName="THMBNA~1.ENC")) returned 0 [0103.997] FindClose (in: hFindFile=0x26bc80 | out: hFindFile=0x26bc80) returned 1 [0103.997] SetErrorMode (uMode=0x0) returned 0x1 [0103.998] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS", nBufferLength=0x105, lpBuffer=0x12d390, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS", lpFilePart=0x0) returned 0x3f [0103.998] SetErrorMode (uMode=0x1) returned 0x0 [0103.998] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\*", lpFindFileData=0x12d530 | out: lpFindFileData=0x12d530*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x59c68c90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d489150, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x26bc80 [0104.066] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x59c68c90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d489150, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0104.067] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x140f5c00, ftCreationTime.dwHighDateTime=0x1cab7f2, ftLastAccessTime.dwLowDateTime=0x59c68c90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x140f5c00, ftLastWriteTime.dwHighDateTime=0x1cab7f2, nFileSizeHigh=0x0, nFileSizeLow=0x166d5, dwReserved0=0x0, dwReserved1=0x0, cFileName="PAPYRUS.ELM", cAlternateFileName="")) returned 1 [0104.067] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6cd64f50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x1f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="PAPYRUS.INF", cAlternateFileName="")) returned 1 [0104.067] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5a6f8e30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0xa0e, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1 [0104.067] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x9240, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1 [0104.067] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x9240, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0 [0104.067] FindClose (in: hFindFile=0x26bc80 | out: hFindFile=0x26bc80) returned 1 [0104.067] SetErrorMode (uMode=0x0) returned 0x1 [0104.068] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\THMBNAIL.PNG", nBufferLength=0x105, lpBuffer=0x12d5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\THMBNAIL.PNG", lpFilePart=0x0) returned 0x4c [0104.069] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\THMBNAIL.PNG", nBufferLength=0x105, lpBuffer=0x12d590, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\THMBNAIL.PNG", lpFilePart=0x0) returned 0x4c [0104.069] SetErrorMode (uMode=0x1) returned 0x0 [0104.069] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\papyrus\\thmbnail.png"), fInfoLevelId=0x0, lpFileInformation=0x12d810 | out: lpFileInformation=0x12d810*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x9240)) returned 1 [0104.069] SetErrorMode (uMode=0x0) returned 0x1 [0104.069] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\THMBNAIL.PNG", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\THMBNAIL.PNG", lpFilePart=0x0) returned 0x4c [0104.069] SetErrorMode (uMode=0x1) returned 0x0 [0104.070] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\papyrus\\thmbnail.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x31c [0104.070] SetErrorMode (uMode=0x0) returned 0x1 [0104.070] GetFileType (hFile=0x31c) returned 0x1 [0104.070] GetFileSize (in: hFile=0x31c, lpFileSizeHigh=0x12d8c8 | out: lpFileSizeHigh=0x12d8c8*=0x0) returned 0x9240 [0104.070] ReadFile (in: hFile=0x31c, lpBuffer=0x26f3ea8, nNumberOfBytesToRead=0x9240, lpNumberOfBytesRead=0x12d7a8, lpOverlapped=0x0 | out: lpBuffer=0x26f3ea8*, lpNumberOfBytesRead=0x12d7a8*=0x9240, lpOverlapped=0x0) returned 1 [0104.120] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\THMBNAIL.PNG", nBufferLength=0x105, lpBuffer=0x12d270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\THMBNAIL.PNG", lpFilePart=0x0) returned 0x4c [0104.120] SetErrorMode (uMode=0x1) returned 0x0 [0104.120] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\papyrus\\thmbnail.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x31c [0104.122] SetErrorMode (uMode=0x0) returned 0x1 [0104.122] GetFileType (hFile=0x31c) returned 0x1 [0104.122] WriteFile (in: hFile=0x31c, lpBuffer=0x2801848*, nNumberOfBytesToWrite=0x9250, lpNumberOfBytesWritten=0x12d828, lpOverlapped=0x0 | out: lpBuffer=0x2801848*, lpNumberOfBytesWritten=0x12d828*=0x9250, lpOverlapped=0x0) returned 1 [0104.124] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\THMBNAIL.PNG", nBufferLength=0x105, lpBuffer=0x12d500, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\THMBNAIL.PNG", lpFilePart=0x0) returned 0x4c [0104.124] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\THMBNAIL.PNG.encryptedS", nBufferLength=0x105, lpBuffer=0x12d500, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\THMBNAIL.PNG.encryptedS", lpFilePart=0x0) returned 0x57 [0104.124] SetErrorMode (uMode=0x1) returned 0x0 [0104.125] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\papyrus\\thmbnail.png"), fInfoLevelId=0x0, lpFileInformation=0x12d750 | out: lpFileInformation=0x12d750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5e201b30, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x9250)) returned 1 [0104.125] SetErrorMode (uMode=0x0) returned 0x1 [0104.125] MoveFileW (lpExistingFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\papyrus\\thmbnail.png"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\THMBNAIL.PNG.encryptedS" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\papyrus\\thmbnail.png.encrypteds")) returned 1 [0104.126] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\Decrypt Instructions.txt", nBufferLength=0x105, lpBuffer=0x12d240, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\Decrypt Instructions.txt", lpFilePart=0x0) returned 0x58 [0104.126] SetErrorMode (uMode=0x1) returned 0x0 [0104.126] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\Decrypt Instructions.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\papyrus\\decrypt instructions.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x31c [0104.311] SetErrorMode (uMode=0x0) returned 0x1 [0104.311] GetFileType (hFile=0x31c) returned 0x1 [0104.311] WriteFile (in: hFile=0x31c, lpBuffer=0x280ec70*, nNumberOfBytesToWrite=0x773, lpNumberOfBytesWritten=0x12d7a8, lpOverlapped=0x0 | out: lpBuffer=0x280ec70*, lpNumberOfBytesWritten=0x12d7a8*=0x773, lpOverlapped=0x0) returned 1 [0104.313] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS", nBufferLength=0x105, lpBuffer=0x12d430, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS", lpFilePart=0x0) returned 0x3f [0104.313] SetErrorMode (uMode=0x1) returned 0x0 [0104.313] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\*", lpFindFileData=0x12d5d0 | out: lpFindFileData=0x12d5d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x59c68c90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x5e3cabb0, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x5e3cabb0, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x26bc80 [0104.314] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x59c68c90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x5e3cabb0, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x5e3cabb0, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0104.314] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5e227c90, ftCreationTime.dwHighDateTime=0x1d5e786, ftLastAccessTime.dwLowDateTime=0x5e227c90, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x5e3f0d10, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x773, dwReserved0=0x0, dwReserved1=0x0, cFileName="Decrypt Instructions.txt", cAlternateFileName="DECRYP~1.TXT")) returned 1 [0104.314] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x140f5c00, ftCreationTime.dwHighDateTime=0x1cab7f2, ftLastAccessTime.dwLowDateTime=0x59c68c90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x140f5c00, ftLastWriteTime.dwHighDateTime=0x1cab7f2, nFileSizeHigh=0x0, nFileSizeLow=0x166d5, dwReserved0=0x0, dwReserved1=0x0, cFileName="PAPYRUS.ELM", cAlternateFileName="")) returned 1 [0104.314] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6cd64f50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x1f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="PAPYRUS.INF", cAlternateFileName="")) returned 1 [0104.314] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5a6f8e30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0xa0e, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1 [0104.314] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5e201b30, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x9250, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG.encryptedS", cAlternateFileName="THMBNA~1.ENC")) returned 1 [0104.314] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5e201b30, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x9250, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG.encryptedS", cAlternateFileName="THMBNA~1.ENC")) returned 0 [0104.314] FindClose (in: hFindFile=0x26bc80 | out: hFindFile=0x26bc80) returned 1 [0104.314] SetErrorMode (uMode=0x0) returned 0x1 [0104.314] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL", nBufferLength=0x105, lpBuffer=0x12d390, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL", lpFilePart=0x0) returned 0x3d [0104.315] SetErrorMode (uMode=0x1) returned 0x0 [0104.315] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\*", lpFindFileData=0x12d530 | out: lpFindFileData=0x12d530*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a44b570, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d05ead0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x26bc80 [0104.315] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a44b570, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d05ead0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0104.315] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x17a2e300, ftCreationTime.dwHighDateTime=0x1cab7f2, ftLastAccessTime.dwLowDateTime=0x6cf07e70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x17a2e300, ftLastWriteTime.dwHighDateTime=0x1cab7f2, nFileSizeHigh=0x0, nFileSizeLow=0xd0e5, dwReserved0=0x0, dwReserved1=0x0, cFileName="PIXEL.ELM", cAlternateFileName="")) returned 1 [0104.315] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5a44b570, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x21b, dwReserved0=0x0, dwReserved1=0x0, cFileName="PIXEL.INF", cAlternateFileName="")) returned 1 [0104.315] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x639, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1 [0104.315] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x54f1, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1 [0104.316] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x54f1, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0 [0104.316] FindClose (in: hFindFile=0x26bc80 | out: hFindFile=0x26bc80) returned 1 [0104.316] SetErrorMode (uMode=0x0) returned 0x1 [0104.317] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\THMBNAIL.PNG", nBufferLength=0x105, lpBuffer=0x12d5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\THMBNAIL.PNG", lpFilePart=0x0) returned 0x4a [0104.317] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\THMBNAIL.PNG", nBufferLength=0x105, lpBuffer=0x12d590, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\THMBNAIL.PNG", lpFilePart=0x0) returned 0x4a [0104.317] SetErrorMode (uMode=0x1) returned 0x0 [0104.317] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\pixel\\thmbnail.png"), fInfoLevelId=0x0, lpFileInformation=0x12d810 | out: lpFileInformation=0x12d810*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x54f1)) returned 1 [0104.320] SetErrorMode (uMode=0x0) returned 0x1 [0104.320] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\THMBNAIL.PNG", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\THMBNAIL.PNG", lpFilePart=0x0) returned 0x4a [0104.320] SetErrorMode (uMode=0x1) returned 0x0 [0104.320] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\pixel\\thmbnail.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x31c [0104.320] SetErrorMode (uMode=0x0) returned 0x1 [0104.321] GetFileType (hFile=0x31c) returned 0x1 [0104.321] GetFileSize (in: hFile=0x31c, lpFileSizeHigh=0x12d8c8 | out: lpFileSizeHigh=0x12d8c8*=0x0) returned 0x54f1 [0104.321] ReadFile (in: hFile=0x31c, lpBuffer=0x28129d0, nNumberOfBytesToRead=0x54f1, lpNumberOfBytesRead=0x12d7a8, lpOverlapped=0x0 | out: lpBuffer=0x28129d0*, lpNumberOfBytesRead=0x12d7a8*=0x54f1, lpOverlapped=0x0) returned 1 [0104.345] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\THMBNAIL.PNG", nBufferLength=0x105, lpBuffer=0x12d270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\THMBNAIL.PNG", lpFilePart=0x0) returned 0x4a [0104.345] SetErrorMode (uMode=0x1) returned 0x0 [0104.345] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\pixel\\thmbnail.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x31c [0104.347] SetErrorMode (uMode=0x0) returned 0x1 [0104.347] GetFileType (hFile=0x31c) returned 0x1 [0104.347] WriteFile (in: hFile=0x31c, lpBuffer=0x2718cf0*, nNumberOfBytesToWrite=0x5500, lpNumberOfBytesWritten=0x12d828, lpOverlapped=0x0 | out: lpBuffer=0x2718cf0*, lpNumberOfBytesWritten=0x12d828*=0x5500, lpOverlapped=0x0) returned 1 [0104.349] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\THMBNAIL.PNG", nBufferLength=0x105, lpBuffer=0x12d500, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\THMBNAIL.PNG", lpFilePart=0x0) returned 0x4a [0104.349] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\THMBNAIL.PNG.encryptedS", nBufferLength=0x105, lpBuffer=0x12d500, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\THMBNAIL.PNG.encryptedS", lpFilePart=0x0) returned 0x55 [0104.349] SetErrorMode (uMode=0x1) returned 0x0 [0104.349] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\pixel\\thmbnail.png"), fInfoLevelId=0x0, lpFileInformation=0x12d750 | out: lpFileInformation=0x12d750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5e43cfd0, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x5500)) returned 1 [0104.349] SetErrorMode (uMode=0x0) returned 0x1 [0104.349] MoveFileW (lpExistingFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\pixel\\thmbnail.png"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\THMBNAIL.PNG.encryptedS" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\pixel\\thmbnail.png.encrypteds")) returned 1 [0104.350] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\Decrypt Instructions.txt", nBufferLength=0x105, lpBuffer=0x12d240, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\Decrypt Instructions.txt", lpFilePart=0x0) returned 0x56 [0104.350] SetErrorMode (uMode=0x1) returned 0x0 [0104.350] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\Decrypt Instructions.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\pixel\\decrypt instructions.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x31c [0104.352] SetErrorMode (uMode=0x0) returned 0x1 [0104.352] GetFileType (hFile=0x31c) returned 0x1 [0104.352] WriteFile (in: hFile=0x31c, lpBuffer=0x27223a8*, nNumberOfBytesToWrite=0x773, lpNumberOfBytesWritten=0x12d7a8, lpOverlapped=0x0 | out: lpBuffer=0x27223a8*, lpNumberOfBytesWritten=0x12d7a8*=0x773, lpOverlapped=0x0) returned 1 [0104.354] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL", nBufferLength=0x105, lpBuffer=0x12d430, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL", lpFilePart=0x0) returned 0x3d [0104.354] SetErrorMode (uMode=0x1) returned 0x0 [0104.354] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\*", lpFindFileData=0x12d5d0 | out: lpFindFileData=0x12d5d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a44b570, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x5e43cfd0, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x5e43cfd0, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x26bc80 [0104.354] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a44b570, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x5e43cfd0, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x5e43cfd0, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0104.354] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5e43cfd0, ftCreationTime.dwHighDateTime=0x1d5e786, ftLastAccessTime.dwLowDateTime=0x5e43cfd0, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x5e43cfd0, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x773, dwReserved0=0x0, dwReserved1=0x0, cFileName="Decrypt Instructions.txt", cAlternateFileName="DECRYP~1.TXT")) returned 1 [0104.354] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x17a2e300, ftCreationTime.dwHighDateTime=0x1cab7f2, ftLastAccessTime.dwLowDateTime=0x6cf07e70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x17a2e300, ftLastWriteTime.dwHighDateTime=0x1cab7f2, nFileSizeHigh=0x0, nFileSizeLow=0xd0e5, dwReserved0=0x0, dwReserved1=0x0, cFileName="PIXEL.ELM", cAlternateFileName="")) returned 1 [0104.354] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5a44b570, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x21b, dwReserved0=0x0, dwReserved1=0x0, cFileName="PIXEL.INF", cAlternateFileName="")) returned 1 [0104.354] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x639, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1 [0104.354] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5e43cfd0, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x5500, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG.encryptedS", cAlternateFileName="THMBNA~1.ENC")) returned 1 [0104.354] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5e43cfd0, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x5500, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG.encryptedS", cAlternateFileName="THMBNA~1.ENC")) returned 0 [0104.355] FindClose (in: hFindFile=0x26bc80 | out: hFindFile=0x26bc80) returned 1 [0104.355] SetErrorMode (uMode=0x0) returned 0x1 [0104.355] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE", nBufferLength=0x105, lpBuffer=0x12d390, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE", lpFilePart=0x0) returned 0x3f [0104.355] SetErrorMode (uMode=0x1) returned 0x0 [0104.355] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\*", lpFindFileData=0x12d530 | out: lpFindFileData=0x12d530*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a6f8e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d084c30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d084c30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x26bc80 [0104.357] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a6f8e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d084c30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d084c30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0104.357] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5a6f8e30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x53b, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1 [0104.357] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a053d00, ftCreationTime.dwHighDateTime=0x1cab7f2, ftLastAccessTime.dwLowDateTime=0x6d084c30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1a053d00, ftLastWriteTime.dwHighDateTime=0x1cab7f2, nFileSizeHigh=0x0, nFileSizeLow=0xb20e, dwReserved0=0x0, dwReserved1=0x0, cFileName="PROFILE.ELM", cAlternateFileName="")) returned 1 [0104.357] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d084c30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x24b, dwReserved0=0x0, dwReserved1=0x0, cFileName="PROFILE.INF", cAlternateFileName="")) returned 1 [0104.357] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x4162, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1 [0104.357] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x4162, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0 [0104.357] FindClose (in: hFindFile=0x26bc80 | out: hFindFile=0x26bc80) returned 1 [0104.357] SetErrorMode (uMode=0x0) returned 0x1 [0104.359] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\THMBNAIL.PNG", nBufferLength=0x105, lpBuffer=0x12d5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\THMBNAIL.PNG", lpFilePart=0x0) returned 0x4c [0104.359] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\THMBNAIL.PNG", nBufferLength=0x105, lpBuffer=0x12d590, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\THMBNAIL.PNG", lpFilePart=0x0) returned 0x4c [0104.359] SetErrorMode (uMode=0x1) returned 0x0 [0104.359] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\profile\\thmbnail.png"), fInfoLevelId=0x0, lpFileInformation=0x12d810 | out: lpFileInformation=0x12d810*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x4162)) returned 1 [0104.359] SetErrorMode (uMode=0x0) returned 0x1 [0104.359] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\THMBNAIL.PNG", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\THMBNAIL.PNG", lpFilePart=0x0) returned 0x4c [0104.360] SetErrorMode (uMode=0x1) returned 0x0 [0104.360] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\profile\\thmbnail.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x31c [0104.360] SetErrorMode (uMode=0x0) returned 0x1 [0104.360] GetFileType (hFile=0x31c) returned 0x1 [0104.360] GetFileSize (in: hFile=0x31c, lpFileSizeHigh=0x12d8c8 | out: lpFileSizeHigh=0x12d8c8*=0x0) returned 0x4162 [0104.360] ReadFile (in: hFile=0x31c, lpBuffer=0x2726140, nNumberOfBytesToRead=0x4162, lpNumberOfBytesRead=0x12d7a8, lpOverlapped=0x0 | out: lpBuffer=0x2726140*, lpNumberOfBytesRead=0x12d7a8*=0x4162, lpOverlapped=0x0) returned 1 [0104.380] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\THMBNAIL.PNG", nBufferLength=0x105, lpBuffer=0x12d270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\THMBNAIL.PNG", lpFilePart=0x0) returned 0x4c [0104.380] SetErrorMode (uMode=0x1) returned 0x0 [0104.380] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\profile\\thmbnail.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x31c [0104.382] SetErrorMode (uMode=0x0) returned 0x1 [0104.382] GetFileType (hFile=0x31c) returned 0x1 [0104.382] WriteFile (in: hFile=0x31c, lpBuffer=0x281a688*, nNumberOfBytesToWrite=0x4170, lpNumberOfBytesWritten=0x12d828, lpOverlapped=0x0 | out: lpBuffer=0x281a688*, lpNumberOfBytesWritten=0x12d828*=0x4170, lpOverlapped=0x0) returned 1 [0104.384] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\THMBNAIL.PNG", nBufferLength=0x105, lpBuffer=0x12d500, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\THMBNAIL.PNG", lpFilePart=0x0) returned 0x4c [0104.384] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\THMBNAIL.PNG.encryptedS", nBufferLength=0x105, lpBuffer=0x12d500, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\THMBNAIL.PNG.encryptedS", lpFilePart=0x0) returned 0x57 [0104.384] SetErrorMode (uMode=0x1) returned 0x0 [0104.384] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\profile\\thmbnail.png"), fInfoLevelId=0x0, lpFileInformation=0x12d750 | out: lpFileInformation=0x12d750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5e489290, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x4170)) returned 1 [0104.384] SetErrorMode (uMode=0x0) returned 0x1 [0104.384] MoveFileW (lpExistingFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\profile\\thmbnail.png"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\THMBNAIL.PNG.encryptedS" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\profile\\thmbnail.png.encrypteds")) returned 1 [0104.385] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\Decrypt Instructions.txt", nBufferLength=0x105, lpBuffer=0x12d240, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\Decrypt Instructions.txt", lpFilePart=0x0) returned 0x58 [0104.385] SetErrorMode (uMode=0x1) returned 0x0 [0104.385] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\Decrypt Instructions.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\profile\\decrypt instructions.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x31c [0105.104] SetErrorMode (uMode=0x0) returned 0x1 [0105.104] GetFileType (hFile=0x31c) returned 0x1 [0105.105] WriteFile (in: hFile=0x31c, lpBuffer=0x28229d0*, nNumberOfBytesToWrite=0x773, lpNumberOfBytesWritten=0x12d7a8, lpOverlapped=0x0 | out: lpBuffer=0x28229d0*, lpNumberOfBytesWritten=0x12d7a8*=0x773, lpOverlapped=0x0) returned 1 [0105.106] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE", nBufferLength=0x105, lpBuffer=0x12d430, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE", lpFilePart=0x0) returned 0x3f [0105.106] SetErrorMode (uMode=0x1) returned 0x0 [0105.106] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\*", lpFindFileData=0x12d5d0 | out: lpFindFileData=0x12d5d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a6f8e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x5eb611d0, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x5eb611d0, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x26bc80 [0105.106] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a6f8e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x5eb611d0, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x5eb611d0, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0105.106] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5e489290, ftCreationTime.dwHighDateTime=0x1d5e786, ftLastAccessTime.dwLowDateTime=0x5e489290, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x5eb611d0, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x773, dwReserved0=0x0, dwReserved1=0x0, cFileName="Decrypt Instructions.txt", cAlternateFileName="DECRYP~1.TXT")) returned 1 [0105.107] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5a6f8e30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x53b, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1 [0105.107] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a053d00, ftCreationTime.dwHighDateTime=0x1cab7f2, ftLastAccessTime.dwLowDateTime=0x6d084c30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1a053d00, ftLastWriteTime.dwHighDateTime=0x1cab7f2, nFileSizeHigh=0x0, nFileSizeLow=0xb20e, dwReserved0=0x0, dwReserved1=0x0, cFileName="PROFILE.ELM", cAlternateFileName="")) returned 1 [0105.107] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d084c30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x24b, dwReserved0=0x0, dwReserved1=0x0, cFileName="PROFILE.INF", cAlternateFileName="")) returned 1 [0105.107] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5e489290, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x4170, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG.encryptedS", cAlternateFileName="THMBNA~1.ENC")) returned 1 [0105.107] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5e489290, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x4170, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG.encryptedS", cAlternateFileName="THMBNA~1.ENC")) returned 0 [0105.107] FindClose (in: hFindFile=0x26bc80 | out: hFindFile=0x26bc80) returned 1 [0105.107] SetErrorMode (uMode=0x0) returned 0x1 [0105.107] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD", nBufferLength=0x105, lpBuffer=0x12d390, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD", lpFilePart=0x0) returned 0x3c [0105.107] SetErrorMode (uMode=0x1) returned 0x0 [0105.107] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\*", lpFindFileData=0x12d530 | out: lpFindFileData=0x12d530*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a6f8e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d489150, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x26bc80 [0105.109] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a6f8e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d489150, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0105.109] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5a71ef90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x59f, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1 [0105.109] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1b366a00, ftCreationTime.dwHighDateTime=0x1cab7f2, ftLastAccessTime.dwLowDateTime=0x5a8037d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1b366a00, ftLastWriteTime.dwHighDateTime=0x1cab7f2, nFileSizeHigh=0x0, nFileSizeLow=0xbba7, dwReserved0=0x0, dwReserved1=0x0, cFileName="QUAD.ELM", cAlternateFileName="")) returned 1 [0105.109] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d0d0ef0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x258, dwReserved0=0x0, dwReserved1=0x0, cFileName="QUAD.INF", cAlternateFileName="")) returned 1 [0105.109] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x90f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1 [0105.109] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x90f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0 [0105.109] FindClose (in: hFindFile=0x26bc80 | out: hFindFile=0x26bc80) returned 1 [0105.109] SetErrorMode (uMode=0x0) returned 0x1 [0105.110] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\THMBNAIL.PNG", nBufferLength=0x105, lpBuffer=0x12d5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\THMBNAIL.PNG", lpFilePart=0x0) returned 0x49 [0105.110] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\THMBNAIL.PNG", nBufferLength=0x105, lpBuffer=0x12d590, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\THMBNAIL.PNG", lpFilePart=0x0) returned 0x49 [0105.110] SetErrorMode (uMode=0x1) returned 0x0 [0105.110] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\quad\\thmbnail.png"), fInfoLevelId=0x0, lpFileInformation=0x12d810 | out: lpFileInformation=0x12d810*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x90f8)) returned 1 [0105.111] SetErrorMode (uMode=0x0) returned 0x1 [0105.111] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\THMBNAIL.PNG", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\THMBNAIL.PNG", lpFilePart=0x0) returned 0x49 [0105.111] SetErrorMode (uMode=0x1) returned 0x0 [0105.111] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\quad\\thmbnail.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x31c [0105.111] SetErrorMode (uMode=0x0) returned 0x1 [0105.111] GetFileType (hFile=0x31c) returned 0x1 [0105.111] GetFileSize (in: hFile=0x31c, lpFileSizeHigh=0x12d8c8 | out: lpFileSizeHigh=0x12d8c8*=0x0) returned 0x90f8 [0105.111] ReadFile (in: hFile=0x31c, lpBuffer=0x2826730, nNumberOfBytesToRead=0x90f8, lpNumberOfBytesRead=0x12d7a8, lpOverlapped=0x0 | out: lpBuffer=0x2826730*, lpNumberOfBytesRead=0x12d7a8*=0x90f8, lpOverlapped=0x0) returned 1 [0105.145] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\THMBNAIL.PNG", nBufferLength=0x105, lpBuffer=0x12d270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\THMBNAIL.PNG", lpFilePart=0x0) returned 0x49 [0105.145] SetErrorMode (uMode=0x1) returned 0x0 [0105.145] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\quad\\thmbnail.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x31c [0105.147] SetErrorMode (uMode=0x0) returned 0x1 [0105.147] GetFileType (hFile=0x31c) returned 0x1 [0105.147] WriteFile (in: hFile=0x31c, lpBuffer=0x272db68*, nNumberOfBytesToWrite=0x9100, lpNumberOfBytesWritten=0x12d828, lpOverlapped=0x0 | out: lpBuffer=0x272db68*, lpNumberOfBytesWritten=0x12d828*=0x9100, lpOverlapped=0x0) returned 1 [0105.154] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\THMBNAIL.PNG", nBufferLength=0x105, lpBuffer=0x12d500, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\THMBNAIL.PNG", lpFilePart=0x0) returned 0x49 [0105.155] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\THMBNAIL.PNG.encryptedS", nBufferLength=0x105, lpBuffer=0x12d500, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\THMBNAIL.PNG.encryptedS", lpFilePart=0x0) returned 0x54 [0105.155] SetErrorMode (uMode=0x1) returned 0x0 [0105.155] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\quad\\thmbnail.png"), fInfoLevelId=0x0, lpFileInformation=0x12d750 | out: lpFileInformation=0x12d750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5ebf9750, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x9100)) returned 1 [0105.155] SetErrorMode (uMode=0x0) returned 0x1 [0105.155] MoveFileW (lpExistingFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\quad\\thmbnail.png"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\THMBNAIL.PNG.encryptedS" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\quad\\thmbnail.png.encrypteds")) returned 1 [0105.156] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\Decrypt Instructions.txt", nBufferLength=0x105, lpBuffer=0x12d240, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\Decrypt Instructions.txt", lpFilePart=0x0) returned 0x55 [0105.156] SetErrorMode (uMode=0x1) returned 0x0 [0105.156] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\Decrypt Instructions.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\quad\\decrypt instructions.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x31c [0105.159] SetErrorMode (uMode=0x0) returned 0x1 [0105.159] GetFileType (hFile=0x31c) returned 0x1 [0105.159] WriteFile (in: hFile=0x31c, lpBuffer=0x273ae20*, nNumberOfBytesToWrite=0x773, lpNumberOfBytesWritten=0x12d7a8, lpOverlapped=0x0 | out: lpBuffer=0x273ae20*, lpNumberOfBytesWritten=0x12d7a8*=0x773, lpOverlapped=0x0) returned 1 [0105.161] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD", nBufferLength=0x105, lpBuffer=0x12d430, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD", lpFilePart=0x0) returned 0x3c [0105.161] SetErrorMode (uMode=0x1) returned 0x0 [0105.161] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\*", lpFindFileData=0x12d5d0 | out: lpFindFileData=0x12d5d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a6f8e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x5ebf9750, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x5ebf9750, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x26bc80 [0105.161] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a6f8e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x5ebf9750, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x5ebf9750, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0105.161] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5ebf9750, ftCreationTime.dwHighDateTime=0x1d5e786, ftLastAccessTime.dwLowDateTime=0x5ebf9750, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x5ebf9750, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x773, dwReserved0=0x0, dwReserved1=0x0, cFileName="Decrypt Instructions.txt", cAlternateFileName="DECRYP~1.TXT")) returned 1 [0105.161] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5a71ef90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x59f, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1 [0105.161] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1b366a00, ftCreationTime.dwHighDateTime=0x1cab7f2, ftLastAccessTime.dwLowDateTime=0x5a8037d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1b366a00, ftLastWriteTime.dwHighDateTime=0x1cab7f2, nFileSizeHigh=0x0, nFileSizeLow=0xbba7, dwReserved0=0x0, dwReserved1=0x0, cFileName="QUAD.ELM", cAlternateFileName="")) returned 1 [0105.161] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d0d0ef0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x258, dwReserved0=0x0, dwReserved1=0x0, cFileName="QUAD.INF", cAlternateFileName="")) returned 1 [0105.161] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5ebf9750, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x9100, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG.encryptedS", cAlternateFileName="THMBNA~1.ENC")) returned 1 [0105.162] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5ebf9750, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x9100, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG.encryptedS", cAlternateFileName="THMBNA~1.ENC")) returned 0 [0105.162] FindClose (in: hFindFile=0x26bc80 | out: hFindFile=0x26bc80) returned 1 [0105.162] SetErrorMode (uMode=0x0) returned 0x1 [0105.162] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL", nBufferLength=0x105, lpBuffer=0x12d390, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL", lpFilePart=0x0) returned 0x3e [0105.162] SetErrorMode (uMode=0x1) returned 0x0 [0105.162] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL\\*", lpFindFileData=0x12d530 | out: lpFindFileData=0x12d530*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a829930, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d0d0ef0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d0d0ef0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x26bc80 [0105.163] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a829930, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d0d0ef0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d0d0ef0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0105.163] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x682, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1 [0105.163] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1c679700, ftCreationTime.dwHighDateTime=0x1cab7f2, ftLastAccessTime.dwLowDateTime=0x5a829930, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1c679700, ftLastWriteTime.dwHighDateTime=0x1cab7f2, nFileSizeHigh=0x0, nFileSizeLow=0xb75e, dwReserved0=0x0, dwReserved1=0x0, cFileName="RADIAL.ELM", cAlternateFileName="")) returned 1 [0105.164] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d0d0ef0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x24a, dwReserved0=0x0, dwReserved1=0x0, cFileName="RADIAL.INF", cAlternateFileName="")) returned 1 [0105.164] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x4c6b, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1 [0105.164] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x4c6b, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0 [0105.164] FindClose (in: hFindFile=0x26bc80 | out: hFindFile=0x26bc80) returned 1 [0105.164] SetErrorMode (uMode=0x0) returned 0x1 [0105.165] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL\\THMBNAIL.PNG", nBufferLength=0x105, lpBuffer=0x12d5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL\\THMBNAIL.PNG", lpFilePart=0x0) returned 0x4b [0105.165] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL\\THMBNAIL.PNG", nBufferLength=0x105, lpBuffer=0x12d590, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL\\THMBNAIL.PNG", lpFilePart=0x0) returned 0x4b [0105.165] SetErrorMode (uMode=0x1) returned 0x0 [0105.165] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\radial\\thmbnail.png"), fInfoLevelId=0x0, lpFileInformation=0x12d810 | out: lpFileInformation=0x12d810*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x4c6b)) returned 1 [0105.166] SetErrorMode (uMode=0x0) returned 0x1 [0105.166] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL\\THMBNAIL.PNG", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL\\THMBNAIL.PNG", lpFilePart=0x0) returned 0x4b [0105.166] SetErrorMode (uMode=0x1) returned 0x0 [0105.166] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\radial\\thmbnail.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x31c [0105.166] SetErrorMode (uMode=0x0) returned 0x1 [0105.166] GetFileType (hFile=0x31c) returned 0x1 [0105.166] GetFileSize (in: hFile=0x31c, lpFileSizeHigh=0x12d8c8 | out: lpFileSizeHigh=0x12d8c8*=0x0) returned 0x4c6b [0105.166] ReadFile (in: hFile=0x31c, lpBuffer=0x273eb98, nNumberOfBytesToRead=0x4c6b, lpNumberOfBytesRead=0x12d7a8, lpOverlapped=0x0 | out: lpBuffer=0x273eb98*, lpNumberOfBytesRead=0x12d7a8*=0x4c6b, lpOverlapped=0x0) returned 1 [0105.189] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL\\THMBNAIL.PNG", nBufferLength=0x105, lpBuffer=0x12d270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL\\THMBNAIL.PNG", lpFilePart=0x0) returned 0x4b [0105.189] SetErrorMode (uMode=0x1) returned 0x0 [0105.189] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\radial\\thmbnail.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x31c [0105.191] SetErrorMode (uMode=0x0) returned 0x1 [0105.191] GetFileType (hFile=0x31c) returned 0x1 [0105.191] WriteFile (in: hFile=0x31c, lpBuffer=0x28367e0*, nNumberOfBytesToWrite=0x4c70, lpNumberOfBytesWritten=0x12d828, lpOverlapped=0x0 | out: lpBuffer=0x28367e0*, lpNumberOfBytesWritten=0x12d828*=0x4c70, lpOverlapped=0x0) returned 1 [0105.193] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL\\THMBNAIL.PNG", nBufferLength=0x105, lpBuffer=0x12d500, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL\\THMBNAIL.PNG", lpFilePart=0x0) returned 0x4b [0105.193] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL\\THMBNAIL.PNG.encryptedS", nBufferLength=0x105, lpBuffer=0x12d500, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL\\THMBNAIL.PNG.encryptedS", lpFilePart=0x0) returned 0x56 [0105.193] SetErrorMode (uMode=0x1) returned 0x0 [0105.193] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\radial\\thmbnail.png"), fInfoLevelId=0x0, lpFileInformation=0x12d750 | out: lpFileInformation=0x12d750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5ec45a10, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x4c70)) returned 1 [0105.193] SetErrorMode (uMode=0x0) returned 0x1 [0105.193] MoveFileW (lpExistingFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\radial\\thmbnail.png"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL\\THMBNAIL.PNG.encryptedS" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\radial\\thmbnail.png.encrypteds")) returned 1 [0105.194] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL\\Decrypt Instructions.txt", nBufferLength=0x105, lpBuffer=0x12d240, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL\\Decrypt Instructions.txt", lpFilePart=0x0) returned 0x57 [0105.194] SetErrorMode (uMode=0x1) returned 0x0 [0105.194] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL\\Decrypt Instructions.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\radial\\decrypt instructions.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x31c [0105.196] SetErrorMode (uMode=0x0) returned 0x1 [0105.196] GetFileType (hFile=0x31c) returned 0x1 [0105.196] WriteFile (in: hFile=0x31c, lpBuffer=0x283f608*, nNumberOfBytesToWrite=0x773, lpNumberOfBytesWritten=0x12d7a8, lpOverlapped=0x0 | out: lpBuffer=0x283f608*, lpNumberOfBytesWritten=0x12d7a8*=0x773, lpOverlapped=0x0) returned 1 [0105.198] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL", nBufferLength=0x105, lpBuffer=0x12d430, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL", lpFilePart=0x0) returned 0x3e [0105.198] SetErrorMode (uMode=0x1) returned 0x0 [0105.198] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL\\*", lpFindFileData=0x12d5d0 | out: lpFindFileData=0x12d5d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a829930, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x5ec45a10, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x5ec45a10, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x26bc80 [0105.198] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a829930, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x5ec45a10, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x5ec45a10, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0105.198] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5ec45a10, ftCreationTime.dwHighDateTime=0x1d5e786, ftLastAccessTime.dwLowDateTime=0x5ec45a10, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x5ec45a10, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x773, dwReserved0=0x0, dwReserved1=0x0, cFileName="Decrypt Instructions.txt", cAlternateFileName="DECRYP~1.TXT")) returned 1 [0105.198] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x682, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1 [0105.198] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1c679700, ftCreationTime.dwHighDateTime=0x1cab7f2, ftLastAccessTime.dwLowDateTime=0x5a829930, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1c679700, ftLastWriteTime.dwHighDateTime=0x1cab7f2, nFileSizeHigh=0x0, nFileSizeLow=0xb75e, dwReserved0=0x0, dwReserved1=0x0, cFileName="RADIAL.ELM", cAlternateFileName="")) returned 1 [0105.199] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d0d0ef0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x24a, dwReserved0=0x0, dwReserved1=0x0, cFileName="RADIAL.INF", cAlternateFileName="")) returned 1 [0105.199] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5ec45a10, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x4c70, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG.encryptedS", cAlternateFileName="THMBNA~1.ENC")) returned 1 [0105.199] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5ec45a10, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x4c70, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG.encryptedS", cAlternateFileName="THMBNA~1.ENC")) returned 0 [0105.199] FindClose (in: hFindFile=0x26bc80 | out: hFindFile=0x26bc80) returned 1 [0105.199] SetErrorMode (uMode=0x0) returned 0x1 [0105.199] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED", nBufferLength=0x105, lpBuffer=0x12d390, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED", lpFilePart=0x0) returned 0x3f [0105.199] SetErrorMode (uMode=0x1) returned 0x0 [0105.199] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED\\*", lpFindFileData=0x12d530 | out: lpFindFileData=0x12d530*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a84fa90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d0d0ef0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d0d0ef0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x26bc80 [0105.200] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a84fa90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d0d0ef0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d0d0ef0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0105.200] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x58f, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1 [0105.200] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1ec9f100, ftCreationTime.dwHighDateTime=0x1cab7f2, ftLastAccessTime.dwLowDateTime=0x6d0d0ef0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1ec9f100, ftLastWriteTime.dwHighDateTime=0x1cab7f2, nFileSizeHigh=0x0, nFileSizeLow=0xb30e, dwReserved0=0x0, dwReserved1=0x0, cFileName="REFINED.ELM", cAlternateFileName="")) returned 1 [0105.200] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5a84fa90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x24a, dwReserved0=0x0, dwReserved1=0x0, cFileName="REFINED.INF", cAlternateFileName="")) returned 1 [0105.200] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x3d79, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1 [0105.200] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x3d79, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0 [0105.200] FindClose (in: hFindFile=0x26bc80 | out: hFindFile=0x26bc80) returned 1 [0105.200] SetErrorMode (uMode=0x0) returned 0x1 [0105.202] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED\\THMBNAIL.PNG", nBufferLength=0x105, lpBuffer=0x12d5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED\\THMBNAIL.PNG", lpFilePart=0x0) returned 0x4c [0105.202] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED\\THMBNAIL.PNG", nBufferLength=0x105, lpBuffer=0x12d590, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED\\THMBNAIL.PNG", lpFilePart=0x0) returned 0x4c [0105.202] SetErrorMode (uMode=0x1) returned 0x0 [0105.202] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\refined\\thmbnail.png"), fInfoLevelId=0x0, lpFileInformation=0x12d810 | out: lpFileInformation=0x12d810*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x3d79)) returned 1 [0105.202] SetErrorMode (uMode=0x0) returned 0x1 [0105.202] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED\\THMBNAIL.PNG", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED\\THMBNAIL.PNG", lpFilePart=0x0) returned 0x4c [0105.202] SetErrorMode (uMode=0x1) returned 0x0 [0105.203] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\refined\\thmbnail.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x31c [0105.204] SetErrorMode (uMode=0x0) returned 0x1 [0105.204] GetFileType (hFile=0x31c) returned 0x1 [0105.204] GetFileSize (in: hFile=0x31c, lpFileSizeHigh=0x12d8c8 | out: lpFileSizeHigh=0x12d8c8*=0x0) returned 0x3d79 [0105.204] ReadFile (in: hFile=0x31c, lpBuffer=0x28433c0, nNumberOfBytesToRead=0x3d79, lpNumberOfBytesRead=0x12d7a8, lpOverlapped=0x0 | out: lpBuffer=0x28433c0*, lpNumberOfBytesRead=0x12d7a8*=0x3d79, lpOverlapped=0x0) returned 1 [0105.399] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED\\THMBNAIL.PNG", nBufferLength=0x105, lpBuffer=0x12d270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED\\THMBNAIL.PNG", lpFilePart=0x0) returned 0x4c [0105.399] SetErrorMode (uMode=0x1) returned 0x0 [0105.399] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\refined\\thmbnail.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x31c [0105.400] SetErrorMode (uMode=0x0) returned 0x1 [0105.400] GetFileType (hFile=0x31c) returned 0x1 [0105.400] WriteFile (in: hFile=0x31c, lpBuffer=0x274d148*, nNumberOfBytesToWrite=0x3d80, lpNumberOfBytesWritten=0x12d828, lpOverlapped=0x0 | out: lpBuffer=0x274d148*, lpNumberOfBytesWritten=0x12d828*=0x3d80, lpOverlapped=0x0) returned 1 [0105.402] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED\\THMBNAIL.PNG", nBufferLength=0x105, lpBuffer=0x12d500, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED\\THMBNAIL.PNG", lpFilePart=0x0) returned 0x4c [0105.402] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED\\THMBNAIL.PNG.encryptedS", nBufferLength=0x105, lpBuffer=0x12d500, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED\\THMBNAIL.PNG.encryptedS", lpFilePart=0x0) returned 0x57 [0105.402] SetErrorMode (uMode=0x1) returned 0x0 [0105.402] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\refined\\thmbnail.png"), fInfoLevelId=0x0, lpFileInformation=0x12d750 | out: lpFileInformation=0x12d750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5ee34bf0, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x3d80)) returned 1 [0105.402] SetErrorMode (uMode=0x0) returned 0x1 [0105.402] MoveFileW (lpExistingFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\refined\\thmbnail.png"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED\\THMBNAIL.PNG.encryptedS" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\refined\\thmbnail.png.encrypteds")) returned 1 [0105.404] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED\\Decrypt Instructions.txt", nBufferLength=0x105, lpBuffer=0x12d240, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED\\Decrypt Instructions.txt", lpFilePart=0x0) returned 0x58 [0105.404] SetErrorMode (uMode=0x1) returned 0x0 [0105.404] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED\\Decrypt Instructions.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\refined\\decrypt instructions.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x31c [0105.407] SetErrorMode (uMode=0x0) returned 0x1 [0105.407] GetFileType (hFile=0x31c) returned 0x1 [0105.408] WriteFile (in: hFile=0x31c, lpBuffer=0x27550a0*, nNumberOfBytesToWrite=0x773, lpNumberOfBytesWritten=0x12d7a8, lpOverlapped=0x0 | out: lpBuffer=0x27550a0*, lpNumberOfBytesWritten=0x12d7a8*=0x773, lpOverlapped=0x0) returned 1 [0105.410] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED", nBufferLength=0x105, lpBuffer=0x12d430, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED", lpFilePart=0x0) returned 0x3f [0105.410] SetErrorMode (uMode=0x1) returned 0x0 [0105.410] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED\\*", lpFindFileData=0x12d5d0 | out: lpFindFileData=0x12d5d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a84fa90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x5ee5ad50, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x5ee5ad50, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x26bc80 [0105.410] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a84fa90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x5ee5ad50, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x5ee5ad50, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0105.411] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5ee5ad50, ftCreationTime.dwHighDateTime=0x1d5e786, ftLastAccessTime.dwLowDateTime=0x5ee5ad50, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x5ee5ad50, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x773, dwReserved0=0x0, dwReserved1=0x0, cFileName="Decrypt Instructions.txt", cAlternateFileName="DECRYP~1.TXT")) returned 1 [0105.411] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x58f, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1 [0105.411] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1ec9f100, ftCreationTime.dwHighDateTime=0x1cab7f2, ftLastAccessTime.dwLowDateTime=0x6d0d0ef0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1ec9f100, ftLastWriteTime.dwHighDateTime=0x1cab7f2, nFileSizeHigh=0x0, nFileSizeLow=0xb30e, dwReserved0=0x0, dwReserved1=0x0, cFileName="REFINED.ELM", cAlternateFileName="")) returned 1 [0105.411] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5a84fa90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x24a, dwReserved0=0x0, dwReserved1=0x0, cFileName="REFINED.INF", cAlternateFileName="")) returned 1 [0105.411] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5ee34bf0, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x3d80, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG.encryptedS", cAlternateFileName="THMBNA~1.ENC")) returned 1 [0105.411] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5ee34bf0, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x3d80, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG.encryptedS", cAlternateFileName="THMBNA~1.ENC")) returned 0 [0105.411] FindClose (in: hFindFile=0x26bc80 | out: hFindFile=0x26bc80) returned 1 [0105.412] SetErrorMode (uMode=0x0) returned 0x1 [0105.412] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR", nBufferLength=0x105, lpBuffer=0x12d390, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR", lpFilePart=0x0) returned 0x40 [0105.413] SetErrorMode (uMode=0x1) returned 0x0 [0105.413] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR\\*", lpFindFileData=0x12d530 | out: lpFindFileData=0x12d530*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a89bd50, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d1db890, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d1db890, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x26bc80 [0105.416] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a89bd50, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d1db890, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d1db890, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0105.416] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0xf82, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1 [0105.416] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1ffb1e00, ftCreationTime.dwHighDateTime=0x1cab7f2, ftLastAccessTime.dwLowDateTime=0x5a89bd50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1ffb1e00, ftLastWriteTime.dwHighDateTime=0x1cab7f2, nFileSizeHigh=0x0, nFileSizeLow=0x1205e, dwReserved0=0x0, dwReserved1=0x0, cFileName="RICEPAPR.ELM", cAlternateFileName="")) returned 1 [0105.416] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d1db890, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x239, dwReserved0=0x0, dwReserved1=0x0, cFileName="RICEPAPR.INF", cAlternateFileName="")) returned 1 [0105.416] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0xcf7b, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1 [0105.416] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0xcf7b, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0 [0105.416] FindClose (in: hFindFile=0x26bc80 | out: hFindFile=0x26bc80) returned 1 [0105.416] SetErrorMode (uMode=0x0) returned 0x1 [0105.418] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR\\THMBNAIL.PNG", nBufferLength=0x105, lpBuffer=0x12d5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR\\THMBNAIL.PNG", lpFilePart=0x0) returned 0x4d [0105.418] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR\\THMBNAIL.PNG", nBufferLength=0x105, lpBuffer=0x12d590, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR\\THMBNAIL.PNG", lpFilePart=0x0) returned 0x4d [0105.418] SetErrorMode (uMode=0x1) returned 0x0 [0105.418] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\ricepapr\\thmbnail.png"), fInfoLevelId=0x0, lpFileInformation=0x12d810 | out: lpFileInformation=0x12d810*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0xcf7b)) returned 1 [0105.418] SetErrorMode (uMode=0x0) returned 0x1 [0105.418] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR\\THMBNAIL.PNG", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR\\THMBNAIL.PNG", lpFilePart=0x0) returned 0x4d [0105.418] SetErrorMode (uMode=0x1) returned 0x0 [0105.419] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\ricepapr\\thmbnail.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x31c [0105.419] SetErrorMode (uMode=0x0) returned 0x1 [0105.419] GetFileType (hFile=0x31c) returned 0x1 [0105.419] GetFileSize (in: hFile=0x31c, lpFileSizeHigh=0x12d8c8 | out: lpFileSizeHigh=0x12d8c8*=0x0) returned 0xcf7b [0105.419] ReadFile (in: hFile=0x31c, lpBuffer=0x2758e90, nNumberOfBytesToRead=0xcf7b, lpNumberOfBytesRead=0x12d7a8, lpOverlapped=0x0 | out: lpBuffer=0x2758e90*, lpNumberOfBytesRead=0x12d7a8*=0xcf7b, lpOverlapped=0x0) returned 1 [0105.444] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR\\THMBNAIL.PNG", nBufferLength=0x105, lpBuffer=0x12d270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR\\THMBNAIL.PNG", lpFilePart=0x0) returned 0x4d [0105.445] SetErrorMode (uMode=0x1) returned 0x0 [0105.445] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\ricepapr\\thmbnail.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x31c [0105.446] SetErrorMode (uMode=0x0) returned 0x1 [0105.447] GetFileType (hFile=0x31c) returned 0x1 [0105.447] WriteFile (in: hFile=0x31c, lpBuffer=0x285fb30*, nNumberOfBytesToWrite=0xcf80, lpNumberOfBytesWritten=0x12d828, lpOverlapped=0x0 | out: lpBuffer=0x285fb30*, lpNumberOfBytesWritten=0x12d828*=0xcf80, lpOverlapped=0x0) returned 1 [0105.449] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR\\THMBNAIL.PNG", nBufferLength=0x105, lpBuffer=0x12d500, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR\\THMBNAIL.PNG", lpFilePart=0x0) returned 0x4d [0105.449] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR\\THMBNAIL.PNG.encryptedS", nBufferLength=0x105, lpBuffer=0x12d500, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR\\THMBNAIL.PNG.encryptedS", lpFilePart=0x0) returned 0x58 [0105.449] SetErrorMode (uMode=0x1) returned 0x0 [0105.449] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\ricepapr\\thmbnail.png"), fInfoLevelId=0x0, lpFileInformation=0x12d750 | out: lpFileInformation=0x12d750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5eea7010, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0xcf80)) returned 1 [0105.449] SetErrorMode (uMode=0x0) returned 0x1 [0105.450] MoveFileW (lpExistingFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\ricepapr\\thmbnail.png"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR\\THMBNAIL.PNG.encryptedS" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\ricepapr\\thmbnail.png.encrypteds")) returned 1 [0105.457] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR\\Decrypt Instructions.txt", nBufferLength=0x105, lpBuffer=0x12d240, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR\\Decrypt Instructions.txt", lpFilePart=0x0) returned 0x59 [0105.457] SetErrorMode (uMode=0x1) returned 0x0 [0105.457] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR\\Decrypt Instructions.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\ricepapr\\decrypt instructions.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x31c [0105.464] SetErrorMode (uMode=0x0) returned 0x1 [0105.464] GetFileType (hFile=0x31c) returned 0x1 [0105.464] WriteFile (in: hFile=0x31c, lpBuffer=0x2870c98*, nNumberOfBytesToWrite=0x773, lpNumberOfBytesWritten=0x12d7a8, lpOverlapped=0x0 | out: lpBuffer=0x2870c98*, lpNumberOfBytesWritten=0x12d7a8*=0x773, lpOverlapped=0x0) returned 1 [0105.466] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR", nBufferLength=0x105, lpBuffer=0x12d430, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR", lpFilePart=0x0) returned 0x40 [0105.466] SetErrorMode (uMode=0x1) returned 0x0 [0105.466] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR\\*", lpFindFileData=0x12d5d0 | out: lpFindFileData=0x12d5d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a89bd50, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x5eecd170, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x5eecd170, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x26bc80 [0105.466] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a89bd50, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x5eecd170, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x5eecd170, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0105.466] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5eecd170, ftCreationTime.dwHighDateTime=0x1d5e786, ftLastAccessTime.dwLowDateTime=0x5eecd170, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x5eecd170, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x773, dwReserved0=0x0, dwReserved1=0x0, cFileName="Decrypt Instructions.txt", cAlternateFileName="DECRYP~1.TXT")) returned 1 [0105.466] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0xf82, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1 [0105.466] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1ffb1e00, ftCreationTime.dwHighDateTime=0x1cab7f2, ftLastAccessTime.dwLowDateTime=0x5a89bd50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1ffb1e00, ftLastWriteTime.dwHighDateTime=0x1cab7f2, nFileSizeHigh=0x0, nFileSizeLow=0x1205e, dwReserved0=0x0, dwReserved1=0x0, cFileName="RICEPAPR.ELM", cAlternateFileName="")) returned 1 [0105.467] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d1db890, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x239, dwReserved0=0x0, dwReserved1=0x0, cFileName="RICEPAPR.INF", cAlternateFileName="")) returned 1 [0105.467] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5eea7010, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0xcf80, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG.encryptedS", cAlternateFileName="THMBNA~1.ENC")) returned 1 [0105.467] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5eea7010, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0xcf80, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG.encryptedS", cAlternateFileName="THMBNA~1.ENC")) returned 0 [0105.467] FindClose (in: hFindFile=0x26bc80 | out: hFindFile=0x26bc80) returned 1 [0105.467] SetErrorMode (uMode=0x0) returned 0x1 [0105.467] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE", nBufferLength=0x105, lpBuffer=0x12d390, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE", lpFilePart=0x0) returned 0x3e [0105.467] SetErrorMode (uMode=0x1) returned 0x0 [0105.467] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE\\*", lpFindFileData=0x12d530 | out: lpFindFileData=0x12d530*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a71ef90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d489150, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x26bc80 [0105.468] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a71ef90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d489150, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0105.468] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5a71ef90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0xa2c, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1 [0105.468] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x212c4b00, ftCreationTime.dwHighDateTime=0x1cab7f2, ftLastAccessTime.dwLowDateTime=0x6d2019f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x212c4b00, ftLastWriteTime.dwHighDateTime=0x1cab7f2, nFileSizeHigh=0x0, nFileSizeLow=0x101e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RIPPLE.ELM", cAlternateFileName="")) returned 1 [0105.468] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5a89bd50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x1e7, dwReserved0=0x0, dwReserved1=0x0, cFileName="RIPPLE.INF", cAlternateFileName="")) returned 1 [0105.468] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x7ce7, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1 [0105.468] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x7ce7, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0 [0105.468] FindClose (in: hFindFile=0x26bc80 | out: hFindFile=0x26bc80) returned 1 [0105.468] SetErrorMode (uMode=0x0) returned 0x1 [0105.470] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE\\THMBNAIL.PNG", nBufferLength=0x105, lpBuffer=0x12d5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE\\THMBNAIL.PNG", lpFilePart=0x0) returned 0x4b [0105.470] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE\\THMBNAIL.PNG", nBufferLength=0x105, lpBuffer=0x12d590, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE\\THMBNAIL.PNG", lpFilePart=0x0) returned 0x4b [0105.470] SetErrorMode (uMode=0x1) returned 0x0 [0105.470] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\ripple\\thmbnail.png"), fInfoLevelId=0x0, lpFileInformation=0x12d810 | out: lpFileInformation=0x12d810*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x7ce7)) returned 1 [0105.512] SetErrorMode (uMode=0x0) returned 0x1 [0105.512] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE\\THMBNAIL.PNG", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE\\THMBNAIL.PNG", lpFilePart=0x0) returned 0x4b [0105.512] SetErrorMode (uMode=0x1) returned 0x0 [0105.512] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\ripple\\thmbnail.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x31c [0105.513] SetErrorMode (uMode=0x0) returned 0x1 [0105.513] GetFileType (hFile=0x31c) returned 0x1 [0105.513] GetFileSize (in: hFile=0x31c, lpFileSizeHigh=0x12d8c8 | out: lpFileSizeHigh=0x12d8c8*=0x0) returned 0x7ce7 [0105.513] ReadFile (in: hFile=0x31c, lpBuffer=0x2874a50, nNumberOfBytesToRead=0x7ce7, lpNumberOfBytesRead=0x12d7a8, lpOverlapped=0x0 | out: lpBuffer=0x2874a50*, lpNumberOfBytesRead=0x12d7a8*=0x7ce7, lpOverlapped=0x0) returned 1 [0105.541] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE\\THMBNAIL.PNG", nBufferLength=0x105, lpBuffer=0x12d270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE\\THMBNAIL.PNG", lpFilePart=0x0) returned 0x4b [0105.541] SetErrorMode (uMode=0x1) returned 0x0 [0105.541] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\ripple\\thmbnail.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x31c [0105.543] SetErrorMode (uMode=0x0) returned 0x1 [0105.543] GetFileType (hFile=0x31c) returned 0x1 [0105.543] WriteFile (in: hFile=0x31c, lpBuffer=0x27632b0*, nNumberOfBytesToWrite=0x7cf0, lpNumberOfBytesWritten=0x12d828, lpOverlapped=0x0 | out: lpBuffer=0x27632b0*, lpNumberOfBytesWritten=0x12d828*=0x7cf0, lpOverlapped=0x0) returned 1 [0105.545] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE\\THMBNAIL.PNG", nBufferLength=0x105, lpBuffer=0x12d500, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE\\THMBNAIL.PNG", lpFilePart=0x0) returned 0x4b [0105.545] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE\\THMBNAIL.PNG.encryptedS", nBufferLength=0x105, lpBuffer=0x12d500, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE\\THMBNAIL.PNG.encryptedS", lpFilePart=0x0) returned 0x56 [0105.545] SetErrorMode (uMode=0x1) returned 0x0 [0105.545] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\ripple\\thmbnail.png"), fInfoLevelId=0x0, lpFileInformation=0x12d750 | out: lpFileInformation=0x12d750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5efb19b0, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x7cf0)) returned 1 [0105.546] SetErrorMode (uMode=0x0) returned 0x1 [0105.546] MoveFileW (lpExistingFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\ripple\\thmbnail.png"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE\\THMBNAIL.PNG.encryptedS" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\ripple\\thmbnail.png.encrypteds")) returned 1 [0105.546] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE\\Decrypt Instructions.txt", nBufferLength=0x105, lpBuffer=0x12d240, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE\\Decrypt Instructions.txt", lpFilePart=0x0) returned 0x57 [0105.547] SetErrorMode (uMode=0x1) returned 0x0 [0105.547] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE\\Decrypt Instructions.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\ripple\\decrypt instructions.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x31c [0105.550] SetErrorMode (uMode=0x0) returned 0x1 [0105.550] GetFileType (hFile=0x31c) returned 0x1 [0105.550] WriteFile (in: hFile=0x31c, lpBuffer=0x276f158*, nNumberOfBytesToWrite=0x773, lpNumberOfBytesWritten=0x12d7a8, lpOverlapped=0x0 | out: lpBuffer=0x276f158*, lpNumberOfBytesWritten=0x12d7a8*=0x773, lpOverlapped=0x0) returned 1 [0105.551] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE", nBufferLength=0x105, lpBuffer=0x12d430, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE", lpFilePart=0x0) returned 0x3e [0105.551] SetErrorMode (uMode=0x1) returned 0x0 [0105.551] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE\\*", lpFindFileData=0x12d5d0 | out: lpFindFileData=0x12d5d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a71ef90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x5efb19b0, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x5efb19b0, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x26bc80 [0105.552] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a71ef90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x5efb19b0, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x5efb19b0, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0105.552] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5efb19b0, ftCreationTime.dwHighDateTime=0x1d5e786, ftLastAccessTime.dwLowDateTime=0x5efb19b0, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x5efb19b0, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x773, dwReserved0=0x0, dwReserved1=0x0, cFileName="Decrypt Instructions.txt", cAlternateFileName="DECRYP~1.TXT")) returned 1 [0105.552] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5a71ef90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0xa2c, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1 [0105.552] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x212c4b00, ftCreationTime.dwHighDateTime=0x1cab7f2, ftLastAccessTime.dwLowDateTime=0x6d2019f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x212c4b00, ftLastWriteTime.dwHighDateTime=0x1cab7f2, nFileSizeHigh=0x0, nFileSizeLow=0x101e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RIPPLE.ELM", cAlternateFileName="")) returned 1 [0105.552] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5a89bd50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x1e7, dwReserved0=0x0, dwReserved1=0x0, cFileName="RIPPLE.INF", cAlternateFileName="")) returned 1 [0105.552] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5efb19b0, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x7cf0, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG.encryptedS", cAlternateFileName="THMBNA~1.ENC")) returned 1 [0105.552] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5efb19b0, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x7cf0, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG.encryptedS", cAlternateFileName="THMBNA~1.ENC")) returned 0 [0105.552] FindClose (in: hFindFile=0x26bc80 | out: hFindFile=0x26bc80) returned 1 [0105.552] SetErrorMode (uMode=0x0) returned 0x1 [0105.552] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE", nBufferLength=0x105, lpBuffer=0x12d390, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE", lpFilePart=0x0) returned 0x3f [0105.552] SetErrorMode (uMode=0x1) returned 0x0 [0105.553] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE\\*", lpFindFileData=0x12d530 | out: lpFindFileData=0x12d530*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a71ef90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d489150, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x26bc80 [0105.554] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a71ef90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d489150, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0105.554] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5a71ef90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x1004, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1 [0105.554] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x225d7800, ftCreationTime.dwHighDateTime=0x1cab7f2, ftLastAccessTime.dwLowDateTime=0x6d2019f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x225d7800, ftLastWriteTime.dwHighDateTime=0x1cab7f2, nFileSizeHigh=0x0, nFileSizeLow=0x11e37, dwReserved0=0x0, dwReserved1=0x0, cFileName="RMNSQUE.ELM", cAlternateFileName="")) returned 1 [0105.554] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5a89bd50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x265, dwReserved0=0x0, dwReserved1=0x0, cFileName="RMNSQUE.INF", cAlternateFileName="")) returned 1 [0105.554] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d4d5410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0xbb5a, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1 [0105.554] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d4d5410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0xbb5a, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0 [0105.554] FindClose (in: hFindFile=0x26bc80 | out: hFindFile=0x26bc80) returned 1 [0105.554] SetErrorMode (uMode=0x0) returned 0x1 [0105.555] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE\\THMBNAIL.PNG", nBufferLength=0x105, lpBuffer=0x12d5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE\\THMBNAIL.PNG", lpFilePart=0x0) returned 0x4c [0105.555] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE\\THMBNAIL.PNG", nBufferLength=0x105, lpBuffer=0x12d590, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE\\THMBNAIL.PNG", lpFilePart=0x0) returned 0x4c [0105.556] SetErrorMode (uMode=0x1) returned 0x0 [0105.556] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\rmnsque\\thmbnail.png"), fInfoLevelId=0x0, lpFileInformation=0x12d810 | out: lpFileInformation=0x12d810*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d4d5410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0xbb5a)) returned 1 [0105.556] SetErrorMode (uMode=0x0) returned 0x1 [0105.556] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE\\THMBNAIL.PNG", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE\\THMBNAIL.PNG", lpFilePart=0x0) returned 0x4c [0105.556] SetErrorMode (uMode=0x1) returned 0x0 [0105.556] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\rmnsque\\thmbnail.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x31c [0105.556] SetErrorMode (uMode=0x0) returned 0x1 [0105.557] GetFileType (hFile=0x31c) returned 0x1 [0105.557] GetFileSize (in: hFile=0x31c, lpFileSizeHigh=0x12d8c8 | out: lpFileSizeHigh=0x12d8c8*=0x0) returned 0xbb5a [0105.557] ReadFile (in: hFile=0x31c, lpBuffer=0x2772f10, nNumberOfBytesToRead=0xbb5a, lpNumberOfBytesRead=0x12d7a8, lpOverlapped=0x0 | out: lpBuffer=0x2772f10*, lpNumberOfBytesRead=0x12d7a8*=0xbb5a, lpOverlapped=0x0) returned 1 [0106.047] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE\\THMBNAIL.PNG", nBufferLength=0x105, lpBuffer=0x12d270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE\\THMBNAIL.PNG", lpFilePart=0x0) returned 0x4c [0106.047] SetErrorMode (uMode=0x1) returned 0x0 [0106.047] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\rmnsque\\thmbnail.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x31c [0106.049] SetErrorMode (uMode=0x0) returned 0x1 [0106.049] GetFileType (hFile=0x31c) returned 0x1 [0106.049] WriteFile (in: hFile=0x31c, lpBuffer=0x2875f50*, nNumberOfBytesToWrite=0xbb60, lpNumberOfBytesWritten=0x12d828, lpOverlapped=0x0 | out: lpBuffer=0x2875f50*, lpNumberOfBytesWritten=0x12d828*=0xbb60, lpOverlapped=0x0) returned 1 [0106.051] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE\\THMBNAIL.PNG", nBufferLength=0x105, lpBuffer=0x12d500, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE\\THMBNAIL.PNG", lpFilePart=0x0) returned 0x4c [0106.051] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE\\THMBNAIL.PNG.encryptedS", nBufferLength=0x105, lpBuffer=0x12d500, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE\\THMBNAIL.PNG.encryptedS", lpFilePart=0x0) returned 0x57 [0106.051] SetErrorMode (uMode=0x1) returned 0x0 [0106.051] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\rmnsque\\thmbnail.png"), fInfoLevelId=0x0, lpFileInformation=0x12d750 | out: lpFileInformation=0x12d750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d4d5410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5f4745b0, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0xbb60)) returned 1 [0106.051] SetErrorMode (uMode=0x0) returned 0x1 [0106.052] MoveFileW (lpExistingFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\rmnsque\\thmbnail.png"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE\\THMBNAIL.PNG.encryptedS" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\rmnsque\\thmbnail.png.encrypteds")) returned 1 [0106.055] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE\\Decrypt Instructions.txt", nBufferLength=0x105, lpBuffer=0x12d240, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE\\Decrypt Instructions.txt", lpFilePart=0x0) returned 0x58 [0106.055] SetErrorMode (uMode=0x1) returned 0x0 [0106.055] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE\\Decrypt Instructions.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\rmnsque\\decrypt instructions.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x31c [0106.615] SetErrorMode (uMode=0x0) returned 0x1 [0106.615] GetFileType (hFile=0x31c) returned 0x1 [0106.615] WriteFile (in: hFile=0x31c, lpBuffer=0x2885c88*, nNumberOfBytesToWrite=0x773, lpNumberOfBytesWritten=0x12d7a8, lpOverlapped=0x0 | out: lpBuffer=0x2885c88*, lpNumberOfBytesWritten=0x12d7a8*=0x773, lpOverlapped=0x0) returned 1 [0106.617] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE", nBufferLength=0x105, lpBuffer=0x12d430, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE", lpFilePart=0x0) returned 0x3f [0106.617] SetErrorMode (uMode=0x1) returned 0x0 [0106.617] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE\\*", lpFindFileData=0x12d5d0 | out: lpFindFileData=0x12d5d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a71ef90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x5f9cf730, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x5f9cf730, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x26bc80 [0106.617] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a71ef90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x5f9cf730, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x5f9cf730, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0106.617] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f4745b0, ftCreationTime.dwHighDateTime=0x1d5e786, ftLastAccessTime.dwLowDateTime=0x5f4745b0, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x5f9cf730, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x773, dwReserved0=0x0, dwReserved1=0x0, cFileName="Decrypt Instructions.txt", cAlternateFileName="DECRYP~1.TXT")) returned 1 [0106.617] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5a71ef90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x1004, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1 [0106.617] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x225d7800, ftCreationTime.dwHighDateTime=0x1cab7f2, ftLastAccessTime.dwLowDateTime=0x6d2019f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x225d7800, ftLastWriteTime.dwHighDateTime=0x1cab7f2, nFileSizeHigh=0x0, nFileSizeLow=0x11e37, dwReserved0=0x0, dwReserved1=0x0, cFileName="RMNSQUE.ELM", cAlternateFileName="")) returned 1 [0106.617] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5a89bd50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x265, dwReserved0=0x0, dwReserved1=0x0, cFileName="RMNSQUE.INF", cAlternateFileName="")) returned 1 [0106.618] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d4d5410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5f4745b0, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0xbb60, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG.encryptedS", cAlternateFileName="THMBNA~1.ENC")) returned 1 [0106.618] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d4d5410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5f4745b0, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0xbb60, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG.encryptedS", cAlternateFileName="THMBNA~1.ENC")) returned 0 [0106.618] FindClose (in: hFindFile=0x26bc80 | out: hFindFile=0x26bc80) returned 1 [0106.618] SetErrorMode (uMode=0x0) returned 0x1 [0106.618] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN", nBufferLength=0x105, lpBuffer=0x12d390, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN", lpFilePart=0x0) returned 0x3d [0106.618] SetErrorMode (uMode=0x1) returned 0x0 [0106.618] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN\\*", lpFindFileData=0x12d530 | out: lpFindFileData=0x12d530*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a71ef90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d24dcb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d24dcb0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x26bc80 [0106.619] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a71ef90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d24dcb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d24dcb0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0106.619] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5a71ef90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0xe1b, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1 [0106.619] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x24bfd200, ftCreationTime.dwHighDateTime=0x1cab7f2, ftLastAccessTime.dwLowDateTime=0x6d24dcb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x24bfd200, ftLastWriteTime.dwHighDateTime=0x1cab7f2, nFileSizeHigh=0x0, nFileSizeLow=0x1936f, dwReserved0=0x0, dwReserved1=0x0, cFileName="SATIN.ELM", cAlternateFileName="")) returned 1 [0106.619] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d24dcb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x1c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="SATIN.INF", cAlternateFileName="")) returned 1 [0106.619] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x8573, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1 [0106.619] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x8573, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0 [0106.619] FindClose (in: hFindFile=0x26bc80 | out: hFindFile=0x26bc80) returned 1 [0106.619] SetErrorMode (uMode=0x0) returned 0x1 [0106.620] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN\\THMBNAIL.PNG", nBufferLength=0x105, lpBuffer=0x12d5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN\\THMBNAIL.PNG", lpFilePart=0x0) returned 0x4a [0106.625] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN\\THMBNAIL.PNG", nBufferLength=0x105, lpBuffer=0x12d590, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN\\THMBNAIL.PNG", lpFilePart=0x0) returned 0x4a [0106.625] SetErrorMode (uMode=0x1) returned 0x0 [0106.625] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\satin\\thmbnail.png"), fInfoLevelId=0x0, lpFileInformation=0x12d810 | out: lpFileInformation=0x12d810*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x8573)) returned 1 [0106.627] SetErrorMode (uMode=0x0) returned 0x1 [0106.627] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN\\THMBNAIL.PNG", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN\\THMBNAIL.PNG", lpFilePart=0x0) returned 0x4a [0106.627] SetErrorMode (uMode=0x1) returned 0x0 [0106.627] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\satin\\thmbnail.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x31c [0106.627] SetErrorMode (uMode=0x0) returned 0x1 [0106.627] GetFileType (hFile=0x31c) returned 0x1 [0106.628] GetFileSize (in: hFile=0x31c, lpFileSizeHigh=0x12d8c8 | out: lpFileSizeHigh=0x12d8c8*=0x0) returned 0x8573 [0106.628] ReadFile (in: hFile=0x31c, lpBuffer=0x28899e8, nNumberOfBytesToRead=0x8573, lpNumberOfBytesRead=0x12d7a8, lpOverlapped=0x0 | out: lpBuffer=0x28899e8*, lpNumberOfBytesRead=0x12d7a8*=0x8573, lpOverlapped=0x0) returned 1 [0106.655] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN\\THMBNAIL.PNG", nBufferLength=0x105, lpBuffer=0x12d270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN\\THMBNAIL.PNG", lpFilePart=0x0) returned 0x4a [0106.655] SetErrorMode (uMode=0x1) returned 0x0 [0106.655] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\satin\\thmbnail.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x31c [0106.657] SetErrorMode (uMode=0x0) returned 0x1 [0106.657] GetFileType (hFile=0x31c) returned 0x1 [0106.657] WriteFile (in: hFile=0x31c, lpBuffer=0x27abf38*, nNumberOfBytesToWrite=0x8580, lpNumberOfBytesWritten=0x12d828, lpOverlapped=0x0 | out: lpBuffer=0x27abf38*, lpNumberOfBytesWritten=0x12d828*=0x8580, lpOverlapped=0x0) returned 1 [0106.659] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN\\THMBNAIL.PNG", nBufferLength=0x105, lpBuffer=0x12d500, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN\\THMBNAIL.PNG", lpFilePart=0x0) returned 0x4a [0106.659] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN\\THMBNAIL.PNG.encryptedS", nBufferLength=0x105, lpBuffer=0x12d500, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN\\THMBNAIL.PNG.encryptedS", lpFilePart=0x0) returned 0x55 [0106.659] SetErrorMode (uMode=0x1) returned 0x0 [0106.659] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\satin\\thmbnail.png"), fInfoLevelId=0x0, lpFileInformation=0x12d750 | out: lpFileInformation=0x12d750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5fa41b50, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x8580)) returned 1 [0106.659] SetErrorMode (uMode=0x0) returned 0x1 [0106.660] MoveFileW (lpExistingFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\satin\\thmbnail.png"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN\\THMBNAIL.PNG.encryptedS" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\satin\\thmbnail.png.encrypteds")) returned 1 [0106.660] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN\\Decrypt Instructions.txt", nBufferLength=0x105, lpBuffer=0x12d240, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN\\Decrypt Instructions.txt", lpFilePart=0x0) returned 0x56 [0106.660] SetErrorMode (uMode=0x1) returned 0x0 [0106.660] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN\\Decrypt Instructions.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\satin\\decrypt instructions.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x31c [0106.664] SetErrorMode (uMode=0x0) returned 0x1 [0106.665] GetFileType (hFile=0x31c) returned 0x1 [0106.665] WriteFile (in: hFile=0x31c, lpBuffer=0x27b8670*, nNumberOfBytesToWrite=0x773, lpNumberOfBytesWritten=0x12d7a8, lpOverlapped=0x0 | out: lpBuffer=0x27b8670*, lpNumberOfBytesWritten=0x12d7a8*=0x773, lpOverlapped=0x0) returned 1 [0106.666] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN", nBufferLength=0x105, lpBuffer=0x12d430, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN", lpFilePart=0x0) returned 0x3d [0106.666] SetErrorMode (uMode=0x1) returned 0x0 [0106.666] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN\\*", lpFindFileData=0x12d5d0 | out: lpFindFileData=0x12d5d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a71ef90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x5fa41b50, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x5fa41b50, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x26bc80 [0106.667] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a71ef90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x5fa41b50, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x5fa41b50, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0106.667] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5fa41b50, ftCreationTime.dwHighDateTime=0x1d5e786, ftLastAccessTime.dwLowDateTime=0x5fa41b50, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x5fa41b50, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x773, dwReserved0=0x0, dwReserved1=0x0, cFileName="Decrypt Instructions.txt", cAlternateFileName="DECRYP~1.TXT")) returned 1 [0106.667] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5a71ef90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0xe1b, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1 [0106.667] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x24bfd200, ftCreationTime.dwHighDateTime=0x1cab7f2, ftLastAccessTime.dwLowDateTime=0x6d24dcb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x24bfd200, ftLastWriteTime.dwHighDateTime=0x1cab7f2, nFileSizeHigh=0x0, nFileSizeLow=0x1936f, dwReserved0=0x0, dwReserved1=0x0, cFileName="SATIN.ELM", cAlternateFileName="")) returned 1 [0106.667] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d24dcb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x1c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="SATIN.INF", cAlternateFileName="")) returned 1 [0106.667] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5fa41b50, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x8580, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG.encryptedS", cAlternateFileName="THMBNA~1.ENC")) returned 1 [0106.667] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5fa41b50, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x8580, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG.encryptedS", cAlternateFileName="THMBNA~1.ENC")) returned 0 [0106.667] FindClose (in: hFindFile=0x26bc80 | out: hFindFile=0x26bc80) returned 1 [0106.667] SetErrorMode (uMode=0x0) returned 0x1 [0106.668] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY", nBufferLength=0x105, lpBuffer=0x12d390, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY", lpFilePart=0x0) returned 0x3b [0106.668] SetErrorMode (uMode=0x1) returned 0x0 [0106.668] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\*", lpFindFileData=0x12d530 | out: lpFindFileData=0x12d530*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a980590, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d2c00d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d2c00d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x26bc80 [0106.670] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a980590, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d2c00d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d2c00d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0106.670] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x3a9, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1 [0106.670] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x25f0ff00, ftCreationTime.dwHighDateTime=0x1cab7f2, ftLastAccessTime.dwLowDateTime=0x6d2c00d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x25f0ff00, ftLastWriteTime.dwHighDateTime=0x1cab7f2, nFileSizeHigh=0x0, nFileSizeLow=0x1413d, dwReserved0=0x0, dwReserved1=0x0, cFileName="SKY.ELM", cAlternateFileName="")) returned 1 [0106.670] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5a980590, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x1bc, dwReserved0=0x0, dwReserved1=0x0, cFileName="SKY.INF", cAlternateFileName="")) returned 1 [0106.670] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x7279, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1 [0106.670] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x7279, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0 [0106.671] FindClose (in: hFindFile=0x26bc80 | out: hFindFile=0x26bc80) returned 1 [0106.671] SetErrorMode (uMode=0x0) returned 0x1 [0106.672] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\THMBNAIL.PNG", nBufferLength=0x105, lpBuffer=0x12d5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\THMBNAIL.PNG", lpFilePart=0x0) returned 0x48 [0106.672] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\THMBNAIL.PNG", nBufferLength=0x105, lpBuffer=0x12d590, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\THMBNAIL.PNG", lpFilePart=0x0) returned 0x48 [0106.672] SetErrorMode (uMode=0x1) returned 0x0 [0106.672] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\sky\\thmbnail.png"), fInfoLevelId=0x0, lpFileInformation=0x12d810 | out: lpFileInformation=0x12d810*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x7279)) returned 1 [0106.672] SetErrorMode (uMode=0x0) returned 0x1 [0106.673] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\THMBNAIL.PNG", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\THMBNAIL.PNG", lpFilePart=0x0) returned 0x48 [0106.673] SetErrorMode (uMode=0x1) returned 0x0 [0106.673] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\sky\\thmbnail.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x31c [0106.673] SetErrorMode (uMode=0x0) returned 0x1 [0106.673] GetFileType (hFile=0x31c) returned 0x1 [0106.673] GetFileSize (in: hFile=0x31c, lpFileSizeHigh=0x12d8c8 | out: lpFileSizeHigh=0x12d8c8*=0x0) returned 0x7279 [0106.673] ReadFile (in: hFile=0x31c, lpBuffer=0x27bc378, nNumberOfBytesToRead=0x7279, lpNumberOfBytesRead=0x12d7a8, lpOverlapped=0x0 | out: lpBuffer=0x27bc378*, lpNumberOfBytesRead=0x12d7a8*=0x7279, lpOverlapped=0x0) returned 1 [0106.696] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\THMBNAIL.PNG", nBufferLength=0x105, lpBuffer=0x12d270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\THMBNAIL.PNG", lpFilePart=0x0) returned 0x48 [0106.696] SetErrorMode (uMode=0x1) returned 0x0 [0106.696] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\sky\\thmbnail.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x31c [0106.697] SetErrorMode (uMode=0x0) returned 0x1 [0106.697] GetFileType (hFile=0x31c) returned 0x1 [0106.697] WriteFile (in: hFile=0x31c, lpBuffer=0x28bfe10*, nNumberOfBytesToWrite=0x7280, lpNumberOfBytesWritten=0x12d828, lpOverlapped=0x0 | out: lpBuffer=0x28bfe10*, lpNumberOfBytesWritten=0x12d828*=0x7280, lpOverlapped=0x0) returned 1 [0106.701] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\THMBNAIL.PNG", nBufferLength=0x105, lpBuffer=0x12d500, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\THMBNAIL.PNG", lpFilePart=0x0) returned 0x48 [0106.701] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\THMBNAIL.PNG.encryptedS", nBufferLength=0x105, lpBuffer=0x12d500, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\THMBNAIL.PNG.encryptedS", lpFilePart=0x0) returned 0x53 [0106.701] SetErrorMode (uMode=0x1) returned 0x0 [0106.701] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\sky\\thmbnail.png"), fInfoLevelId=0x0, lpFileInformation=0x12d750 | out: lpFileInformation=0x12d750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5fab3f70, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x7280)) returned 1 [0106.701] SetErrorMode (uMode=0x0) returned 0x1 [0106.701] MoveFileW (lpExistingFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\sky\\thmbnail.png"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\THMBNAIL.PNG.encryptedS" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\sky\\thmbnail.png.encrypteds")) returned 1 [0106.702] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\Decrypt Instructions.txt", nBufferLength=0x105, lpBuffer=0x12d240, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\Decrypt Instructions.txt", lpFilePart=0x0) returned 0x54 [0106.702] SetErrorMode (uMode=0x1) returned 0x0 [0106.702] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\Decrypt Instructions.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\sky\\decrypt instructions.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x31c [0106.728] SetErrorMode (uMode=0x0) returned 0x1 [0106.728] GetFileType (hFile=0x31c) returned 0x1 [0106.728] WriteFile (in: hFile=0x31c, lpBuffer=0x28cb238*, nNumberOfBytesToWrite=0x773, lpNumberOfBytesWritten=0x12d7a8, lpOverlapped=0x0 | out: lpBuffer=0x28cb238*, lpNumberOfBytesWritten=0x12d7a8*=0x773, lpOverlapped=0x0) returned 1 [0106.729] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY", nBufferLength=0x105, lpBuffer=0x12d430, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY", lpFilePart=0x0) returned 0x3b [0106.729] SetErrorMode (uMode=0x1) returned 0x0 [0106.729] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\*", lpFindFileData=0x12d5d0 | out: lpFindFileData=0x12d5d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a980590, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x5fada0d0, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x5fada0d0, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x26bc80 [0106.730] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a980590, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x5fada0d0, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x5fada0d0, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0106.730] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5fab3f70, ftCreationTime.dwHighDateTime=0x1d5e786, ftLastAccessTime.dwLowDateTime=0x5fab3f70, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x5fada0d0, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x773, dwReserved0=0x0, dwReserved1=0x0, cFileName="Decrypt Instructions.txt", cAlternateFileName="DECRYP~1.TXT")) returned 1 [0106.731] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x3a9, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1 [0106.731] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x25f0ff00, ftCreationTime.dwHighDateTime=0x1cab7f2, ftLastAccessTime.dwLowDateTime=0x6d2c00d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x25f0ff00, ftLastWriteTime.dwHighDateTime=0x1cab7f2, nFileSizeHigh=0x0, nFileSizeLow=0x1413d, dwReserved0=0x0, dwReserved1=0x0, cFileName="SKY.ELM", cAlternateFileName="")) returned 1 [0106.731] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5a980590, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x1bc, dwReserved0=0x0, dwReserved1=0x0, cFileName="SKY.INF", cAlternateFileName="")) returned 1 [0106.731] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5fab3f70, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x7280, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG.encryptedS", cAlternateFileName="THMBNA~1.ENC")) returned 1 [0106.731] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5fab3f70, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x7280, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG.encryptedS", cAlternateFileName="THMBNA~1.ENC")) returned 0 [0106.731] FindClose (in: hFindFile=0x26bc80 | out: hFindFile=0x26bc80) returned 1 [0106.731] SetErrorMode (uMode=0x0) returned 0x1 [0106.731] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE", nBufferLength=0x105, lpBuffer=0x12d390, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE", lpFilePart=0x0) returned 0x3d [0106.731] SetErrorMode (uMode=0x1) returned 0x0 [0106.731] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\*", lpFindFileData=0x12d530 | out: lpFindFileData=0x12d530*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a980590, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d4d5410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d4d5410, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x26bc80 [0106.965] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a980590, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d4d5410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d4d5410, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0106.965] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d084c30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x3f1, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1 [0106.965] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27222c00, ftCreationTime.dwHighDateTime=0x1cab7f2, ftLastAccessTime.dwLowDateTime=0x5a9f29b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x27222c00, ftLastWriteTime.dwHighDateTime=0x1cab7f2, nFileSizeHigh=0x0, nFileSizeLow=0x14c40, dwReserved0=0x0, dwReserved1=0x0, cFileName="SLATE.ELM", cAlternateFileName="")) returned 1 [0106.965] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5a9f29b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x1f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="SLATE.INF", cAlternateFileName="")) returned 1 [0106.965] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d4d5410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x6a29, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1 [0106.965] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d4d5410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x6a29, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0 [0106.965] FindClose (in: hFindFile=0x26bc80 | out: hFindFile=0x26bc80) returned 1 [0106.965] SetErrorMode (uMode=0x0) returned 0x1 [0106.979] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\THMBNAIL.PNG", nBufferLength=0x105, lpBuffer=0x12d5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\THMBNAIL.PNG", lpFilePart=0x0) returned 0x4a [0106.980] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\THMBNAIL.PNG", nBufferLength=0x105, lpBuffer=0x12d590, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\THMBNAIL.PNG", lpFilePart=0x0) returned 0x4a [0106.980] SetErrorMode (uMode=0x1) returned 0x0 [0106.980] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\slate\\thmbnail.png"), fInfoLevelId=0x0, lpFileInformation=0x12d810 | out: lpFileInformation=0x12d810*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d4d5410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x6a29)) returned 1 [0106.980] SetErrorMode (uMode=0x0) returned 0x1 [0106.980] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\THMBNAIL.PNG", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\THMBNAIL.PNG", lpFilePart=0x0) returned 0x4a [0106.981] SetErrorMode (uMode=0x1) returned 0x0 [0106.981] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\slate\\thmbnail.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x31c [0106.981] SetErrorMode (uMode=0x0) returned 0x1 [0106.981] GetFileType (hFile=0x31c) returned 0x1 [0106.981] GetFileSize (in: hFile=0x31c, lpFileSizeHigh=0x12d8c8 | out: lpFileSizeHigh=0x12d8c8*=0x0) returned 0x6a29 [0106.981] ReadFile (in: hFile=0x31c, lpBuffer=0x28cef58, nNumberOfBytesToRead=0x6a29, lpNumberOfBytesRead=0x12d7a8, lpOverlapped=0x0 | out: lpBuffer=0x28cef58*, lpNumberOfBytesRead=0x12d7a8*=0x6a29, lpOverlapped=0x0) returned 1 [0107.804] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\THMBNAIL.PNG", nBufferLength=0x105, lpBuffer=0x12d270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\THMBNAIL.PNG", lpFilePart=0x0) returned 0x4a [0107.804] SetErrorMode (uMode=0x1) returned 0x0 [0107.804] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\slate\\thmbnail.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x31c [0107.807] SetErrorMode (uMode=0x0) returned 0x1 [0107.807] GetFileType (hFile=0x31c) returned 0x1 [0107.807] WriteFile (in: hFile=0x31c, lpBuffer=0x27b5b90*, nNumberOfBytesToWrite=0x6a30, lpNumberOfBytesWritten=0x12d828, lpOverlapped=0x0 | out: lpBuffer=0x27b5b90*, lpNumberOfBytesWritten=0x12d828*=0x6a30, lpOverlapped=0x0) returned 1 [0107.809] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\THMBNAIL.PNG", nBufferLength=0x105, lpBuffer=0x12d500, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\THMBNAIL.PNG", lpFilePart=0x0) returned 0x4a [0107.810] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\THMBNAIL.PNG.encryptedS", nBufferLength=0x105, lpBuffer=0x12d500, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\THMBNAIL.PNG.encryptedS", lpFilePart=0x0) returned 0x55 [0107.810] SetErrorMode (uMode=0x1) returned 0x0 [0107.810] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\slate\\thmbnail.png"), fInfoLevelId=0x0, lpFileInformation=0x12d750 | out: lpFileInformation=0x12d750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d4d5410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x60544110, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x6a30)) returned 1 [0107.810] SetErrorMode (uMode=0x0) returned 0x1 [0107.810] MoveFileW (lpExistingFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\slate\\thmbnail.png"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\THMBNAIL.PNG.encryptedS" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\slate\\thmbnail.png.encrypteds")) returned 1 [0107.813] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\Decrypt Instructions.txt", nBufferLength=0x105, lpBuffer=0x12d240, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\Decrypt Instructions.txt", lpFilePart=0x0) returned 0x56 [0107.813] SetErrorMode (uMode=0x1) returned 0x0 [0107.813] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\Decrypt Instructions.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\slate\\decrypt instructions.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x31c [0107.818] SetErrorMode (uMode=0x0) returned 0x1 [0107.818] GetFileType (hFile=0x31c) returned 0x1 [0107.819] WriteFile (in: hFile=0x31c, lpBuffer=0x27c0778*, nNumberOfBytesToWrite=0x773, lpNumberOfBytesWritten=0x12d7a8, lpOverlapped=0x0 | out: lpBuffer=0x27c0778*, lpNumberOfBytesWritten=0x12d7a8*=0x773, lpOverlapped=0x0) returned 1 [0107.820] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE", nBufferLength=0x105, lpBuffer=0x12d430, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE", lpFilePart=0x0) returned 0x3d [0107.820] SetErrorMode (uMode=0x1) returned 0x0 [0107.821] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\*", lpFindFileData=0x12d5d0 | out: lpFindFileData=0x12d5d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a980590, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x60544110, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x60544110, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x26bc80 [0107.821] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a980590, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x60544110, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x60544110, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0107.821] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x60544110, ftCreationTime.dwHighDateTime=0x1d5e786, ftLastAccessTime.dwLowDateTime=0x60544110, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x60544110, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x773, dwReserved0=0x0, dwReserved1=0x0, cFileName="Decrypt Instructions.txt", cAlternateFileName="DECRYP~1.TXT")) returned 1 [0107.821] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d084c30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x3f1, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1 [0107.821] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27222c00, ftCreationTime.dwHighDateTime=0x1cab7f2, ftLastAccessTime.dwLowDateTime=0x5a9f29b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x27222c00, ftLastWriteTime.dwHighDateTime=0x1cab7f2, nFileSizeHigh=0x0, nFileSizeLow=0x14c40, dwReserved0=0x0, dwReserved1=0x0, cFileName="SLATE.ELM", cAlternateFileName="")) returned 1 [0107.821] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5a9f29b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x1f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="SLATE.INF", cAlternateFileName="")) returned 1 [0107.821] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d4d5410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x60544110, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x6a30, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG.encryptedS", cAlternateFileName="THMBNA~1.ENC")) returned 1 [0107.821] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d4d5410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x60544110, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x6a30, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG.encryptedS", cAlternateFileName="THMBNA~1.ENC")) returned 0 [0107.822] FindClose (in: hFindFile=0x26bc80 | out: hFindFile=0x26bc80) returned 1 [0107.822] SetErrorMode (uMode=0x0) returned 0x1 [0107.822] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA", nBufferLength=0x105, lpBuffer=0x12d390, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA", lpFilePart=0x0) returned 0x3e [0107.822] SetErrorMode (uMode=0x1) returned 0x0 [0107.822] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA\\*", lpFindFileData=0x12d530 | out: lpFindFileData=0x12d530*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5aad71f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d4d5410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d4d5410, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x26bc80 [0107.825] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5aad71f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d4d5410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d4d5410, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0107.825] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d084c30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x8a1, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1 [0107.825] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28535900, ftCreationTime.dwHighDateTime=0x1cab7f2, ftLastAccessTime.dwLowDateTime=0x5aad71f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x28535900, ftLastWriteTime.dwHighDateTime=0x1cab7f2, nFileSizeHigh=0x0, nFileSizeLow=0xd59f, dwReserved0=0x0, dwReserved1=0x0, cFileName="SONORA.ELM", cAlternateFileName="")) returned 1 [0107.825] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5aad71f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x1e4, dwReserved0=0x0, dwReserved1=0x0, cFileName="SONORA.INF", cAlternateFileName="")) returned 1 [0107.825] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d4d5410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x5534, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1 [0107.825] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d4d5410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x5534, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0 [0107.825] FindClose (in: hFindFile=0x26bc80 | out: hFindFile=0x26bc80) returned 1 [0107.825] SetErrorMode (uMode=0x0) returned 0x1 [0107.827] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA\\THMBNAIL.PNG", nBufferLength=0x105, lpBuffer=0x12d5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA\\THMBNAIL.PNG", lpFilePart=0x0) returned 0x4b [0107.827] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA\\THMBNAIL.PNG", nBufferLength=0x105, lpBuffer=0x12d590, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA\\THMBNAIL.PNG", lpFilePart=0x0) returned 0x4b [0107.827] SetErrorMode (uMode=0x1) returned 0x0 [0107.828] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\sonora\\thmbnail.png"), fInfoLevelId=0x0, lpFileInformation=0x12d810 | out: lpFileInformation=0x12d810*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d4d5410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x5534)) returned 1 [0107.828] SetErrorMode (uMode=0x0) returned 0x1 [0107.828] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA\\THMBNAIL.PNG", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA\\THMBNAIL.PNG", lpFilePart=0x0) returned 0x4b [0107.828] SetErrorMode (uMode=0x1) returned 0x0 [0107.828] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\sonora\\thmbnail.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x31c [0107.828] SetErrorMode (uMode=0x0) returned 0x1 [0107.828] GetFileType (hFile=0x31c) returned 0x1 [0107.828] GetFileSize (in: hFile=0x31c, lpFileSizeHigh=0x12d8c8 | out: lpFileSizeHigh=0x12d8c8*=0x0) returned 0x5534 [0107.829] ReadFile (in: hFile=0x31c, lpBuffer=0x27c44f0, nNumberOfBytesToRead=0x5534, lpNumberOfBytesRead=0x12d7a8, lpOverlapped=0x0 | out: lpBuffer=0x27c44f0*, lpNumberOfBytesRead=0x12d7a8*=0x5534, lpOverlapped=0x0) returned 1 [0107.894] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA\\THMBNAIL.PNG", nBufferLength=0x105, lpBuffer=0x12d270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA\\THMBNAIL.PNG", lpFilePart=0x0) returned 0x4b [0107.894] SetErrorMode (uMode=0x1) returned 0x0 [0107.894] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\sonora\\thmbnail.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x31c [0107.896] SetErrorMode (uMode=0x0) returned 0x1 [0107.896] GetFileType (hFile=0x31c) returned 0x1 [0107.896] WriteFile (in: hFile=0x31c, lpBuffer=0x28bed48*, nNumberOfBytesToWrite=0x5540, lpNumberOfBytesWritten=0x12d828, lpOverlapped=0x0 | out: lpBuffer=0x28bed48*, lpNumberOfBytesWritten=0x12d828*=0x5540, lpOverlapped=0x0) returned 1 [0107.897] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA\\THMBNAIL.PNG", nBufferLength=0x105, lpBuffer=0x12d500, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA\\THMBNAIL.PNG", lpFilePart=0x0) returned 0x4b [0107.898] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA\\THMBNAIL.PNG.encryptedS", nBufferLength=0x105, lpBuffer=0x12d500, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA\\THMBNAIL.PNG.encryptedS", lpFilePart=0x0) returned 0x56 [0107.898] SetErrorMode (uMode=0x1) returned 0x0 [0107.898] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\sonora\\thmbnail.png"), fInfoLevelId=0x0, lpFileInformation=0x12d750 | out: lpFileInformation=0x12d750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d4d5410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x606027f0, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x5540)) returned 1 [0107.898] SetErrorMode (uMode=0x0) returned 0x1 [0107.898] MoveFileW (lpExistingFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\sonora\\thmbnail.png"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA\\THMBNAIL.PNG.encryptedS" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\sonora\\thmbnail.png.encrypteds")) returned 1 [0107.902] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA\\Decrypt Instructions.txt", nBufferLength=0x105, lpBuffer=0x12d240, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA\\Decrypt Instructions.txt", lpFilePart=0x0) returned 0x57 [0107.902] SetErrorMode (uMode=0x1) returned 0x0 [0107.902] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA\\Decrypt Instructions.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\sonora\\decrypt instructions.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x31c [0107.930] SetErrorMode (uMode=0x0) returned 0x1 [0107.930] GetFileType (hFile=0x31c) returned 0x1 [0107.930] WriteFile (in: hFile=0x31c, lpBuffer=0x28c8440*, nNumberOfBytesToWrite=0x773, lpNumberOfBytesWritten=0x12d7a8, lpOverlapped=0x0 | out: lpBuffer=0x28c8440*, lpNumberOfBytesWritten=0x12d7a8*=0x773, lpOverlapped=0x0) returned 1 [0107.932] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA", nBufferLength=0x105, lpBuffer=0x12d430, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA", lpFilePart=0x0) returned 0x3e [0107.932] SetErrorMode (uMode=0x1) returned 0x0 [0107.932] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA\\*", lpFindFileData=0x12d5d0 | out: lpFindFileData=0x12d5d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5aad71f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6064eab0, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x6064eab0, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x26bc80 [0107.932] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5aad71f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6064eab0, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x6064eab0, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0107.933] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x60628950, ftCreationTime.dwHighDateTime=0x1d5e786, ftLastAccessTime.dwLowDateTime=0x60628950, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x60674c10, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x773, dwReserved0=0x0, dwReserved1=0x0, cFileName="Decrypt Instructions.txt", cAlternateFileName="DECRYP~1.TXT")) returned 1 [0107.933] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d084c30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x8a1, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1 [0107.933] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28535900, ftCreationTime.dwHighDateTime=0x1cab7f2, ftLastAccessTime.dwLowDateTime=0x5aad71f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x28535900, ftLastWriteTime.dwHighDateTime=0x1cab7f2, nFileSizeHigh=0x0, nFileSizeLow=0xd59f, dwReserved0=0x0, dwReserved1=0x0, cFileName="SONORA.ELM", cAlternateFileName="")) returned 1 [0107.933] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5aad71f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x1e4, dwReserved0=0x0, dwReserved1=0x0, cFileName="SONORA.INF", cAlternateFileName="")) returned 1 [0107.933] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d4d5410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x606027f0, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x5540, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG.encryptedS", cAlternateFileName="THMBNA~1.ENC")) returned 1 [0107.933] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d4d5410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x606027f0, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x5540, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG.encryptedS", cAlternateFileName="THMBNA~1.ENC")) returned 0 [0107.933] FindClose (in: hFindFile=0x26bc80 | out: hFindFile=0x26bc80) returned 1 [0107.933] SetErrorMode (uMode=0x0) returned 0x1 [0107.933] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING", nBufferLength=0x105, lpBuffer=0x12d390, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING", lpFilePart=0x0) returned 0x3e [0107.939] SetErrorMode (uMode=0x1) returned 0x0 [0107.939] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING\\*", lpFindFileData=0x12d530 | out: lpFindFileData=0x12d530*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a71ef90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d4d5410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d4d5410, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x26bc80 [0107.941] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a71ef90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d4d5410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d4d5410, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0107.941] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5a71ef90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x9df, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1 [0107.941] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2ab5b300, ftCreationTime.dwHighDateTime=0x1cab7f2, ftLastAccessTime.dwLowDateTime=0x5ab49610, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x2ab5b300, ftLastWriteTime.dwHighDateTime=0x1cab7f2, nFileSizeHigh=0x0, nFileSizeLow=0x10af1, dwReserved0=0x0, dwReserved1=0x0, cFileName="SPRING.ELM", cAlternateFileName="")) returned 1 [0107.941] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d3a4910, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x1d2, dwReserved0=0x0, dwReserved1=0x0, cFileName="SPRING.INF", cAlternateFileName="")) returned 1 [0107.941] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d4d5410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x4c45, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1 [0107.941] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d4d5410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x4c45, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0 [0107.941] FindClose (in: hFindFile=0x26bc80 | out: hFindFile=0x26bc80) returned 1 [0107.941] SetErrorMode (uMode=0x0) returned 0x1 [0107.943] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING\\THMBNAIL.PNG", nBufferLength=0x105, lpBuffer=0x12d5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING\\THMBNAIL.PNG", lpFilePart=0x0) returned 0x4b [0107.943] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING\\THMBNAIL.PNG", nBufferLength=0x105, lpBuffer=0x12d590, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING\\THMBNAIL.PNG", lpFilePart=0x0) returned 0x4b [0107.943] SetErrorMode (uMode=0x1) returned 0x0 [0107.943] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\spring\\thmbnail.png"), fInfoLevelId=0x0, lpFileInformation=0x12d810 | out: lpFileInformation=0x12d810*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d4d5410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x4c45)) returned 1 [0107.982] SetErrorMode (uMode=0x0) returned 0x1 [0107.982] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING\\THMBNAIL.PNG", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING\\THMBNAIL.PNG", lpFilePart=0x0) returned 0x4b [0107.982] SetErrorMode (uMode=0x1) returned 0x0 [0107.982] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\spring\\thmbnail.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x31c [0107.983] SetErrorMode (uMode=0x0) returned 0x1 [0108.023] GetFileType (hFile=0x31c) returned 0x1 [0108.023] GetFileSize (in: hFile=0x31c, lpFileSizeHigh=0x12d8c8 | out: lpFileSizeHigh=0x12d8c8*=0x0) returned 0x4c45 [0108.023] ReadFile (in: hFile=0x31c, lpBuffer=0x26d9880, nNumberOfBytesToRead=0x4c45, lpNumberOfBytesRead=0x12d7a8, lpOverlapped=0x0 | out: lpBuffer=0x26d9880*, lpNumberOfBytesRead=0x12d7a8*=0x4c45, lpOverlapped=0x0) returned 1 [0108.269] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING\\THMBNAIL.PNG", nBufferLength=0x105, lpBuffer=0x12d270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING\\THMBNAIL.PNG", lpFilePart=0x0) returned 0x4b [0108.269] SetErrorMode (uMode=0x1) returned 0x0 [0108.269] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\spring\\thmbnail.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x31c [0108.271] SetErrorMode (uMode=0x0) returned 0x1 [0108.271] GetFileType (hFile=0x31c) returned 0x1 [0108.271] WriteFile (in: hFile=0x31c, lpBuffer=0x27d1428*, nNumberOfBytesToWrite=0x4c50, lpNumberOfBytesWritten=0x12d828, lpOverlapped=0x0 | out: lpBuffer=0x27d1428*, lpNumberOfBytesWritten=0x12d828*=0x4c50, lpOverlapped=0x0) returned 1 [0108.272] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING\\THMBNAIL.PNG", nBufferLength=0x105, lpBuffer=0x12d500, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING\\THMBNAIL.PNG", lpFilePart=0x0) returned 0x4b [0108.272] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING\\THMBNAIL.PNG.encryptedS", nBufferLength=0x105, lpBuffer=0x12d500, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING\\THMBNAIL.PNG.encryptedS", lpFilePart=0x0) returned 0x56 [0108.272] SetErrorMode (uMode=0x1) returned 0x0 [0108.273] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\spring\\thmbnail.png"), fInfoLevelId=0x0, lpFileInformation=0x12d750 | out: lpFileInformation=0x12d750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d4d5410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x609948f0, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x4c50)) returned 1 [0108.273] SetErrorMode (uMode=0x0) returned 0x1 [0108.273] MoveFileW (lpExistingFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\spring\\thmbnail.png"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING\\THMBNAIL.PNG.encryptedS" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\spring\\thmbnail.png.encrypteds")) returned 1 [0108.273] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING\\Decrypt Instructions.txt", nBufferLength=0x105, lpBuffer=0x12d240, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING\\Decrypt Instructions.txt", lpFilePart=0x0) returned 0x57 [0108.274] SetErrorMode (uMode=0x1) returned 0x0 [0108.274] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING\\Decrypt Instructions.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\spring\\decrypt instructions.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x31c [0108.485] SetErrorMode (uMode=0x0) returned 0x1 [0108.485] GetFileType (hFile=0x31c) returned 0x1 [0108.485] WriteFile (in: hFile=0x31c, lpBuffer=0x27da230*, nNumberOfBytesToWrite=0x773, lpNumberOfBytesWritten=0x12d7a8, lpOverlapped=0x0 | out: lpBuffer=0x27da230*, lpNumberOfBytesWritten=0x12d7a8*=0x773, lpOverlapped=0x0) returned 1 [0108.487] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING", nBufferLength=0x105, lpBuffer=0x12d430, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING", lpFilePart=0x0) returned 0x3e [0108.487] SetErrorMode (uMode=0x1) returned 0x0 [0108.487] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING\\*", lpFindFileData=0x12d5d0 | out: lpFindFileData=0x12d5d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a71ef90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x60ba9c30, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x60ba9c30, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x26bc80 [0108.487] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a71ef90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x60ba9c30, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x60ba9c30, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0108.487] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x609948f0, ftCreationTime.dwHighDateTime=0x1d5e786, ftLastAccessTime.dwLowDateTime=0x609948f0, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x60ba9c30, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x773, dwReserved0=0x0, dwReserved1=0x0, cFileName="Decrypt Instructions.txt", cAlternateFileName="DECRYP~1.TXT")) returned 1 [0108.487] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5a71ef90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x9df, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1 [0108.487] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2ab5b300, ftCreationTime.dwHighDateTime=0x1cab7f2, ftLastAccessTime.dwLowDateTime=0x5ab49610, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x2ab5b300, ftLastWriteTime.dwHighDateTime=0x1cab7f2, nFileSizeHigh=0x0, nFileSizeLow=0x10af1, dwReserved0=0x0, dwReserved1=0x0, cFileName="SPRING.ELM", cAlternateFileName="")) returned 1 [0108.487] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d3a4910, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x1d2, dwReserved0=0x0, dwReserved1=0x0, cFileName="SPRING.INF", cAlternateFileName="")) returned 1 [0108.488] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d4d5410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x609948f0, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x4c50, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG.encryptedS", cAlternateFileName="THMBNA~1.ENC")) returned 1 [0108.488] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d4d5410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x609948f0, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x4c50, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG.encryptedS", cAlternateFileName="THMBNA~1.ENC")) returned 0 [0108.488] FindClose (in: hFindFile=0x26bc80 | out: hFindFile=0x26bc80) returned 1 [0108.488] SetErrorMode (uMode=0x0) returned 0x1 [0108.488] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE", nBufferLength=0x105, lpBuffer=0x12d390, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE", lpFilePart=0x0) returned 0x40 [0108.488] SetErrorMode (uMode=0x1) returned 0x0 [0108.488] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE\\*", lpFindFileData=0x12d530 | out: lpFindFileData=0x12d530*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5abe1b90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d3f0bd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d3f0bd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x26bc80 [0108.516] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5abe1b90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d3f0bd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d3f0bd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0108.517] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d084c30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x6c9, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1 [0108.517] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2d180d00, ftCreationTime.dwHighDateTime=0x1cab7f2, ftLastAccessTime.dwLowDateTime=0x5abe1b90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x2d180d00, ftLastWriteTime.dwHighDateTime=0x1cab7f2, nFileSizeHigh=0x0, nFileSizeLow=0xe232, dwReserved0=0x0, dwReserved1=0x0, cFileName="STRTEDGE.ELM", cAlternateFileName="")) returned 1 [0108.517] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x389cfa00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d3f0bd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x389cfa00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x271, dwReserved0=0x0, dwReserved1=0x0, cFileName="STRTEDGE.INF", cAlternateFileName="")) returned 1 [0108.517] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x389cfa00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x389cfa00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x82c7, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1 [0108.517] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x389cfa00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x389cfa00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x82c7, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0 [0108.517] FindClose (in: hFindFile=0x26bc80 | out: hFindFile=0x26bc80) returned 1 [0108.517] SetErrorMode (uMode=0x0) returned 0x1 [0108.519] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE\\THMBNAIL.PNG", nBufferLength=0x105, lpBuffer=0x12d5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE\\THMBNAIL.PNG", lpFilePart=0x0) returned 0x4d [0108.519] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE\\THMBNAIL.PNG", nBufferLength=0x105, lpBuffer=0x12d590, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE\\THMBNAIL.PNG", lpFilePart=0x0) returned 0x4d [0108.519] SetErrorMode (uMode=0x1) returned 0x0 [0108.519] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\strtedge\\thmbnail.png"), fInfoLevelId=0x0, lpFileInformation=0x12d810 | out: lpFileInformation=0x12d810*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x389cfa00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x389cfa00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x82c7)) returned 1 [0108.521] SetErrorMode (uMode=0x0) returned 0x1 [0108.521] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE\\THMBNAIL.PNG", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE\\THMBNAIL.PNG", lpFilePart=0x0) returned 0x4d [0108.521] SetErrorMode (uMode=0x1) returned 0x0 [0108.521] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\strtedge\\thmbnail.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x31c [0108.521] SetErrorMode (uMode=0x0) returned 0x1 [0108.521] GetFileType (hFile=0x31c) returned 0x1 [0108.521] GetFileSize (in: hFile=0x31c, lpFileSizeHigh=0x12d8c8 | out: lpFileSizeHigh=0x12d8c8*=0x0) returned 0x82c7 [0108.522] ReadFile (in: hFile=0x31c, lpBuffer=0x27de020, nNumberOfBytesToRead=0x82c7, lpNumberOfBytesRead=0x12d7a8, lpOverlapped=0x0 | out: lpBuffer=0x27de020*, lpNumberOfBytesRead=0x12d7a8*=0x82c7, lpOverlapped=0x0) returned 1 [0108.650] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE\\THMBNAIL.PNG", nBufferLength=0x105, lpBuffer=0x12d270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE\\THMBNAIL.PNG", lpFilePart=0x0) returned 0x4d [0108.650] SetErrorMode (uMode=0x1) returned 0x0 [0108.650] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\strtedge\\thmbnail.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x31c [0108.653] SetErrorMode (uMode=0x0) returned 0x1 [0108.653] GetFileType (hFile=0x31c) returned 0x1 [0108.653] WriteFile (in: hFile=0x31c, lpBuffer=0x26d3ea8*, nNumberOfBytesToWrite=0x82d0, lpNumberOfBytesWritten=0x12d828, lpOverlapped=0x0 | out: lpBuffer=0x26d3ea8*, lpNumberOfBytesWritten=0x12d828*=0x82d0, lpOverlapped=0x0) returned 1 [0108.655] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE\\THMBNAIL.PNG", nBufferLength=0x105, lpBuffer=0x12d500, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE\\THMBNAIL.PNG", lpFilePart=0x0) returned 0x4d [0108.655] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE\\THMBNAIL.PNG.encryptedS", nBufferLength=0x105, lpBuffer=0x12d500, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE\\THMBNAIL.PNG.encryptedS", lpFilePart=0x0) returned 0x58 [0108.656] SetErrorMode (uMode=0x1) returned 0x0 [0108.656] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\strtedge\\thmbnail.png"), fInfoLevelId=0x0, lpFileInformation=0x12d750 | out: lpFileInformation=0x12d750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x389cfa00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x60d4cb50, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x82d0)) returned 1 [0108.656] SetErrorMode (uMode=0x0) returned 0x1 [0108.656] MoveFileW (lpExistingFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\strtedge\\thmbnail.png"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE\\THMBNAIL.PNG.encryptedS" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\strtedge\\thmbnail.png.encrypteds")) returned 1 [0108.659] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE\\Decrypt Instructions.txt", nBufferLength=0x105, lpBuffer=0x12d240, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE\\Decrypt Instructions.txt", lpFilePart=0x0) returned 0x59 [0108.659] SetErrorMode (uMode=0x1) returned 0x0 [0108.659] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE\\Decrypt Instructions.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\strtedge\\decrypt instructions.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x31c [0108.662] SetErrorMode (uMode=0x0) returned 0x1 [0108.662] GetFileType (hFile=0x31c) returned 0x1 [0108.662] WriteFile (in: hFile=0x31c, lpBuffer=0x26e0360*, nNumberOfBytesToWrite=0x773, lpNumberOfBytesWritten=0x12d7a8, lpOverlapped=0x0 | out: lpBuffer=0x26e0360*, lpNumberOfBytesWritten=0x12d7a8*=0x773, lpOverlapped=0x0) returned 1 [0108.664] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE", nBufferLength=0x105, lpBuffer=0x12d430, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE", lpFilePart=0x0) returned 0x40 [0108.664] SetErrorMode (uMode=0x1) returned 0x0 [0108.664] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE\\*", lpFindFileData=0x12d5d0 | out: lpFindFileData=0x12d5d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5abe1b90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x60d4cb50, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x60d4cb50, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x26bc80 [0108.664] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5abe1b90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x60d4cb50, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x60d4cb50, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0108.664] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x60d4cb50, ftCreationTime.dwHighDateTime=0x1d5e786, ftLastAccessTime.dwLowDateTime=0x60d4cb50, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x60d4cb50, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x773, dwReserved0=0x0, dwReserved1=0x0, cFileName="Decrypt Instructions.txt", cAlternateFileName="DECRYP~1.TXT")) returned 1 [0108.664] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d084c30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x6c9, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1 [0108.665] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2d180d00, ftCreationTime.dwHighDateTime=0x1cab7f2, ftLastAccessTime.dwLowDateTime=0x5abe1b90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x2d180d00, ftLastWriteTime.dwHighDateTime=0x1cab7f2, nFileSizeHigh=0x0, nFileSizeLow=0xe232, dwReserved0=0x0, dwReserved1=0x0, cFileName="STRTEDGE.ELM", cAlternateFileName="")) returned 1 [0108.665] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x389cfa00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d3f0bd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x389cfa00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x271, dwReserved0=0x0, dwReserved1=0x0, cFileName="STRTEDGE.INF", cAlternateFileName="")) returned 1 [0108.665] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x389cfa00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x60d4cb50, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x82d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG.encryptedS", cAlternateFileName="THMBNA~1.ENC")) returned 1 [0108.665] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x389cfa00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x60d4cb50, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x82d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG.encryptedS", cAlternateFileName="THMBNA~1.ENC")) returned 0 [0108.665] FindClose (in: hFindFile=0x26bc80 | out: hFindFile=0x26bc80) returned 1 [0108.665] SetErrorMode (uMode=0x0) returned 0x1 [0108.665] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO", nBufferLength=0x105, lpBuffer=0x12d390, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO", lpFilePart=0x0) returned 0x3e [0108.665] SetErrorMode (uMode=0x1) returned 0x0 [0108.665] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO\\*", lpFindFileData=0x12d530 | out: lpFindFileData=0x12d530*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a71ef90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d4d5410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d4d5410, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x26bc80 [0108.666] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a71ef90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d4d5410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d4d5410, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0108.666] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x389cfa00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5a71ef90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x389cfa00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x68b, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1 [0108.666] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e493a00, ftCreationTime.dwHighDateTime=0x1cab7f2, ftLastAccessTime.dwLowDateTime=0x5ac7a110, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x2e493a00, ftLastWriteTime.dwHighDateTime=0x1cab7f2, nFileSizeHigh=0x0, nFileSizeLow=0xbfed, dwReserved0=0x0, dwReserved1=0x0, cFileName="STUDIO.ELM", cAlternateFileName="")) returned 1 [0108.666] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x389cfa00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d416d30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x389cfa00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x242, dwReserved0=0x0, dwReserved1=0x0, cFileName="STUDIO.INF", cAlternateFileName="")) returned 1 [0108.666] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x389cfa00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d4d5410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x389cfa00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x47cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1 [0108.666] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x389cfa00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d4d5410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x389cfa00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x47cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0 [0108.666] FindClose (in: hFindFile=0x26bc80 | out: hFindFile=0x26bc80) returned 1 [0108.666] SetErrorMode (uMode=0x0) returned 0x1 [0108.668] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO\\THMBNAIL.PNG", nBufferLength=0x105, lpBuffer=0x12d5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO\\THMBNAIL.PNG", lpFilePart=0x0) returned 0x4b [0108.668] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO\\THMBNAIL.PNG", nBufferLength=0x105, lpBuffer=0x12d590, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO\\THMBNAIL.PNG", lpFilePart=0x0) returned 0x4b [0108.668] SetErrorMode (uMode=0x1) returned 0x0 [0108.668] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\studio\\thmbnail.png"), fInfoLevelId=0x0, lpFileInformation=0x12d810 | out: lpFileInformation=0x12d810*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x389cfa00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d4d5410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x389cfa00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x47cc)) returned 1 [0108.668] SetErrorMode (uMode=0x0) returned 0x1 [0108.668] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO\\THMBNAIL.PNG", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO\\THMBNAIL.PNG", lpFilePart=0x0) returned 0x4b [0108.668] SetErrorMode (uMode=0x1) returned 0x0 [0108.669] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\studio\\thmbnail.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x31c [0108.669] SetErrorMode (uMode=0x0) returned 0x1 [0108.669] GetFileType (hFile=0x31c) returned 0x1 [0108.669] GetFileSize (in: hFile=0x31c, lpFileSizeHigh=0x12d8c8 | out: lpFileSizeHigh=0x12d8c8*=0x0) returned 0x47cc [0108.669] ReadFile (in: hFile=0x31c, lpBuffer=0x26e4118, nNumberOfBytesToRead=0x47cc, lpNumberOfBytesRead=0x12d7a8, lpOverlapped=0x0 | out: lpBuffer=0x26e4118*, lpNumberOfBytesRead=0x12d7a8*=0x47cc, lpOverlapped=0x0) returned 1 [0108.702] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO\\THMBNAIL.PNG", nBufferLength=0x105, lpBuffer=0x12d270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO\\THMBNAIL.PNG", lpFilePart=0x0) returned 0x4b [0108.702] SetErrorMode (uMode=0x1) returned 0x0 [0108.702] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\studio\\thmbnail.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x31c [0108.707] SetErrorMode (uMode=0x0) returned 0x1 [0108.708] GetFileType (hFile=0x31c) returned 0x1 [0108.708] WriteFile (in: hFile=0x31c, lpBuffer=0x27da640*, nNumberOfBytesToWrite=0x47d0, lpNumberOfBytesWritten=0x12d828, lpOverlapped=0x0 | out: lpBuffer=0x27da640*, lpNumberOfBytesWritten=0x12d828*=0x47d0, lpOverlapped=0x0) returned 1 [0108.709] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO\\THMBNAIL.PNG", nBufferLength=0x105, lpBuffer=0x12d500, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO\\THMBNAIL.PNG", lpFilePart=0x0) returned 0x4b [0108.709] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO\\THMBNAIL.PNG.encryptedS", nBufferLength=0x105, lpBuffer=0x12d500, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO\\THMBNAIL.PNG.encryptedS", lpFilePart=0x0) returned 0x56 [0108.709] SetErrorMode (uMode=0x1) returned 0x0 [0108.710] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\studio\\thmbnail.png"), fInfoLevelId=0x0, lpFileInformation=0x12d750 | out: lpFileInformation=0x12d750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x389cfa00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d4d5410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x60dbef70, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x47d0)) returned 1 [0108.710] SetErrorMode (uMode=0x0) returned 0x1 [0108.710] MoveFileW (lpExistingFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\studio\\thmbnail.png"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO\\THMBNAIL.PNG.encryptedS" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\studio\\thmbnail.png.encrypteds")) returned 1 [0108.711] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO\\Decrypt Instructions.txt", nBufferLength=0x105, lpBuffer=0x12d240, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO\\Decrypt Instructions.txt", lpFilePart=0x0) returned 0x57 [0108.711] SetErrorMode (uMode=0x1) returned 0x0 [0108.711] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO\\Decrypt Instructions.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\studio\\decrypt instructions.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x31c [0108.714] SetErrorMode (uMode=0x0) returned 0x1 [0108.714] GetFileType (hFile=0x31c) returned 0x1 [0108.715] WriteFile (in: hFile=0x31c, lpBuffer=0x27e2fc8*, nNumberOfBytesToWrite=0x773, lpNumberOfBytesWritten=0x12d7a8, lpOverlapped=0x0 | out: lpBuffer=0x27e2fc8*, lpNumberOfBytesWritten=0x12d7a8*=0x773, lpOverlapped=0x0) returned 1 [0108.716] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO", nBufferLength=0x105, lpBuffer=0x12d430, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO", lpFilePart=0x0) returned 0x3e [0108.716] SetErrorMode (uMode=0x1) returned 0x0 [0108.716] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO\\*", lpFindFileData=0x12d5d0 | out: lpFindFileData=0x12d5d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a71ef90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x60de50d0, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x60de50d0, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x26bc80 [0108.716] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a71ef90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x60de50d0, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x60de50d0, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0108.717] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x60de50d0, ftCreationTime.dwHighDateTime=0x1d5e786, ftLastAccessTime.dwLowDateTime=0x60de50d0, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x60de50d0, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x773, dwReserved0=0x0, dwReserved1=0x0, cFileName="Decrypt Instructions.txt", cAlternateFileName="DECRYP~1.TXT")) returned 1 [0108.717] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x389cfa00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5a71ef90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x389cfa00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x68b, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1 [0108.717] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e493a00, ftCreationTime.dwHighDateTime=0x1cab7f2, ftLastAccessTime.dwLowDateTime=0x5ac7a110, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x2e493a00, ftLastWriteTime.dwHighDateTime=0x1cab7f2, nFileSizeHigh=0x0, nFileSizeLow=0xbfed, dwReserved0=0x0, dwReserved1=0x0, cFileName="STUDIO.ELM", cAlternateFileName="")) returned 1 [0108.717] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x389cfa00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d416d30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x389cfa00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x242, dwReserved0=0x0, dwReserved1=0x0, cFileName="STUDIO.INF", cAlternateFileName="")) returned 1 [0108.717] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x389cfa00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d4d5410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x60dbef70, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x47d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG.encryptedS", cAlternateFileName="THMBNA~1.ENC")) returned 1 [0108.717] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x389cfa00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d4d5410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x60dbef70, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x47d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG.encryptedS", cAlternateFileName="THMBNA~1.ENC")) returned 0 [0108.717] FindClose (in: hFindFile=0x26bc80 | out: hFindFile=0x26bc80) returned 1 [0108.717] SetErrorMode (uMode=0x0) returned 0x1 [0108.717] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SUMIPNTG", nBufferLength=0x105, lpBuffer=0x12d390, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SUMIPNTG", lpFilePart=0x0) returned 0x40 [0108.717] SetErrorMode (uMode=0x1) returned 0x0 [0108.718] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SUMIPNTG\\*", lpFindFileData=0x12d530 | out: lpFindFileData=0x12d530*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a71ef90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d416d30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d416d30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x26bc80 [0108.719] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a71ef90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d416d30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d416d30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0108.719] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x389cfa00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5a71ef90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x389cfa00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x137f, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1 [0108.719] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f7a6700, ftCreationTime.dwHighDateTime=0x1cab7f2, ftLastAccessTime.dwLowDateTime=0x6d416d30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x2f7a6700, ftLastWriteTime.dwHighDateTime=0x1cab7f2, nFileSizeHigh=0x0, nFileSizeLow=0x19e14, dwReserved0=0x0, dwReserved1=0x0, cFileName="SUMIPNTG.ELM", cAlternateFileName="")) returned 1 [0108.719] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x389cfa00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d416d30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x389cfa00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x22b, dwReserved0=0x0, dwReserved1=0x0, cFileName="SUMIPNTG.INF", cAlternateFileName="")) returned 1 [0108.719] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x389cfa00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x389cfa00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0xad0e, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1 [0108.719] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x389cfa00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x389cfa00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0xad0e, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0 [0108.720] FindClose (in: hFindFile=0x26bc80 | out: hFindFile=0x26bc80) returned 1 [0108.720] SetErrorMode (uMode=0x0) returned 0x1 [0108.721] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SUMIPNTG\\THMBNAIL.PNG", nBufferLength=0x105, lpBuffer=0x12d5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SUMIPNTG\\THMBNAIL.PNG", lpFilePart=0x0) returned 0x4d [0108.721] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SUMIPNTG\\THMBNAIL.PNG", nBufferLength=0x105, lpBuffer=0x12d590, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SUMIPNTG\\THMBNAIL.PNG", lpFilePart=0x0) returned 0x4d [0108.721] SetErrorMode (uMode=0x1) returned 0x0 [0108.721] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SUMIPNTG\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\sumipntg\\thmbnail.png"), fInfoLevelId=0x0, lpFileInformation=0x12d810 | out: lpFileInformation=0x12d810*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x389cfa00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x389cfa00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0xad0e)) returned 1 [0108.722] SetErrorMode (uMode=0x0) returned 0x1 [0108.722] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SUMIPNTG\\THMBNAIL.PNG", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SUMIPNTG\\THMBNAIL.PNG", lpFilePart=0x0) returned 0x4d [0108.722] SetErrorMode (uMode=0x1) returned 0x0 [0108.722] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SUMIPNTG\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\sumipntg\\thmbnail.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x31c [0108.722] SetErrorMode (uMode=0x0) returned 0x1 [0108.722] GetFileType (hFile=0x31c) returned 0x1 [0108.722] GetFileSize (in: hFile=0x31c, lpFileSizeHigh=0x12d8c8 | out: lpFileSizeHigh=0x12d8c8*=0x0) returned 0xad0e [0108.722] ReadFile (in: hFile=0x31c, lpBuffer=0x27e6db8, nNumberOfBytesToRead=0xad0e, lpNumberOfBytesRead=0x12d7a8, lpOverlapped=0x0 | out: lpBuffer=0x27e6db8*, lpNumberOfBytesRead=0x12d7a8*=0xad0e, lpOverlapped=0x0) returned 1 [0108.764] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SUMIPNTG\\THMBNAIL.PNG", nBufferLength=0x105, lpBuffer=0x12d270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SUMIPNTG\\THMBNAIL.PNG", lpFilePart=0x0) returned 0x4d [0108.764] SetErrorMode (uMode=0x1) returned 0x0 [0108.764] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SUMIPNTG\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\sumipntg\\thmbnail.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x31c [0108.766] SetErrorMode (uMode=0x0) returned 0x1 [0108.766] GetFileType (hFile=0x31c) returned 0x1 [0108.766] WriteFile (in: hFile=0x31c, lpBuffer=0x26f56d8*, nNumberOfBytesToWrite=0xad10, lpNumberOfBytesWritten=0x12d828, lpOverlapped=0x0 | out: lpBuffer=0x26f56d8*, lpNumberOfBytesWritten=0x12d828*=0xad10, lpOverlapped=0x0) returned 1 [0108.769] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SUMIPNTG\\THMBNAIL.PNG", nBufferLength=0x105, lpBuffer=0x12d500, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SUMIPNTG\\THMBNAIL.PNG", lpFilePart=0x0) returned 0x4d [0108.769] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SUMIPNTG\\THMBNAIL.PNG.encryptedS", nBufferLength=0x105, lpBuffer=0x12d500, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SUMIPNTG\\THMBNAIL.PNG.encryptedS", lpFilePart=0x0) returned 0x58 [0108.769] SetErrorMode (uMode=0x1) returned 0x0 [0108.770] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SUMIPNTG\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\sumipntg\\thmbnail.png"), fInfoLevelId=0x0, lpFileInformation=0x12d750 | out: lpFileInformation=0x12d750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x389cfa00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x60e574f0, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0xad10)) returned 1 [0108.770] SetErrorMode (uMode=0x0) returned 0x1 [0108.770] MoveFileW (lpExistingFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SUMIPNTG\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\sumipntg\\thmbnail.png"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SUMIPNTG\\THMBNAIL.PNG.encryptedS" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\sumipntg\\thmbnail.png.encrypteds")) returned 1 [0108.771] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SUMIPNTG\\Decrypt Instructions.txt", nBufferLength=0x105, lpBuffer=0x12d240, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SUMIPNTG\\Decrypt Instructions.txt", lpFilePart=0x0) returned 0x59 [0108.771] SetErrorMode (uMode=0x1) returned 0x0 [0108.771] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SUMIPNTG\\Decrypt Instructions.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\sumipntg\\decrypt instructions.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x31c [0108.813] SetErrorMode (uMode=0x0) returned 0x1 [0108.813] GetFileType (hFile=0x31c) returned 0x1 [0108.813] WriteFile (in: hFile=0x31c, lpBuffer=0x27045d0*, nNumberOfBytesToWrite=0x773, lpNumberOfBytesWritten=0x12d7a8, lpOverlapped=0x0 | out: lpBuffer=0x27045d0*, lpNumberOfBytesWritten=0x12d7a8*=0x773, lpOverlapped=0x0) returned 1 [0108.815] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SUMIPNTG", nBufferLength=0x105, lpBuffer=0x12d430, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SUMIPNTG", lpFilePart=0x0) returned 0x40 [0108.815] SetErrorMode (uMode=0x1) returned 0x0 [0108.815] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SUMIPNTG\\*", lpFindFileData=0x12d5d0 | out: lpFindFileData=0x12d5d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a71ef90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x60ec9910, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x60ec9910, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x26bc80 [0108.815] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a71ef90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x60ec9910, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x60ec9910, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0108.815] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x60e574f0, ftCreationTime.dwHighDateTime=0x1d5e786, ftLastAccessTime.dwLowDateTime=0x60e574f0, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x60ec9910, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x773, dwReserved0=0x0, dwReserved1=0x0, cFileName="Decrypt Instructions.txt", cAlternateFileName="DECRYP~1.TXT")) returned 1 [0108.815] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x389cfa00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5a71ef90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x389cfa00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x137f, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1 [0108.816] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f7a6700, ftCreationTime.dwHighDateTime=0x1cab7f2, ftLastAccessTime.dwLowDateTime=0x6d416d30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x2f7a6700, ftLastWriteTime.dwHighDateTime=0x1cab7f2, nFileSizeHigh=0x0, nFileSizeLow=0x19e14, dwReserved0=0x0, dwReserved1=0x0, cFileName="SUMIPNTG.ELM", cAlternateFileName="")) returned 1 [0108.816] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x389cfa00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d416d30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x389cfa00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x22b, dwReserved0=0x0, dwReserved1=0x0, cFileName="SUMIPNTG.INF", cAlternateFileName="")) returned 1 [0108.816] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x389cfa00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x60e574f0, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0xad10, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG.encryptedS", cAlternateFileName="THMBNA~1.ENC")) returned 1 [0108.816] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x389cfa00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x60e574f0, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0xad10, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG.encryptedS", cAlternateFileName="THMBNA~1.ENC")) returned 0 [0108.816] FindClose (in: hFindFile=0x26bc80 | out: hFindFile=0x26bc80) returned 1 [0108.816] SetErrorMode (uMode=0x0) returned 0x1 [0108.816] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATER", nBufferLength=0x105, lpBuffer=0x12d390, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATER", lpFilePart=0x0) returned 0x3d [0108.816] SetErrorMode (uMode=0x1) returned 0x0 [0108.816] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATER\\*", lpFindFileData=0x12d530 | out: lpFindFileData=0x12d530*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5ad387f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x7084efd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7084efd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x26bc80 [0108.817] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5ad387f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x7084efd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7084efd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0108.817] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x389cfa00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d084c30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x389cfa00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0xa6c, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1 [0108.817] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x389cfa00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x389cfa00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0xa5d5, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1 [0108.817] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x36a17500, ftCreationTime.dwHighDateTime=0x1cab7f2, ftLastAccessTime.dwLowDateTime=0x5e574fb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x36a17500, ftLastWriteTime.dwHighDateTime=0x1cab7f2, nFileSizeHigh=0x0, nFileSizeLow=0x101cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="WATER.ELM", cAlternateFileName="")) returned 1 [0108.817] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x389cfa00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x7084efd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x389cfa00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x1a1, dwReserved0=0x0, dwReserved1=0x0, cFileName="WATER.INF", cAlternateFileName="")) returned 1 [0108.817] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x389cfa00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x7084efd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x389cfa00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x1a1, dwReserved0=0x0, dwReserved1=0x0, cFileName="WATER.INF", cAlternateFileName="")) returned 0 [0108.817] FindClose (in: hFindFile=0x26bc80 | out: hFindFile=0x26bc80) returned 1 [0108.817] SetErrorMode (uMode=0x0) returned 0x1 [0108.818] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATER\\THMBNAIL.PNG", nBufferLength=0x105, lpBuffer=0x12d5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATER\\THMBNAIL.PNG", lpFilePart=0x0) returned 0x4a [0108.818] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATER\\THMBNAIL.PNG", nBufferLength=0x105, lpBuffer=0x12d590, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATER\\THMBNAIL.PNG", lpFilePart=0x0) returned 0x4a [0108.818] SetErrorMode (uMode=0x1) returned 0x0 [0108.818] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATER\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\water\\thmbnail.png"), fInfoLevelId=0x0, lpFileInformation=0x12d810 | out: lpFileInformation=0x12d810*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x389cfa00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x389cfa00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0xa5d5)) returned 1 [0108.819] SetErrorMode (uMode=0x0) returned 0x1 [0108.819] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATER\\THMBNAIL.PNG", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATER\\THMBNAIL.PNG", lpFilePart=0x0) returned 0x4a [0108.819] SetErrorMode (uMode=0x1) returned 0x0 [0108.819] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATER\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\water\\thmbnail.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x31c [0108.819] SetErrorMode (uMode=0x0) returned 0x1 [0108.819] GetFileType (hFile=0x31c) returned 0x1 [0108.819] GetFileSize (in: hFile=0x31c, lpFileSizeHigh=0x12d8c8 | out: lpFileSizeHigh=0x12d8c8*=0x0) returned 0xa5d5 [0108.819] ReadFile (in: hFile=0x31c, lpBuffer=0x27082a8, nNumberOfBytesToRead=0xa5d5, lpNumberOfBytesRead=0x12d7a8, lpOverlapped=0x0 | out: lpBuffer=0x27082a8*, lpNumberOfBytesRead=0x12d7a8*=0xa5d5, lpOverlapped=0x0) returned 1 [0108.860] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATER\\THMBNAIL.PNG", nBufferLength=0x105, lpBuffer=0x12d270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATER\\THMBNAIL.PNG", lpFilePart=0x0) returned 0x4a [0108.860] SetErrorMode (uMode=0x1) returned 0x0 [0108.860] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATER\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\water\\thmbnail.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x31c [0108.862] SetErrorMode (uMode=0x0) returned 0x1 [0108.862] GetFileType (hFile=0x31c) returned 0x1 [0108.862] WriteFile (in: hFile=0x31c, lpBuffer=0x281be20*, nNumberOfBytesToWrite=0xa5e0, lpNumberOfBytesWritten=0x12d828, lpOverlapped=0x0 | out: lpBuffer=0x281be20*, lpNumberOfBytesWritten=0x12d828*=0xa5e0, lpOverlapped=0x0) returned 1 [0108.865] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATER\\THMBNAIL.PNG", nBufferLength=0x105, lpBuffer=0x12d500, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATER\\THMBNAIL.PNG", lpFilePart=0x0) returned 0x4a [0108.865] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATER\\THMBNAIL.PNG.encryptedS", nBufferLength=0x105, lpBuffer=0x12d500, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATER\\THMBNAIL.PNG.encryptedS", lpFilePart=0x0) returned 0x55 [0108.865] SetErrorMode (uMode=0x1) returned 0x0 [0108.865] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATER\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\water\\thmbnail.png"), fInfoLevelId=0x0, lpFileInformation=0x12d750 | out: lpFileInformation=0x12d750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x389cfa00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x60f3bd30, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0xa5e0)) returned 1 [0108.865] SetErrorMode (uMode=0x0) returned 0x1 [0108.865] MoveFileW (lpExistingFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATER\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\water\\thmbnail.png"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATER\\THMBNAIL.PNG.encryptedS" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\water\\thmbnail.png.encrypteds")) returned 1 [0108.866] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATER\\Decrypt Instructions.txt", nBufferLength=0x105, lpBuffer=0x12d240, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATER\\Decrypt Instructions.txt", lpFilePart=0x0) returned 0x56 [0108.866] SetErrorMode (uMode=0x1) returned 0x0 [0108.866] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATER\\Decrypt Instructions.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\water\\decrypt instructions.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x31c [0108.875] SetErrorMode (uMode=0x0) returned 0x1 [0108.876] GetFileType (hFile=0x31c) returned 0x1 [0108.876] WriteFile (in: hFile=0x31c, lpBuffer=0x282a658*, nNumberOfBytesToWrite=0x773, lpNumberOfBytesWritten=0x12d7a8, lpOverlapped=0x0 | out: lpBuffer=0x282a658*, lpNumberOfBytesWritten=0x12d7a8*=0x773, lpOverlapped=0x0) returned 1 [0108.877] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATER", nBufferLength=0x105, lpBuffer=0x12d430, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATER", lpFilePart=0x0) returned 0x3d [0108.877] SetErrorMode (uMode=0x1) returned 0x0 [0108.878] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATER\\*", lpFindFileData=0x12d5d0 | out: lpFindFileData=0x12d5d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5ad387f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x60f61e90, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x60f61e90, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x26bc80 [0108.878] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5ad387f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x60f61e90, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x60f61e90, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0108.878] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x60f3bd30, ftCreationTime.dwHighDateTime=0x1d5e786, ftLastAccessTime.dwLowDateTime=0x60f3bd30, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x60f61e90, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x773, dwReserved0=0x0, dwReserved1=0x0, cFileName="Decrypt Instructions.txt", cAlternateFileName="DECRYP~1.TXT")) returned 1 [0108.878] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x389cfa00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d084c30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x389cfa00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0xa6c, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1 [0108.878] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x389cfa00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x60f3bd30, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0xa5e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG.encryptedS", cAlternateFileName="THMBNA~1.ENC")) returned 1 [0108.878] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x36a17500, ftCreationTime.dwHighDateTime=0x1cab7f2, ftLastAccessTime.dwLowDateTime=0x5e574fb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x36a17500, ftLastWriteTime.dwHighDateTime=0x1cab7f2, nFileSizeHigh=0x0, nFileSizeLow=0x101cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="WATER.ELM", cAlternateFileName="")) returned 1 [0108.878] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x389cfa00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x7084efd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x389cfa00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x1a1, dwReserved0=0x0, dwReserved1=0x0, cFileName="WATER.INF", cAlternateFileName="")) returned 1 [0108.878] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x389cfa00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x7084efd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x389cfa00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x1a1, dwReserved0=0x0, dwReserved1=0x0, cFileName="WATER.INF", cAlternateFileName="")) returned 0 [0108.878] FindClose (in: hFindFile=0x26bc80 | out: hFindFile=0x26bc80) returned 1 [0108.879] SetErrorMode (uMode=0x0) returned 0x1 [0108.879] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATERMAR", nBufferLength=0x105, lpBuffer=0x12d390, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATERMAR", lpFilePart=0x0) returned 0x40 [0108.879] SetErrorMode (uMode=0x1) returned 0x0 [0108.879] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATERMAR\\*", lpFindFileData=0x12d530 | out: lpFindFileData=0x12d530*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a71ef90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x7084efd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7084efd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x26bc80 [0108.879] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a71ef90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x7084efd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7084efd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0108.880] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x389cfa00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5a71ef90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x389cfa00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x623, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1 [0108.880] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x389cfa00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x389cfa00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x75da, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1 [0108.880] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x37d2a200, ftCreationTime.dwHighDateTime=0x1cab7f2, ftLastAccessTime.dwLowDateTime=0x7084efd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x37d2a200, ftLastWriteTime.dwHighDateTime=0x1cab7f2, nFileSizeHigh=0x0, nFileSizeLow=0xbfc6, dwReserved0=0x0, dwReserved1=0x0, cFileName="WATERMAR.ELM", cAlternateFileName="")) returned 1 [0108.880] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x389cfa00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x70875130, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x389cfa00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x2ab, dwReserved0=0x0, dwReserved1=0x0, cFileName="WATERMAR.INF", cAlternateFileName="")) returned 1 [0108.880] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x389cfa00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x70875130, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x389cfa00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x2ab, dwReserved0=0x0, dwReserved1=0x0, cFileName="WATERMAR.INF", cAlternateFileName="")) returned 0 [0108.880] FindClose (in: hFindFile=0x26bc80 | out: hFindFile=0x26bc80) returned 1 [0108.880] SetErrorMode (uMode=0x0) returned 0x1 [0108.881] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATERMAR\\THMBNAIL.PNG", nBufferLength=0x105, lpBuffer=0x12d5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATERMAR\\THMBNAIL.PNG", lpFilePart=0x0) returned 0x4d [0108.881] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATERMAR\\THMBNAIL.PNG", nBufferLength=0x105, lpBuffer=0x12d590, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATERMAR\\THMBNAIL.PNG", lpFilePart=0x0) returned 0x4d [0108.881] SetErrorMode (uMode=0x1) returned 0x0 [0108.881] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATERMAR\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\watermar\\thmbnail.png"), fInfoLevelId=0x0, lpFileInformation=0x12d810 | out: lpFileInformation=0x12d810*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x389cfa00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x389cfa00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x75da)) returned 1 [0108.906] SetErrorMode (uMode=0x0) returned 0x1 [0108.906] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATERMAR\\THMBNAIL.PNG", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATERMAR\\THMBNAIL.PNG", lpFilePart=0x0) returned 0x4d [0108.906] SetErrorMode (uMode=0x1) returned 0x0 [0108.907] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATERMAR\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\watermar\\thmbnail.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x31c [0108.907] SetErrorMode (uMode=0x0) returned 0x1 [0108.907] GetFileType (hFile=0x31c) returned 0x1 [0108.907] GetFileSize (in: hFile=0x31c, lpFileSizeHigh=0x12d8c8 | out: lpFileSizeHigh=0x12d8c8*=0x0) returned 0x75da [0108.907] ReadFile (in: hFile=0x31c, lpBuffer=0x282e338, nNumberOfBytesToRead=0x75da, lpNumberOfBytesRead=0x12d7a8, lpOverlapped=0x0 | out: lpBuffer=0x282e338*, lpNumberOfBytesRead=0x12d7a8*=0x75da, lpOverlapped=0x0) returned 1 [0108.943] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATERMAR\\THMBNAIL.PNG", nBufferLength=0x105, lpBuffer=0x12d270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATERMAR\\THMBNAIL.PNG", lpFilePart=0x0) returned 0x4d [0108.943] SetErrorMode (uMode=0x1) returned 0x0 [0108.943] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATERMAR\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\watermar\\thmbnail.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x31c [0108.946] SetErrorMode (uMode=0x0) returned 0x1 [0108.946] GetFileType (hFile=0x31c) returned 0x1 [0108.946] WriteFile (in: hFile=0x31c, lpBuffer=0x27133d0*, nNumberOfBytesToWrite=0x75e0, lpNumberOfBytesWritten=0x12d828, lpOverlapped=0x0 | out: lpBuffer=0x27133d0*, lpNumberOfBytesWritten=0x12d828*=0x75e0, lpOverlapped=0x0) returned 1 [0108.948] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATERMAR\\THMBNAIL.PNG", nBufferLength=0x105, lpBuffer=0x12d500, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATERMAR\\THMBNAIL.PNG", lpFilePart=0x0) returned 0x4d [0108.948] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATERMAR\\THMBNAIL.PNG.encryptedS", nBufferLength=0x105, lpBuffer=0x12d500, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATERMAR\\THMBNAIL.PNG.encryptedS", lpFilePart=0x0) returned 0x58 [0108.948] SetErrorMode (uMode=0x1) returned 0x0 [0108.948] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATERMAR\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\watermar\\thmbnail.png"), fInfoLevelId=0x0, lpFileInformation=0x12d750 | out: lpFileInformation=0x12d750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x389cfa00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x61020570, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x75e0)) returned 1 [0108.949] SetErrorMode (uMode=0x0) returned 0x1 [0108.949] MoveFileW (lpExistingFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATERMAR\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\watermar\\thmbnail.png"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATERMAR\\THMBNAIL.PNG.encryptedS" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\watermar\\thmbnail.png.encrypteds")) returned 1 [0108.950] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATERMAR\\Decrypt Instructions.txt", nBufferLength=0x105, lpBuffer=0x12d240, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATERMAR\\Decrypt Instructions.txt", lpFilePart=0x0) returned 0x59 [0108.950] SetErrorMode (uMode=0x1) returned 0x0 [0108.950] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATERMAR\\Decrypt Instructions.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\watermar\\decrypt instructions.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x31c [0108.953] SetErrorMode (uMode=0x0) returned 0x1 [0108.953] GetFileType (hFile=0x31c) returned 0x1 [0108.953] WriteFile (in: hFile=0x31c, lpBuffer=0x271ec38*, nNumberOfBytesToWrite=0x773, lpNumberOfBytesWritten=0x12d7a8, lpOverlapped=0x0 | out: lpBuffer=0x271ec38*, lpNumberOfBytesWritten=0x12d7a8*=0x773, lpOverlapped=0x0) returned 1 [0108.955] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATERMAR", nBufferLength=0x105, lpBuffer=0x12d430, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATERMAR", lpFilePart=0x0) returned 0x40 [0108.955] SetErrorMode (uMode=0x1) returned 0x0 [0108.955] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATERMAR\\*", lpFindFileData=0x12d5d0 | out: lpFindFileData=0x12d5d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a71ef90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x61020570, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x61020570, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x26bc80 [0108.955] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a71ef90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x61020570, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x61020570, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0108.955] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x61020570, ftCreationTime.dwHighDateTime=0x1d5e786, ftLastAccessTime.dwLowDateTime=0x61020570, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x61020570, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x773, dwReserved0=0x0, dwReserved1=0x0, cFileName="Decrypt Instructions.txt", cAlternateFileName="DECRYP~1.TXT")) returned 1 [0108.955] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x389cfa00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5a71ef90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x389cfa00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x623, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1 [0108.955] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x389cfa00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x61020570, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x75e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG.encryptedS", cAlternateFileName="THMBNA~1.ENC")) returned 1 [0108.955] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x37d2a200, ftCreationTime.dwHighDateTime=0x1cab7f2, ftLastAccessTime.dwLowDateTime=0x7084efd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x37d2a200, ftLastWriteTime.dwHighDateTime=0x1cab7f2, nFileSizeHigh=0x0, nFileSizeLow=0xbfc6, dwReserved0=0x0, dwReserved1=0x0, cFileName="WATERMAR.ELM", cAlternateFileName="")) returned 1 [0108.955] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x389cfa00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x70875130, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x389cfa00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x2ab, dwReserved0=0x0, dwReserved1=0x0, cFileName="WATERMAR.INF", cAlternateFileName="")) returned 1 [0108.955] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x389cfa00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x70875130, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x389cfa00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x2ab, dwReserved0=0x0, dwReserved1=0x0, cFileName="WATERMAR.INF", cAlternateFileName="")) returned 0 [0108.956] FindClose (in: hFindFile=0x26bc80 | out: hFindFile=0x26bc80) returned 1 [0108.956] SetErrorMode (uMode=0x0) returned 0x1 [0108.956] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT", nBufferLength=0x105, lpBuffer=0x12d3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT", lpFilePart=0x0) returned 0x37 [0108.956] SetErrorMode (uMode=0x1) returned 0x0 [0108.956] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x54a7f50, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x69dc9750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x69dc9750, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x26bc80 [0108.959] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5a0 | out: lpFindFileData=0x12d5a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x54a7f50, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x69dc9750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x69dc9750, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0108.959] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5a0 | out: lpFindFileData=0x12d5a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7562dd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x7562dd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7562dd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ARFR", cAlternateFileName="")) returned 1 [0108.959] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5a0 | out: lpFindFileData=0x12d5a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x54ce0b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x54ce0b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x54ce0b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ENES", cAlternateFileName="")) returned 1 [0108.959] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5a0 | out: lpFindFileData=0x12d5a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7562dd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x7562dd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7562dd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ENFR", cAlternateFileName="")) returned 1 [0108.959] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5a0 | out: lpFindFileData=0x12d5a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x54a7f50, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x5b7fe90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5b7fe90, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ESEN", cAlternateFileName="")) returned 1 [0108.959] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5a0 | out: lpFindFileData=0x12d5a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7562dd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x7562dd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7562dd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FRAR", cAlternateFileName="")) returned 1 [0108.960] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5a0 | out: lpFindFileData=0x12d5a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7516b10, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x7941190, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7941190, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FREN", cAlternateFileName="")) returned 1 [0108.960] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5a0 | out: lpFindFileData=0x12d5a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdd541900, ftCreationTime.dwHighDateTime=0x1c911ec, ftLastAccessTime.dwLowDateTime=0x7562dd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xdd541900, ftLastWriteTime.dwHighDateTime=0x1c911ec, nFileSizeHigh=0x0, nFileSizeLow=0x205b0b, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSB1AR.LEX", cAlternateFileName="")) returned 1 [0108.960] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5a0 | out: lpFindFileData=0x12d5a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7780a100, ftCreationTime.dwHighDateTime=0x1c4d75f, ftLastAccessTime.dwLowDateTime=0x69dc9750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7780a100, ftLastWriteTime.dwHighDateTime=0x1c4d75f, nFileSizeHigh=0x0, nFileSizeLow=0x600, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSB1CACH.LEX", cAlternateFileName="")) returned 1 [0108.960] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5a0 | out: lpFindFileData=0x12d5a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd5c6bc00, ftCreationTime.dwHighDateTime=0x1ca9121, ftLastAccessTime.dwLowDateTime=0x58b4ce70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xd5c6bc00, ftLastWriteTime.dwHighDateTime=0x1ca9121, nFileSizeHigh=0x0, nFileSizeLow=0x2b990, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSB1CORE.DLL", cAlternateFileName="")) returned 1 [0108.960] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5a0 | out: lpFindFileData=0x12d5a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x38c6e400, ftCreationTime.dwHighDateTime=0x1ca6d6a, ftLastAccessTime.dwLowDateTime=0x7588f30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x38c6e400, ftLastWriteTime.dwHighDateTime=0x1ca6d6a, nFileSizeHigh=0x0, nFileSizeLow=0x40f70, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSB1STAR.DLL", cAlternateFileName="")) returned 1 [0108.960] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5a0 | out: lpFindFileData=0x12d5a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd4958f00, ftCreationTime.dwHighDateTime=0x1ca9121, ftLastAccessTime.dwLowDateTime=0x58b4ce70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xd4958f00, ftLastWriteTime.dwHighDateTime=0x1ca9121, nFileSizeHigh=0x0, nFileSizeLow=0x11390, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSB1XTOR.DLL", cAlternateFileName="")) returned 1 [0108.960] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5a0 | out: lpFindFileData=0x12d5a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb44a7300, ftCreationTime.dwHighDateTime=0x1c3af23, ftLastAccessTime.dwLowDateTime=0x5ba5ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb44a7300, ftLastWriteTime.dwHighDateTime=0x1c3af23, nFileSizeHigh=0x0, nFileSizeLow=0x36000, dwReserved0=0x0, dwReserved1=0x0, cFileName="WTSP61MS.DLL", cAlternateFileName="")) returned 1 [0108.960] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5a0 | out: lpFindFileData=0x12d5a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb44a7300, ftCreationTime.dwHighDateTime=0x1c3af23, ftLastAccessTime.dwLowDateTime=0x5ba5ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb44a7300, ftLastWriteTime.dwHighDateTime=0x1c3af23, nFileSizeHigh=0x0, nFileSizeLow=0x36000, dwReserved0=0x0, dwReserved1=0x0, cFileName="WTSP61MS.DLL", cAlternateFileName="")) returned 0 [0108.960] FindClose (in: hFindFile=0x26bc80 | out: hFindFile=0x26bc80) returned 1 [0108.961] SetErrorMode (uMode=0x0) returned 0x1 [0108.963] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\Decrypt Instructions.txt", nBufferLength=0x105, lpBuffer=0x12d2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\Decrypt Instructions.txt", lpFilePart=0x0) returned 0x50 [0108.963] SetErrorMode (uMode=0x1) returned 0x0 [0108.963] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\Decrypt Instructions.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\translat\\decrypt instructions.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x31c [0108.965] SetErrorMode (uMode=0x0) returned 0x1 [0108.965] GetFileType (hFile=0x31c) returned 0x1 [0108.965] WriteFile (in: hFile=0x31c, lpBuffer=0x2725b40*, nNumberOfBytesToWrite=0x773, lpNumberOfBytesWritten=0x12d808, lpOverlapped=0x0 | out: lpBuffer=0x2725b40*, lpNumberOfBytesWritten=0x12d808*=0x773, lpOverlapped=0x0) returned 1 [0108.966] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT", nBufferLength=0x105, lpBuffer=0x12d490, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT", lpFilePart=0x0) returned 0x37 [0108.967] SetErrorMode (uMode=0x1) returned 0x0 [0108.967] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\*", lpFindFileData=0x12d630 | out: lpFindFileData=0x12d630*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x54a7f50, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x610466d0, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x610466d0, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x26bc80 [0108.967] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d640 | out: lpFindFileData=0x12d640*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x54a7f50, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x610466d0, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x610466d0, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0108.967] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d640 | out: lpFindFileData=0x12d640*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7562dd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x7562dd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7562dd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ARFR", cAlternateFileName="")) returned 1 [0108.967] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d640 | out: lpFindFileData=0x12d640*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x610466d0, ftCreationTime.dwHighDateTime=0x1d5e786, ftLastAccessTime.dwLowDateTime=0x610466d0, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x610466d0, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x773, dwReserved0=0x0, dwReserved1=0x0, cFileName="Decrypt Instructions.txt", cAlternateFileName="DECRYP~1.TXT")) returned 1 [0108.967] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d640 | out: lpFindFileData=0x12d640*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x54ce0b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x54ce0b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x54ce0b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ENES", cAlternateFileName="")) returned 1 [0108.967] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d640 | out: lpFindFileData=0x12d640*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7562dd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x7562dd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7562dd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ENFR", cAlternateFileName="")) returned 1 [0108.967] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d640 | out: lpFindFileData=0x12d640*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x54a7f50, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x5b7fe90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5b7fe90, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ESEN", cAlternateFileName="")) returned 1 [0108.967] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d640 | out: lpFindFileData=0x12d640*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7562dd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x7562dd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7562dd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FRAR", cAlternateFileName="")) returned 1 [0108.967] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d640 | out: lpFindFileData=0x12d640*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7516b10, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x7941190, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7941190, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FREN", cAlternateFileName="")) returned 1 [0108.968] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d640 | out: lpFindFileData=0x12d640*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdd541900, ftCreationTime.dwHighDateTime=0x1c911ec, ftLastAccessTime.dwLowDateTime=0x7562dd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xdd541900, ftLastWriteTime.dwHighDateTime=0x1c911ec, nFileSizeHigh=0x0, nFileSizeLow=0x205b0b, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSB1AR.LEX", cAlternateFileName="")) returned 1 [0108.968] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d640 | out: lpFindFileData=0x12d640*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7780a100, ftCreationTime.dwHighDateTime=0x1c4d75f, ftLastAccessTime.dwLowDateTime=0x69dc9750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7780a100, ftLastWriteTime.dwHighDateTime=0x1c4d75f, nFileSizeHigh=0x0, nFileSizeLow=0x600, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSB1CACH.LEX", cAlternateFileName="")) returned 1 [0108.968] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d640 | out: lpFindFileData=0x12d640*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd5c6bc00, ftCreationTime.dwHighDateTime=0x1ca9121, ftLastAccessTime.dwLowDateTime=0x58b4ce70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xd5c6bc00, ftLastWriteTime.dwHighDateTime=0x1ca9121, nFileSizeHigh=0x0, nFileSizeLow=0x2b990, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSB1CORE.DLL", cAlternateFileName="")) returned 1 [0108.968] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d640 | out: lpFindFileData=0x12d640*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x38c6e400, ftCreationTime.dwHighDateTime=0x1ca6d6a, ftLastAccessTime.dwLowDateTime=0x7588f30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x38c6e400, ftLastWriteTime.dwHighDateTime=0x1ca6d6a, nFileSizeHigh=0x0, nFileSizeLow=0x40f70, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSB1STAR.DLL", cAlternateFileName="")) returned 1 [0108.968] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d640 | out: lpFindFileData=0x12d640*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd4958f00, ftCreationTime.dwHighDateTime=0x1ca9121, ftLastAccessTime.dwLowDateTime=0x58b4ce70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xd4958f00, ftLastWriteTime.dwHighDateTime=0x1ca9121, nFileSizeHigh=0x0, nFileSizeLow=0x11390, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSB1XTOR.DLL", cAlternateFileName="")) returned 1 [0108.968] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d640 | out: lpFindFileData=0x12d640*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb44a7300, ftCreationTime.dwHighDateTime=0x1c3af23, ftLastAccessTime.dwLowDateTime=0x5ba5ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb44a7300, ftLastWriteTime.dwHighDateTime=0x1c3af23, nFileSizeHigh=0x0, nFileSizeLow=0x36000, dwReserved0=0x0, dwReserved1=0x0, cFileName="WTSP61MS.DLL", cAlternateFileName="")) returned 1 [0108.968] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d640 | out: lpFindFileData=0x12d640*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb44a7300, ftCreationTime.dwHighDateTime=0x1c3af23, ftLastAccessTime.dwLowDateTime=0x5ba5ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb44a7300, ftLastWriteTime.dwHighDateTime=0x1c3af23, nFileSizeHigh=0x0, nFileSizeLow=0x36000, dwReserved0=0x0, dwReserved1=0x0, cFileName="WTSP61MS.DLL", cAlternateFileName="")) returned 0 [0108.968] FindClose (in: hFindFile=0x26bc80 | out: hFindFile=0x26bc80) returned 1 [0108.968] SetErrorMode (uMode=0x0) returned 0x1 [0108.969] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ARFR", nBufferLength=0x105, lpBuffer=0x12d390, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ARFR", lpFilePart=0x0) returned 0x3c [0108.969] SetErrorMode (uMode=0x1) returned 0x0 [0108.969] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ARFR\\*", lpFindFileData=0x12d530 | out: lpFindFileData=0x12d530*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7562dd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x7562dd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7562dd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x26bc80 [0108.970] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7562dd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x7562dd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7562dd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0108.970] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1b324b00, ftCreationTime.dwHighDateTime=0x1c6e3e3, ftLastAccessTime.dwLowDateTime=0x7562dd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1b324b00, ftLastWriteTime.dwHighDateTime=0x1c6e3e3, nFileSizeHigh=0x0, nFileSizeLow=0x195018, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSB1ARFR.ITS", cAlternateFileName="")) returned 1 [0108.970] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1b324b00, ftCreationTime.dwHighDateTime=0x1c6e3e3, ftLastAccessTime.dwLowDateTime=0x7562dd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1b324b00, ftLastWriteTime.dwHighDateTime=0x1c6e3e3, nFileSizeHigh=0x0, nFileSizeLow=0x195018, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSB1ARFR.ITS", cAlternateFileName="")) returned 0 [0108.971] FindClose (in: hFindFile=0x26bc80 | out: hFindFile=0x26bc80) returned 1 [0108.971] SetErrorMode (uMode=0x0) returned 0x1 [0108.971] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ARFR\\Decrypt Instructions.txt", nBufferLength=0x105, lpBuffer=0x12d240, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ARFR\\Decrypt Instructions.txt", lpFilePart=0x0) returned 0x55 [0108.971] SetErrorMode (uMode=0x1) returned 0x0 [0108.972] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ARFR\\Decrypt Instructions.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\translat\\arfr\\decrypt instructions.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x31c [0108.972] SetErrorMode (uMode=0x0) returned 0x1 [0108.972] GetFileType (hFile=0x31c) returned 0x1 [0108.972] WriteFile (in: hFile=0x31c, lpBuffer=0x272cb58*, nNumberOfBytesToWrite=0x773, lpNumberOfBytesWritten=0x12d7a8, lpOverlapped=0x0 | out: lpBuffer=0x272cb58*, lpNumberOfBytesWritten=0x12d7a8*=0x773, lpOverlapped=0x0) returned 1 [0108.974] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ARFR", nBufferLength=0x105, lpBuffer=0x12d430, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ARFR", lpFilePart=0x0) returned 0x3c [0108.974] SetErrorMode (uMode=0x1) returned 0x0 [0108.974] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ARFR\\*", lpFindFileData=0x12d5d0 | out: lpFindFileData=0x12d5d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7562dd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x610466d0, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x610466d0, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x26bc80 [0108.974] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7562dd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x610466d0, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x610466d0, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0108.974] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x610466d0, ftCreationTime.dwHighDateTime=0x1d5e786, ftLastAccessTime.dwLowDateTime=0x610466d0, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x610466d0, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x773, dwReserved0=0x0, dwReserved1=0x0, cFileName="Decrypt Instructions.txt", cAlternateFileName="DECRYP~1.TXT")) returned 1 [0108.974] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1b324b00, ftCreationTime.dwHighDateTime=0x1c6e3e3, ftLastAccessTime.dwLowDateTime=0x7562dd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1b324b00, ftLastWriteTime.dwHighDateTime=0x1c6e3e3, nFileSizeHigh=0x0, nFileSizeLow=0x195018, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSB1ARFR.ITS", cAlternateFileName="")) returned 1 [0108.974] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1b324b00, ftCreationTime.dwHighDateTime=0x1c6e3e3, ftLastAccessTime.dwLowDateTime=0x7562dd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1b324b00, ftLastWriteTime.dwHighDateTime=0x1c6e3e3, nFileSizeHigh=0x0, nFileSizeLow=0x195018, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSB1ARFR.ITS", cAlternateFileName="")) returned 0 [0108.974] FindClose (in: hFindFile=0x26bc80 | out: hFindFile=0x26bc80) returned 1 [0108.975] SetErrorMode (uMode=0x0) returned 0x1 [0108.975] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ENES", nBufferLength=0x105, lpBuffer=0x12d390, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ENES", lpFilePart=0x0) returned 0x3c [0108.975] SetErrorMode (uMode=0x1) returned 0x0 [0108.975] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ENES\\*", lpFindFileData=0x12d530 | out: lpFindFileData=0x12d530*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x54ce0b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x54ce0b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x54ce0b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x26bc80 [0109.002] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x54ce0b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x54ce0b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x54ce0b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0109.002] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1c637800, ftCreationTime.dwHighDateTime=0x1c6e3e3, ftLastAccessTime.dwLowDateTime=0x54ce0b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1c637800, ftLastWriteTime.dwHighDateTime=0x1c6e3e3, nFileSizeHigh=0x0, nFileSizeLow=0xeed1e, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSB1ENES.ITS", cAlternateFileName="")) returned 1 [0109.002] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1c637800, ftCreationTime.dwHighDateTime=0x1c6e3e3, ftLastAccessTime.dwLowDateTime=0x54ce0b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1c637800, ftLastWriteTime.dwHighDateTime=0x1c6e3e3, nFileSizeHigh=0x0, nFileSizeLow=0xeed1e, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSB1ENES.ITS", cAlternateFileName="")) returned 0 [0109.003] FindClose (in: hFindFile=0x26bc80 | out: hFindFile=0x26bc80) returned 1 [0109.003] SetErrorMode (uMode=0x0) returned 0x1 [0109.003] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ENES\\Decrypt Instructions.txt", nBufferLength=0x105, lpBuffer=0x12d240, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ENES\\Decrypt Instructions.txt", lpFilePart=0x0) returned 0x55 [0109.003] SetErrorMode (uMode=0x1) returned 0x0 [0109.004] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ENES\\Decrypt Instructions.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\translat\\enes\\decrypt instructions.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x31c [0109.004] SetErrorMode (uMode=0x0) returned 0x1 [0109.004] GetFileType (hFile=0x31c) returned 0x1 [0109.005] WriteFile (in: hFile=0x31c, lpBuffer=0x2733198*, nNumberOfBytesToWrite=0x773, lpNumberOfBytesWritten=0x12d7a8, lpOverlapped=0x0 | out: lpBuffer=0x2733198*, lpNumberOfBytesWritten=0x12d7a8*=0x773, lpOverlapped=0x0) returned 1 [0109.006] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ENES", nBufferLength=0x105, lpBuffer=0x12d430, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ENES", lpFilePart=0x0) returned 0x3c [0109.006] SetErrorMode (uMode=0x1) returned 0x0 [0109.006] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ENES\\*", lpFindFileData=0x12d5d0 | out: lpFindFileData=0x12d5d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x54ce0b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x61092990, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x61092990, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x26bc80 [0109.006] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x54ce0b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x61092990, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x61092990, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0109.006] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x61092990, ftCreationTime.dwHighDateTime=0x1d5e786, ftLastAccessTime.dwLowDateTime=0x61092990, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x61092990, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x773, dwReserved0=0x0, dwReserved1=0x0, cFileName="Decrypt Instructions.txt", cAlternateFileName="DECRYP~1.TXT")) returned 1 [0109.007] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1c637800, ftCreationTime.dwHighDateTime=0x1c6e3e3, ftLastAccessTime.dwLowDateTime=0x54ce0b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1c637800, ftLastWriteTime.dwHighDateTime=0x1c6e3e3, nFileSizeHigh=0x0, nFileSizeLow=0xeed1e, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSB1ENES.ITS", cAlternateFileName="")) returned 1 [0109.007] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1c637800, ftCreationTime.dwHighDateTime=0x1c6e3e3, ftLastAccessTime.dwLowDateTime=0x54ce0b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1c637800, ftLastWriteTime.dwHighDateTime=0x1c6e3e3, nFileSizeHigh=0x0, nFileSizeLow=0xeed1e, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSB1ENES.ITS", cAlternateFileName="")) returned 0 [0109.007] FindClose (in: hFindFile=0x26bc80 | out: hFindFile=0x26bc80) returned 1 [0109.007] SetErrorMode (uMode=0x0) returned 0x1 [0109.007] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ENFR", nBufferLength=0x105, lpBuffer=0x12d390, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ENFR", lpFilePart=0x0) returned 0x3c [0109.007] SetErrorMode (uMode=0x1) returned 0x0 [0109.007] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ENFR\\*", lpFindFileData=0x12d530 | out: lpFindFileData=0x12d530*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7562dd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x7562dd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7562dd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x26bc80 [0109.008] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7562dd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x7562dd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7562dd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0109.008] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1c637800, ftCreationTime.dwHighDateTime=0x1c6e3e3, ftLastAccessTime.dwLowDateTime=0x7562dd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1c637800, ftLastWriteTime.dwHighDateTime=0x1c6e3e3, nFileSizeHigh=0x0, nFileSizeLow=0xe64da, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSB1ENFR.ITS", cAlternateFileName="")) returned 1 [0109.009] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1c637800, ftCreationTime.dwHighDateTime=0x1c6e3e3, ftLastAccessTime.dwLowDateTime=0x7562dd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1c637800, ftLastWriteTime.dwHighDateTime=0x1c6e3e3, nFileSizeHigh=0x0, nFileSizeLow=0xe64da, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSB1ENFR.ITS", cAlternateFileName="")) returned 0 [0109.009] FindClose (in: hFindFile=0x26bc80 | out: hFindFile=0x26bc80) returned 1 [0109.009] SetErrorMode (uMode=0x0) returned 0x1 [0109.009] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ENFR\\Decrypt Instructions.txt", nBufferLength=0x105, lpBuffer=0x12d240, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ENFR\\Decrypt Instructions.txt", lpFilePart=0x0) returned 0x55 [0109.009] SetErrorMode (uMode=0x1) returned 0x0 [0109.010] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ENFR\\Decrypt Instructions.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\translat\\enfr\\decrypt instructions.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x31c [0109.010] SetErrorMode (uMode=0x0) returned 0x1 [0109.010] GetFileType (hFile=0x31c) returned 0x1 [0109.010] WriteFile (in: hFile=0x31c, lpBuffer=0x27397d8*, nNumberOfBytesToWrite=0x773, lpNumberOfBytesWritten=0x12d7a8, lpOverlapped=0x0 | out: lpBuffer=0x27397d8*, lpNumberOfBytesWritten=0x12d7a8*=0x773, lpOverlapped=0x0) returned 1 [0109.012] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ENFR", nBufferLength=0x105, lpBuffer=0x12d430, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ENFR", lpFilePart=0x0) returned 0x3c [0109.012] SetErrorMode (uMode=0x1) returned 0x0 [0109.012] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ENFR\\*", lpFindFileData=0x12d5d0 | out: lpFindFileData=0x12d5d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7562dd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x610b8af0, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x610b8af0, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x26bc80 [0109.012] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7562dd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x610b8af0, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x610b8af0, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0109.012] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x610b8af0, ftCreationTime.dwHighDateTime=0x1d5e786, ftLastAccessTime.dwLowDateTime=0x610b8af0, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x610b8af0, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x773, dwReserved0=0x0, dwReserved1=0x0, cFileName="Decrypt Instructions.txt", cAlternateFileName="DECRYP~1.TXT")) returned 1 [0109.012] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1c637800, ftCreationTime.dwHighDateTime=0x1c6e3e3, ftLastAccessTime.dwLowDateTime=0x7562dd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1c637800, ftLastWriteTime.dwHighDateTime=0x1c6e3e3, nFileSizeHigh=0x0, nFileSizeLow=0xe64da, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSB1ENFR.ITS", cAlternateFileName="")) returned 1 [0109.012] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1c637800, ftCreationTime.dwHighDateTime=0x1c6e3e3, ftLastAccessTime.dwLowDateTime=0x7562dd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1c637800, ftLastWriteTime.dwHighDateTime=0x1c6e3e3, nFileSizeHigh=0x0, nFileSizeLow=0xe64da, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSB1ENFR.ITS", cAlternateFileName="")) returned 0 [0109.012] FindClose (in: hFindFile=0x26bc80 | out: hFindFile=0x26bc80) returned 1 [0109.013] SetErrorMode (uMode=0x0) returned 0x1 [0109.013] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ESEN", nBufferLength=0x105, lpBuffer=0x12d390, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ESEN", lpFilePart=0x0) returned 0x3c [0109.013] SetErrorMode (uMode=0x1) returned 0x0 [0109.013] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ESEN\\*", lpFindFileData=0x12d530 | out: lpFindFileData=0x12d530*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x54a7f50, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x5b7fe90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5b7fe90, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x26bc80 [0109.013] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x54a7f50, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x5b7fe90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5b7fe90, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0109.013] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9890c900, ftCreationTime.dwHighDateTime=0x1c82168, ftLastAccessTime.dwLowDateTime=0x54a7f50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9890c900, ftLastWriteTime.dwHighDateTime=0x1c82168, nFileSizeHigh=0x0, nFileSizeLow=0x38200, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSB1ESEN.DLL", cAlternateFileName="")) returned 1 [0109.014] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x22595900, ftCreationTime.dwHighDateTime=0x1c6e3e3, ftLastAccessTime.dwLowDateTime=0x54ce0b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x22595900, ftLastWriteTime.dwHighDateTime=0x1c6e3e3, nFileSizeHigh=0x0, nFileSizeLow=0xff7f2, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSB1ESEN.ITS", cAlternateFileName="")) returned 1 [0109.014] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc8c79400, ftCreationTime.dwHighDateTime=0x1be6f42, ftLastAccessTime.dwLowDateTime=0x5ba5ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc8c79400, ftLastWriteTime.dwHighDateTime=0x1be6f42, nFileSizeHigh=0x0, nFileSizeLow=0xa5c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WT61ES.LEX", cAlternateFileName="")) returned 1 [0109.014] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc8c79400, ftCreationTime.dwHighDateTime=0x1be6f42, ftLastAccessTime.dwLowDateTime=0x5ba5ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc8c79400, ftLastWriteTime.dwHighDateTime=0x1be6f42, nFileSizeHigh=0x0, nFileSizeLow=0xa5c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WT61ES.LEX", cAlternateFileName="")) returned 0 [0109.014] FindClose (in: hFindFile=0x26bc80 | out: hFindFile=0x26bc80) returned 1 [0109.014] SetErrorMode (uMode=0x0) returned 0x1 [0109.015] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ESEN\\Decrypt Instructions.txt", nBufferLength=0x105, lpBuffer=0x12d240, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ESEN\\Decrypt Instructions.txt", lpFilePart=0x0) returned 0x55 [0109.015] SetErrorMode (uMode=0x1) returned 0x0 [0109.015] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ESEN\\Decrypt Instructions.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\translat\\esen\\decrypt instructions.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x31c [0109.016] SetErrorMode (uMode=0x0) returned 0x1 [0109.016] GetFileType (hFile=0x31c) returned 0x1 [0109.016] WriteFile (in: hFile=0x31c, lpBuffer=0x27400f0*, nNumberOfBytesToWrite=0x773, lpNumberOfBytesWritten=0x12d7a8, lpOverlapped=0x0 | out: lpBuffer=0x27400f0*, lpNumberOfBytesWritten=0x12d7a8*=0x773, lpOverlapped=0x0) returned 1 [0109.017] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ESEN", nBufferLength=0x105, lpBuffer=0x12d430, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ESEN", lpFilePart=0x0) returned 0x3c [0109.017] SetErrorMode (uMode=0x1) returned 0x0 [0109.017] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ESEN\\*", lpFindFileData=0x12d5d0 | out: lpFindFileData=0x12d5d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x54a7f50, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x610b8af0, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x610b8af0, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x26bc80 [0109.018] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x54a7f50, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x610b8af0, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x610b8af0, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0109.018] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x610b8af0, ftCreationTime.dwHighDateTime=0x1d5e786, ftLastAccessTime.dwLowDateTime=0x610b8af0, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x610b8af0, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x773, dwReserved0=0x0, dwReserved1=0x0, cFileName="Decrypt Instructions.txt", cAlternateFileName="DECRYP~1.TXT")) returned 1 [0109.018] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9890c900, ftCreationTime.dwHighDateTime=0x1c82168, ftLastAccessTime.dwLowDateTime=0x54a7f50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9890c900, ftLastWriteTime.dwHighDateTime=0x1c82168, nFileSizeHigh=0x0, nFileSizeLow=0x38200, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSB1ESEN.DLL", cAlternateFileName="")) returned 1 [0109.018] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x22595900, ftCreationTime.dwHighDateTime=0x1c6e3e3, ftLastAccessTime.dwLowDateTime=0x54ce0b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x22595900, ftLastWriteTime.dwHighDateTime=0x1c6e3e3, nFileSizeHigh=0x0, nFileSizeLow=0xff7f2, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSB1ESEN.ITS", cAlternateFileName="")) returned 1 [0109.018] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc8c79400, ftCreationTime.dwHighDateTime=0x1be6f42, ftLastAccessTime.dwLowDateTime=0x5ba5ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc8c79400, ftLastWriteTime.dwHighDateTime=0x1be6f42, nFileSizeHigh=0x0, nFileSizeLow=0xa5c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WT61ES.LEX", cAlternateFileName="")) returned 1 [0109.018] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc8c79400, ftCreationTime.dwHighDateTime=0x1be6f42, ftLastAccessTime.dwLowDateTime=0x5ba5ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc8c79400, ftLastWriteTime.dwHighDateTime=0x1be6f42, nFileSizeHigh=0x0, nFileSizeLow=0xa5c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WT61ES.LEX", cAlternateFileName="")) returned 0 [0109.018] FindClose (in: hFindFile=0x26bc80 | out: hFindFile=0x26bc80) returned 1 [0109.018] SetErrorMode (uMode=0x0) returned 0x1 [0109.018] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\FRAR", nBufferLength=0x105, lpBuffer=0x12d390, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\FRAR", lpFilePart=0x0) returned 0x3c [0109.018] SetErrorMode (uMode=0x1) returned 0x0 [0109.019] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\FRAR\\*", lpFindFileData=0x12d530 | out: lpFindFileData=0x12d530*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7562dd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x7562dd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7562dd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x26bc80 [0109.032] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7562dd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x7562dd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7562dd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0109.032] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x21282c00, ftCreationTime.dwHighDateTime=0x1c6e3e3, ftLastAccessTime.dwLowDateTime=0x7588f30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x21282c00, ftLastWriteTime.dwHighDateTime=0x1c6e3e3, nFileSizeHigh=0x0, nFileSizeLow=0x166bae, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSB1FRAR.ITS", cAlternateFileName="")) returned 1 [0109.032] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x21282c00, ftCreationTime.dwHighDateTime=0x1c6e3e3, ftLastAccessTime.dwLowDateTime=0x7588f30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x21282c00, ftLastWriteTime.dwHighDateTime=0x1c6e3e3, nFileSizeHigh=0x0, nFileSizeLow=0x166bae, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSB1FRAR.ITS", cAlternateFileName="")) returned 0 [0109.032] FindClose (in: hFindFile=0x26bc80 | out: hFindFile=0x26bc80) returned 1 [0109.033] SetErrorMode (uMode=0x0) returned 0x1 [0109.033] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\FRAR\\Decrypt Instructions.txt", nBufferLength=0x105, lpBuffer=0x12d240, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\FRAR\\Decrypt Instructions.txt", lpFilePart=0x0) returned 0x55 [0109.033] SetErrorMode (uMode=0x1) returned 0x0 [0109.033] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\FRAR\\Decrypt Instructions.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\translat\\frar\\decrypt instructions.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x31c [0109.034] SetErrorMode (uMode=0x0) returned 0x1 [0109.034] GetFileType (hFile=0x31c) returned 0x1 [0109.034] WriteFile (in: hFile=0x31c, lpBuffer=0x2746790*, nNumberOfBytesToWrite=0x773, lpNumberOfBytesWritten=0x12d7a8, lpOverlapped=0x0 | out: lpBuffer=0x2746790*, lpNumberOfBytesWritten=0x12d7a8*=0x773, lpOverlapped=0x0) returned 1 [0109.036] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\FRAR", nBufferLength=0x105, lpBuffer=0x12d430, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\FRAR", lpFilePart=0x0) returned 0x3c [0109.036] SetErrorMode (uMode=0x1) returned 0x0 [0109.036] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\FRAR\\*", lpFindFileData=0x12d5d0 | out: lpFindFileData=0x12d5d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7562dd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x610dec50, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x610dec50, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x26bc80 [0109.036] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7562dd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x610dec50, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x610dec50, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0109.036] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x610dec50, ftCreationTime.dwHighDateTime=0x1d5e786, ftLastAccessTime.dwLowDateTime=0x610dec50, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x610dec50, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x773, dwReserved0=0x0, dwReserved1=0x0, cFileName="Decrypt Instructions.txt", cAlternateFileName="DECRYP~1.TXT")) returned 1 [0109.036] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x21282c00, ftCreationTime.dwHighDateTime=0x1c6e3e3, ftLastAccessTime.dwLowDateTime=0x7588f30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x21282c00, ftLastWriteTime.dwHighDateTime=0x1c6e3e3, nFileSizeHigh=0x0, nFileSizeLow=0x166bae, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSB1FRAR.ITS", cAlternateFileName="")) returned 1 [0109.036] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x21282c00, ftCreationTime.dwHighDateTime=0x1c6e3e3, ftLastAccessTime.dwLowDateTime=0x7588f30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x21282c00, ftLastWriteTime.dwHighDateTime=0x1c6e3e3, nFileSizeHigh=0x0, nFileSizeLow=0x166bae, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSB1FRAR.ITS", cAlternateFileName="")) returned 0 [0109.037] FindClose (in: hFindFile=0x26bc80 | out: hFindFile=0x26bc80) returned 1 [0109.037] SetErrorMode (uMode=0x0) returned 0x1 [0109.037] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\FREN", nBufferLength=0x105, lpBuffer=0x12d390, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\FREN", lpFilePart=0x0) returned 0x3c [0109.037] SetErrorMode (uMode=0x1) returned 0x0 [0109.037] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\FREN\\*", lpFindFileData=0x12d530 | out: lpFindFileData=0x12d530*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7516b10, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x7941190, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7941190, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x26bc80 [0109.041] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7516b10, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x7941190, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7941190, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0109.041] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbb22e200, ftCreationTime.dwHighDateTime=0x1c82168, ftLastAccessTime.dwLowDateTime=0x753cc70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbb22e200, ftLastWriteTime.dwHighDateTime=0x1c82168, nFileSizeHigh=0x0, nFileSizeLow=0x38200, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSB1FREN.DLL", cAlternateFileName="")) returned 1 [0109.041] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x238a8600, ftCreationTime.dwHighDateTime=0x1c6e3e3, ftLastAccessTime.dwLowDateTime=0x753cc70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x238a8600, ftLastWriteTime.dwHighDateTime=0x1c6e3e3, nFileSizeHigh=0x0, nFileSizeLow=0xcd2ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSB1FREN.ITS", cAlternateFileName="")) returned 1 [0109.041] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d99e900, ftCreationTime.dwHighDateTime=0x1be6f08, ftLastAccessTime.dwLowDateTime=0x79672f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1d99e900, ftLastWriteTime.dwHighDateTime=0x1be6f08, nFileSizeHigh=0x0, nFileSizeLow=0x96a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WT61FR.LEX", cAlternateFileName="")) returned 1 [0109.041] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d99e900, ftCreationTime.dwHighDateTime=0x1be6f08, ftLastAccessTime.dwLowDateTime=0x79672f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1d99e900, ftLastWriteTime.dwHighDateTime=0x1be6f08, nFileSizeHigh=0x0, nFileSizeLow=0x96a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WT61FR.LEX", cAlternateFileName="")) returned 0 [0109.041] FindClose (in: hFindFile=0x26bc80 | out: hFindFile=0x26bc80) returned 1 [0109.041] SetErrorMode (uMode=0x0) returned 0x1 [0109.042] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\FREN\\Decrypt Instructions.txt", nBufferLength=0x105, lpBuffer=0x12d240, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\FREN\\Decrypt Instructions.txt", lpFilePart=0x0) returned 0x55 [0109.042] SetErrorMode (uMode=0x1) returned 0x0 [0109.043] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\FREN\\Decrypt Instructions.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\translat\\fren\\decrypt instructions.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x31c [0109.043] SetErrorMode (uMode=0x0) returned 0x1 [0109.043] GetFileType (hFile=0x31c) returned 0x1 [0109.043] WriteFile (in: hFile=0x31c, lpBuffer=0x274d0a8*, nNumberOfBytesToWrite=0x773, lpNumberOfBytesWritten=0x12d7a8, lpOverlapped=0x0 | out: lpBuffer=0x274d0a8*, lpNumberOfBytesWritten=0x12d7a8*=0x773, lpOverlapped=0x0) returned 1 [0109.045] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\FREN", nBufferLength=0x105, lpBuffer=0x12d430, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\FREN", lpFilePart=0x0) returned 0x3c [0109.045] SetErrorMode (uMode=0x1) returned 0x0 [0109.045] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\FREN\\*", lpFindFileData=0x12d5d0 | out: lpFindFileData=0x12d5d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7516b10, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x61104db0, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x61104db0, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x26bc80 [0109.045] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7516b10, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x61104db0, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x61104db0, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0109.045] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x61104db0, ftCreationTime.dwHighDateTime=0x1d5e786, ftLastAccessTime.dwLowDateTime=0x61104db0, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x61104db0, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x773, dwReserved0=0x0, dwReserved1=0x0, cFileName="Decrypt Instructions.txt", cAlternateFileName="DECRYP~1.TXT")) returned 1 [0109.045] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbb22e200, ftCreationTime.dwHighDateTime=0x1c82168, ftLastAccessTime.dwLowDateTime=0x753cc70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbb22e200, ftLastWriteTime.dwHighDateTime=0x1c82168, nFileSizeHigh=0x0, nFileSizeLow=0x38200, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSB1FREN.DLL", cAlternateFileName="")) returned 1 [0109.045] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x238a8600, ftCreationTime.dwHighDateTime=0x1c6e3e3, ftLastAccessTime.dwLowDateTime=0x753cc70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x238a8600, ftLastWriteTime.dwHighDateTime=0x1c6e3e3, nFileSizeHigh=0x0, nFileSizeLow=0xcd2ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSB1FREN.ITS", cAlternateFileName="")) returned 1 [0109.045] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d99e900, ftCreationTime.dwHighDateTime=0x1be6f08, ftLastAccessTime.dwLowDateTime=0x79672f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1d99e900, ftLastWriteTime.dwHighDateTime=0x1be6f08, nFileSizeHigh=0x0, nFileSizeLow=0x96a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WT61FR.LEX", cAlternateFileName="")) returned 1 [0109.046] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d99e900, ftCreationTime.dwHighDateTime=0x1be6f08, ftLastAccessTime.dwLowDateTime=0x79672f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1d99e900, ftLastWriteTime.dwHighDateTime=0x1be6f08, nFileSizeHigh=0x0, nFileSizeLow=0x96a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WT61FR.LEX", cAlternateFileName="")) returned 0 [0109.046] FindClose (in: hFindFile=0x26bc80 | out: hFindFile=0x26bc80) returned 1 [0109.046] SetErrorMode (uMode=0x0) returned 0x1 [0109.046] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Triedit", nBufferLength=0x105, lpBuffer=0x12d3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\Triedit", lpFilePart=0x0) returned 0x36 [0109.046] SetErrorMode (uMode=0x1) returned 0x0 [0109.046] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Triedit\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1eab37af, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x26bc80 [0109.047] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5a0 | out: lpFindFileData=0x12d5a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1eab37af, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0109.047] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5a0 | out: lpFindFileData=0x12d5a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23ef19fc, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0109.047] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5a0 | out: lpFindFileData=0x12d5a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23ef19fc, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 0 [0109.047] FindClose (in: hFindFile=0x26bc80 | out: hFindFile=0x26bc80) returned 1 [0109.047] SetErrorMode (uMode=0x0) returned 0x1 [0109.047] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Triedit\\Decrypt Instructions.txt", nBufferLength=0x105, lpBuffer=0x12d2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\Triedit\\Decrypt Instructions.txt", lpFilePart=0x0) returned 0x4f [0109.048] SetErrorMode (uMode=0x1) returned 0x0 [0109.048] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Triedit\\Decrypt Instructions.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\triedit\\decrypt instructions.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x31c [0109.048] SetErrorMode (uMode=0x0) returned 0x1 [0109.048] GetFileType (hFile=0x31c) returned 0x1 [0109.048] WriteFile (in: hFile=0x31c, lpBuffer=0x2753278*, nNumberOfBytesToWrite=0x773, lpNumberOfBytesWritten=0x12d808, lpOverlapped=0x0 | out: lpBuffer=0x2753278*, lpNumberOfBytesWritten=0x12d808*=0x773, lpOverlapped=0x0) returned 1 [0109.050] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Triedit", nBufferLength=0x105, lpBuffer=0x12d490, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\Triedit", lpFilePart=0x0) returned 0x36 [0109.050] SetErrorMode (uMode=0x1) returned 0x0 [0109.050] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Triedit\\*", lpFindFileData=0x12d630 | out: lpFindFileData=0x12d630*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x61104db0, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x61104db0, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x26bc80 [0109.050] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d640 | out: lpFindFileData=0x12d640*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x61104db0, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x61104db0, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0109.050] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d640 | out: lpFindFileData=0x12d640*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x61104db0, ftCreationTime.dwHighDateTime=0x1d5e786, ftLastAccessTime.dwLowDateTime=0x61104db0, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x61104db0, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x773, dwReserved0=0x0, dwReserved1=0x0, cFileName="Decrypt Instructions.txt", cAlternateFileName="DECRYP~1.TXT")) returned 1 [0109.050] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d640 | out: lpFindFileData=0x12d640*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23ef19fc, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0109.050] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d640 | out: lpFindFileData=0x12d640*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23ef19fc, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 0 [0109.051] FindClose (in: hFindFile=0x26bc80 | out: hFindFile=0x26bc80) returned 1 [0109.051] SetErrorMode (uMode=0x0) returned 0x1 [0109.051] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Triedit\\en-US", nBufferLength=0x105, lpBuffer=0x12d390, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\Triedit\\en-US", lpFilePart=0x0) returned 0x3c [0109.051] SetErrorMode (uMode=0x1) returned 0x0 [0109.051] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Triedit\\en-US\\*", lpFindFileData=0x12d530 | out: lpFindFileData=0x12d530*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23ef19fc, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x26bc80 [0109.053] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23ef19fc, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0109.053] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23ef19fc, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0109.054] FindClose (in: hFindFile=0x26bc80 | out: hFindFile=0x26bc80) returned 1 [0109.054] SetErrorMode (uMode=0x0) returned 0x1 [0109.054] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Triedit\\en-US\\Decrypt Instructions.txt", nBufferLength=0x105, lpBuffer=0x12d240, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\Triedit\\en-US\\Decrypt Instructions.txt", lpFilePart=0x0) returned 0x55 [0109.054] SetErrorMode (uMode=0x1) returned 0x0 [0109.054] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Triedit\\en-US\\Decrypt Instructions.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\triedit\\en-us\\decrypt instructions.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x31c [0109.055] SetErrorMode (uMode=0x0) returned 0x1 [0109.055] GetFileType (hFile=0x31c) returned 0x1 [0109.055] WriteFile (in: hFile=0x31c, lpBuffer=0x2759798*, nNumberOfBytesToWrite=0x773, lpNumberOfBytesWritten=0x12d7a8, lpOverlapped=0x0 | out: lpBuffer=0x2759798*, lpNumberOfBytesWritten=0x12d7a8*=0x773, lpOverlapped=0x0) returned 1 [0109.056] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Triedit\\en-US", nBufferLength=0x105, lpBuffer=0x12d430, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\Triedit\\en-US", lpFilePart=0x0) returned 0x3c [0109.056] SetErrorMode (uMode=0x1) returned 0x0 [0109.056] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Triedit\\en-US\\*", lpFindFileData=0x12d5d0 | out: lpFindFileData=0x12d5d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x6112af10, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x6112af10, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x26bc80 [0109.057] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x6112af10, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x6112af10, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0109.057] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6112af10, ftCreationTime.dwHighDateTime=0x1d5e786, ftLastAccessTime.dwLowDateTime=0x6112af10, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x6112af10, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x773, dwReserved0=0x0, dwReserved1=0x0, cFileName="Decrypt Instructions.txt", cAlternateFileName="DECRYP~1.TXT")) returned 1 [0109.057] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6112af10, ftCreationTime.dwHighDateTime=0x1d5e786, ftLastAccessTime.dwLowDateTime=0x6112af10, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x6112af10, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x773, dwReserved0=0x0, dwReserved1=0x0, cFileName="Decrypt Instructions.txt", cAlternateFileName="DECRYP~1.TXT")) returned 0 [0109.057] FindClose (in: hFindFile=0x26bc80 | out: hFindFile=0x26bc80) returned 1 [0109.057] SetErrorMode (uMode=0x0) returned 0x1 [0109.057] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA", nBufferLength=0x105, lpBuffer=0x12d3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA", lpFilePart=0x0) returned 0x32 [0109.057] SetErrorMode (uMode=0x1) returned 0x0 [0109.057] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeedaa970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeedaa970, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeedaa970, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x26bc80 [0109.059] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5a0 | out: lpFindFileData=0x12d5a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeedaa970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeedaa970, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeedaa970, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0109.059] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5a0 | out: lpFindFileData=0x12d5a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeedaa970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xe22f4b00, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xe22f4b00, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="VBA7", cAlternateFileName="")) returned 1 [0109.059] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5a0 | out: lpFindFileData=0x12d5a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeedaa970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xe22f4b00, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xe22f4b00, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="VBA7", cAlternateFileName="")) returned 0 [0109.059] FindClose (in: hFindFile=0x26bc80 | out: hFindFile=0x26bc80) returned 1 [0109.059] SetErrorMode (uMode=0x0) returned 0x1 [0109.059] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\Decrypt Instructions.txt", nBufferLength=0x105, lpBuffer=0x12d2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\Decrypt Instructions.txt", lpFilePart=0x0) returned 0x4b [0109.059] SetErrorMode (uMode=0x1) returned 0x0 [0109.059] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\Decrypt Instructions.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\vba\\decrypt instructions.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x31c [0109.060] SetErrorMode (uMode=0x0) returned 0x1 [0109.060] GetFileType (hFile=0x31c) returned 0x1 [0109.060] WriteFile (in: hFile=0x31c, lpBuffer=0x275f8e0*, nNumberOfBytesToWrite=0x773, lpNumberOfBytesWritten=0x12d808, lpOverlapped=0x0 | out: lpBuffer=0x275f8e0*, lpNumberOfBytesWritten=0x12d808*=0x773, lpOverlapped=0x0) returned 1 [0109.062] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA", nBufferLength=0x105, lpBuffer=0x12d490, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA", lpFilePart=0x0) returned 0x32 [0109.062] SetErrorMode (uMode=0x1) returned 0x0 [0109.062] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\*", lpFindFileData=0x12d630 | out: lpFindFileData=0x12d630*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeedaa970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x6112af10, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x6112af10, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x26bc80 [0109.062] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d640 | out: lpFindFileData=0x12d640*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeedaa970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x6112af10, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x6112af10, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0109.062] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d640 | out: lpFindFileData=0x12d640*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6112af10, ftCreationTime.dwHighDateTime=0x1d5e786, ftLastAccessTime.dwLowDateTime=0x6112af10, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x6112af10, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x773, dwReserved0=0x0, dwReserved1=0x0, cFileName="Decrypt Instructions.txt", cAlternateFileName="DECRYP~1.TXT")) returned 1 [0109.062] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d640 | out: lpFindFileData=0x12d640*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeedaa970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xe22f4b00, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xe22f4b00, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="VBA7", cAlternateFileName="")) returned 1 [0109.062] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d640 | out: lpFindFileData=0x12d640*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeedaa970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xe22f4b00, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xe22f4b00, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="VBA7", cAlternateFileName="")) returned 0 [0109.062] FindClose (in: hFindFile=0x26bc80 | out: hFindFile=0x26bc80) returned 1 [0109.062] SetErrorMode (uMode=0x0) returned 0x1 [0109.063] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7", nBufferLength=0x105, lpBuffer=0x12d390, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7", lpFilePart=0x0) returned 0x37 [0109.063] SetErrorMode (uMode=0x1) returned 0x0 [0109.063] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\*", lpFindFileData=0x12d530 | out: lpFindFileData=0x12d530*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeedaa970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xe22f4b00, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xe22f4b00, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x26bc80 [0109.063] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeedaa970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xe22f4b00, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xe22f4b00, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0109.063] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeedaa970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xc25685a0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xc25685a0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 1 [0109.063] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x56d3ae00, ftCreationTime.dwHighDateTime=0x1cbc41d, ftLastAccessTime.dwLowDateTime=0xe2340dc0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x56d3ae00, ftLastWriteTime.dwHighDateTime=0x1cbc41d, nFileSizeHigh=0x0, nFileSizeLow=0x381748, dwReserved0=0x0, dwReserved1=0x0, cFileName="VBE7.DLL", cAlternateFileName="")) returned 1 [0109.063] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x56d3ae00, ftCreationTime.dwHighDateTime=0x1cbc41d, ftLastAccessTime.dwLowDateTime=0xe2340dc0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x56d3ae00, ftLastWriteTime.dwHighDateTime=0x1cbc41d, nFileSizeHigh=0x0, nFileSizeLow=0x381748, dwReserved0=0x0, dwReserved1=0x0, cFileName="VBE7.DLL", cAlternateFileName="")) returned 0 [0109.064] FindClose (in: hFindFile=0x26bc80 | out: hFindFile=0x26bc80) returned 1 [0109.064] SetErrorMode (uMode=0x0) returned 0x1 [0109.064] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\Decrypt Instructions.txt", nBufferLength=0x105, lpBuffer=0x12d240, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\Decrypt Instructions.txt", lpFilePart=0x0) returned 0x50 [0109.064] SetErrorMode (uMode=0x1) returned 0x0 [0109.064] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\Decrypt Instructions.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\vba\\vba7\\decrypt instructions.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x31c [0109.065] SetErrorMode (uMode=0x0) returned 0x1 [0109.065] GetFileType (hFile=0x31c) returned 0x1 [0109.065] WriteFile (in: hFile=0x31c, lpBuffer=0x2766208*, nNumberOfBytesToWrite=0x773, lpNumberOfBytesWritten=0x12d7a8, lpOverlapped=0x0 | out: lpBuffer=0x2766208*, lpNumberOfBytesWritten=0x12d7a8*=0x773, lpOverlapped=0x0) returned 1 [0109.066] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7", nBufferLength=0x105, lpBuffer=0x12d430, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7", lpFilePart=0x0) returned 0x37 [0109.066] SetErrorMode (uMode=0x1) returned 0x0 [0109.067] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\*", lpFindFileData=0x12d5d0 | out: lpFindFileData=0x12d5d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeedaa970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x6112af10, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x6112af10, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x26bc80 [0109.067] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeedaa970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x6112af10, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x6112af10, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0109.067] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeedaa970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xc25685a0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xc25685a0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 1 [0109.067] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6112af10, ftCreationTime.dwHighDateTime=0x1d5e786, ftLastAccessTime.dwLowDateTime=0x6112af10, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x6112af10, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x773, dwReserved0=0x0, dwReserved1=0x0, cFileName="Decrypt Instructions.txt", cAlternateFileName="DECRYP~1.TXT")) returned 1 [0109.067] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x56d3ae00, ftCreationTime.dwHighDateTime=0x1cbc41d, ftLastAccessTime.dwLowDateTime=0xe2340dc0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x56d3ae00, ftLastWriteTime.dwHighDateTime=0x1cbc41d, nFileSizeHigh=0x0, nFileSizeLow=0x381748, dwReserved0=0x0, dwReserved1=0x0, cFileName="VBE7.DLL", cAlternateFileName="")) returned 1 [0109.067] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x56d3ae00, ftCreationTime.dwHighDateTime=0x1cbc41d, ftLastAccessTime.dwLowDateTime=0xe2340dc0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x56d3ae00, ftLastWriteTime.dwHighDateTime=0x1cbc41d, nFileSizeHigh=0x0, nFileSizeLow=0x381748, dwReserved0=0x0, dwReserved1=0x0, cFileName="VBE7.DLL", cAlternateFileName="")) returned 0 [0109.067] FindClose (in: hFindFile=0x26bc80 | out: hFindFile=0x26bc80) returned 1 [0109.067] SetErrorMode (uMode=0x0) returned 0x1 [0109.068] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033", nBufferLength=0x105, lpBuffer=0x12d330, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033", lpFilePart=0x0) returned 0x3c [0109.068] SetErrorMode (uMode=0x1) returned 0x0 [0109.068] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\*", lpFindFileData=0x12d4d0 | out: lpFindFileData=0x12d4d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeedaa970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xc25685a0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xc25685a0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x26bc80 [0109.070] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d4e0 | out: lpFindFileData=0x12d4e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeedaa970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xc25685a0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xc25685a0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0109.071] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d4e0 | out: lpFindFileData=0x12d4e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1574f00, ftCreationTime.dwHighDateTime=0x1be23e3, ftLastAccessTime.dwLowDateTime=0xeedaa970, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x1574f00, ftLastWriteTime.dwHighDateTime=0x1be23e3, nFileSizeHigh=0x0, nFileSizeLow=0x51a5b, dwReserved0=0x0, dwReserved1=0x0, cFileName="FM20.CHM", cAlternateFileName="")) returned 1 [0109.071] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d4e0 | out: lpFindFileData=0x12d4e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6edd8500, ftCreationTime.dwHighDateTime=0x1c685f9, ftLastAccessTime.dwLowDateTime=0xef07e390, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x6edd8500, ftLastWriteTime.dwHighDateTime=0x1c685f9, nFileSizeHigh=0x0, nFileSizeLow=0x1ac96, dwReserved0=0x0, dwReserved1=0x0, cFileName="VBCN6.CHM", cAlternateFileName="")) returned 1 [0109.071] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d4e0 | out: lpFindFileData=0x12d4e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f2be900, ftCreationTime.dwHighDateTime=0x1cbc41d, ftLastAccessTime.dwLowDateTime=0xc25685a0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x5f2be900, ftLastWriteTime.dwHighDateTime=0x1cbc41d, nFileSizeHigh=0x0, nFileSizeLow=0x25d50, dwReserved0=0x0, dwReserved1=0x0, cFileName="VBE7INTL.DLL", cAlternateFileName="")) returned 1 [0109.071] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d4e0 | out: lpFindFileData=0x12d4e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d2ba100, ftCreationTime.dwHighDateTime=0x1c685f9, ftLastAccessTime.dwLowDateTime=0xef07e390, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x7d2ba100, ftLastWriteTime.dwHighDateTime=0x1c685f9, nFileSizeHigh=0x0, nFileSizeLow=0x1195f, dwReserved0=0x0, dwReserved1=0x0, cFileName="VBENDF98.CHM", cAlternateFileName="")) returned 1 [0109.071] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d4e0 | out: lpFindFileData=0x12d4e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8583dc00, ftCreationTime.dwHighDateTime=0x1c685f9, ftLastAccessTime.dwLowDateTime=0xef07e390, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x8583dc00, ftLastWriteTime.dwHighDateTime=0x1c685f9, nFileSizeHigh=0x0, nFileSizeLow=0xe2aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="VBHW6.CHM", cAlternateFileName="")) returned 1 [0109.071] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d4e0 | out: lpFindFileData=0x12d4e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x903e7100, ftCreationTime.dwHighDateTime=0x1c685f9, ftLastAccessTime.dwLowDateTime=0xef07e390, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x903e7100, ftLastWriteTime.dwHighDateTime=0x1c685f9, nFileSizeHigh=0x0, nFileSizeLow=0xe6b62, dwReserved0=0x0, dwReserved1=0x0, cFileName="VBLR6.CHM", cAlternateFileName="")) returned 1 [0109.071] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d4e0 | out: lpFindFileData=0x12d4e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9896ac00, ftCreationTime.dwHighDateTime=0x1c685f9, ftLastAccessTime.dwLowDateTime=0xef07e390, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x9896ac00, ftLastWriteTime.dwHighDateTime=0x1c685f9, nFileSizeHigh=0x0, nFileSizeLow=0x1e434, dwReserved0=0x0, dwReserved1=0x0, cFileName="VBOB6.CHM", cAlternateFileName="")) returned 1 [0109.071] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d4e0 | out: lpFindFileData=0x12d4e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa0eee700, ftCreationTime.dwHighDateTime=0x1c685f9, ftLastAccessTime.dwLowDateTime=0xef0a44f0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xa0eee700, ftLastWriteTime.dwHighDateTime=0x1c685f9, nFileSizeHigh=0x0, nFileSizeLow=0x65c96, dwReserved0=0x0, dwReserved1=0x0, cFileName="VBUI6.CHM", cAlternateFileName="")) returned 1 [0109.071] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d4e0 | out: lpFindFileData=0x12d4e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa0eee700, ftCreationTime.dwHighDateTime=0x1c685f9, ftLastAccessTime.dwLowDateTime=0xef0a44f0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xa0eee700, ftLastWriteTime.dwHighDateTime=0x1c685f9, nFileSizeHigh=0x0, nFileSizeLow=0x65c96, dwReserved0=0x0, dwReserved1=0x0, cFileName="VBUI6.CHM", cAlternateFileName="")) returned 0 [0109.071] FindClose (in: hFindFile=0x26bc80 | out: hFindFile=0x26bc80) returned 1 [0109.072] SetErrorMode (uMode=0x0) returned 0x1 [0109.074] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\Decrypt Instructions.txt", nBufferLength=0x105, lpBuffer=0x12d1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\Decrypt Instructions.txt", lpFilePart=0x0) returned 0x55 [0109.074] SetErrorMode (uMode=0x1) returned 0x0 [0109.075] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\Decrypt Instructions.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\vba\\vba7\\1033\\decrypt instructions.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x31c [0109.076] SetErrorMode (uMode=0x0) returned 0x1 [0109.076] GetFileType (hFile=0x31c) returned 0x1 [0109.076] WriteFile (in: hFile=0x31c, lpBuffer=0x276d5e0*, nNumberOfBytesToWrite=0x773, lpNumberOfBytesWritten=0x12d748, lpOverlapped=0x0 | out: lpBuffer=0x276d5e0*, lpNumberOfBytesWritten=0x12d748*=0x773, lpOverlapped=0x0) returned 1 [0109.078] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033", nBufferLength=0x105, lpBuffer=0x12d3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033", lpFilePart=0x0) returned 0x3c [0109.078] SetErrorMode (uMode=0x1) returned 0x0 [0109.078] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\*", lpFindFileData=0x12d570 | out: lpFindFileData=0x12d570*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeedaa970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x61151070, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x61151070, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x26bc80 [0109.078] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d580 | out: lpFindFileData=0x12d580*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeedaa970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x61151070, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x61151070, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0109.078] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d580 | out: lpFindFileData=0x12d580*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x61151070, ftCreationTime.dwHighDateTime=0x1d5e786, ftLastAccessTime.dwLowDateTime=0x61151070, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x61151070, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x773, dwReserved0=0x0, dwReserved1=0x0, cFileName="Decrypt Instructions.txt", cAlternateFileName="DECRYP~1.TXT")) returned 1 [0109.078] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d580 | out: lpFindFileData=0x12d580*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1574f00, ftCreationTime.dwHighDateTime=0x1be23e3, ftLastAccessTime.dwLowDateTime=0xeedaa970, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x1574f00, ftLastWriteTime.dwHighDateTime=0x1be23e3, nFileSizeHigh=0x0, nFileSizeLow=0x51a5b, dwReserved0=0x0, dwReserved1=0x0, cFileName="FM20.CHM", cAlternateFileName="")) returned 1 [0109.079] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d580 | out: lpFindFileData=0x12d580*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6edd8500, ftCreationTime.dwHighDateTime=0x1c685f9, ftLastAccessTime.dwLowDateTime=0xef07e390, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x6edd8500, ftLastWriteTime.dwHighDateTime=0x1c685f9, nFileSizeHigh=0x0, nFileSizeLow=0x1ac96, dwReserved0=0x0, dwReserved1=0x0, cFileName="VBCN6.CHM", cAlternateFileName="")) returned 1 [0109.079] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d580 | out: lpFindFileData=0x12d580*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f2be900, ftCreationTime.dwHighDateTime=0x1cbc41d, ftLastAccessTime.dwLowDateTime=0xc25685a0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x5f2be900, ftLastWriteTime.dwHighDateTime=0x1cbc41d, nFileSizeHigh=0x0, nFileSizeLow=0x25d50, dwReserved0=0x0, dwReserved1=0x0, cFileName="VBE7INTL.DLL", cAlternateFileName="")) returned 1 [0109.079] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d580 | out: lpFindFileData=0x12d580*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d2ba100, ftCreationTime.dwHighDateTime=0x1c685f9, ftLastAccessTime.dwLowDateTime=0xef07e390, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x7d2ba100, ftLastWriteTime.dwHighDateTime=0x1c685f9, nFileSizeHigh=0x0, nFileSizeLow=0x1195f, dwReserved0=0x0, dwReserved1=0x0, cFileName="VBENDF98.CHM", cAlternateFileName="")) returned 1 [0109.079] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d580 | out: lpFindFileData=0x12d580*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8583dc00, ftCreationTime.dwHighDateTime=0x1c685f9, ftLastAccessTime.dwLowDateTime=0xef07e390, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x8583dc00, ftLastWriteTime.dwHighDateTime=0x1c685f9, nFileSizeHigh=0x0, nFileSizeLow=0xe2aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="VBHW6.CHM", cAlternateFileName="")) returned 1 [0109.079] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d580 | out: lpFindFileData=0x12d580*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x903e7100, ftCreationTime.dwHighDateTime=0x1c685f9, ftLastAccessTime.dwLowDateTime=0xef07e390, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x903e7100, ftLastWriteTime.dwHighDateTime=0x1c685f9, nFileSizeHigh=0x0, nFileSizeLow=0xe6b62, dwReserved0=0x0, dwReserved1=0x0, cFileName="VBLR6.CHM", cAlternateFileName="")) returned 1 [0109.079] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d580 | out: lpFindFileData=0x12d580*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9896ac00, ftCreationTime.dwHighDateTime=0x1c685f9, ftLastAccessTime.dwLowDateTime=0xef07e390, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x9896ac00, ftLastWriteTime.dwHighDateTime=0x1c685f9, nFileSizeHigh=0x0, nFileSizeLow=0x1e434, dwReserved0=0x0, dwReserved1=0x0, cFileName="VBOB6.CHM", cAlternateFileName="")) returned 1 [0109.079] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d580 | out: lpFindFileData=0x12d580*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa0eee700, ftCreationTime.dwHighDateTime=0x1c685f9, ftLastAccessTime.dwLowDateTime=0xef0a44f0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xa0eee700, ftLastWriteTime.dwHighDateTime=0x1c685f9, nFileSizeHigh=0x0, nFileSizeLow=0x65c96, dwReserved0=0x0, dwReserved1=0x0, cFileName="VBUI6.CHM", cAlternateFileName="")) returned 1 [0109.079] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d580 | out: lpFindFileData=0x12d580*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa0eee700, ftCreationTime.dwHighDateTime=0x1c685f9, ftLastAccessTime.dwLowDateTime=0xef0a44f0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xa0eee700, ftLastWriteTime.dwHighDateTime=0x1c685f9, nFileSizeHigh=0x0, nFileSizeLow=0x65c96, dwReserved0=0x0, dwReserved1=0x0, cFileName="VBUI6.CHM", cAlternateFileName="")) returned 0 [0109.079] FindClose (in: hFindFile=0x26bc80 | out: hFindFile=0x26bc80) returned 1 [0109.079] SetErrorMode (uMode=0x0) returned 0x1 [0109.079] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\VC", nBufferLength=0x105, lpBuffer=0x12d3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\VC", lpFilePart=0x0) returned 0x31 [0109.080] SetErrorMode (uMode=0x1) returned 0x0 [0109.080] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\VC\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbd2c6940, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xd250e300, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xd250e300, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x26bc80 [0109.081] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5a0 | out: lpFindFileData=0x12d5a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbd2c6940, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xd250e300, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xd250e300, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0109.081] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5a0 | out: lpFindFileData=0x12d5a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9ef3e00, ftCreationTime.dwHighDateTime=0x1cbd033, ftLastAccessTime.dwLowDateTime=0xd2618ca0, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xc9ef3e00, ftLastWriteTime.dwHighDateTime=0x1cbd033, nFileSizeHigh=0x0, nFileSizeLow=0xf1b50, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdia100.dll", cAlternateFileName="")) returned 1 [0109.081] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5a0 | out: lpFindFileData=0x12d5a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc1c53c00, ftCreationTime.dwHighDateTime=0x1cbfdf3, ftLastAccessTime.dwLowDateTime=0xbd2c6940, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xc1c53c00, ftLastWriteTime.dwHighDateTime=0x1cbfdf3, nFileSizeHigh=0x0, nFileSizeLow=0xd0d50, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdia90.dll", cAlternateFileName="")) returned 1 [0109.081] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5a0 | out: lpFindFileData=0x12d5a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc1c53c00, ftCreationTime.dwHighDateTime=0x1cbfdf3, ftLastAccessTime.dwLowDateTime=0xbd2c6940, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xc1c53c00, ftLastWriteTime.dwHighDateTime=0x1cbfdf3, nFileSizeHigh=0x0, nFileSizeLow=0xd0d50, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdia90.dll", cAlternateFileName="")) returned 0 [0109.082] FindClose (in: hFindFile=0x26bc80 | out: hFindFile=0x26bc80) returned 1 [0109.082] SetErrorMode (uMode=0x0) returned 0x1 [0109.082] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\VC\\Decrypt Instructions.txt", nBufferLength=0x105, lpBuffer=0x12d2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\VC\\Decrypt Instructions.txt", lpFilePart=0x0) returned 0x4a [0109.083] SetErrorMode (uMode=0x1) returned 0x0 [0109.083] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\VC\\Decrypt Instructions.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\vc\\decrypt instructions.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x31c [0109.083] SetErrorMode (uMode=0x0) returned 0x1 [0109.083] GetFileType (hFile=0x31c) returned 0x1 [0109.083] WriteFile (in: hFile=0x31c, lpBuffer=0x2773dd0*, nNumberOfBytesToWrite=0x773, lpNumberOfBytesWritten=0x12d808, lpOverlapped=0x0 | out: lpBuffer=0x2773dd0*, lpNumberOfBytesWritten=0x12d808*=0x773, lpOverlapped=0x0) returned 1 [0109.085] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\VC", nBufferLength=0x105, lpBuffer=0x12d490, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\VC", lpFilePart=0x0) returned 0x31 [0109.085] SetErrorMode (uMode=0x1) returned 0x0 [0109.085] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\VC\\*", lpFindFileData=0x12d630 | out: lpFindFileData=0x12d630*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbd2c6940, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0x61151070, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x61151070, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x26bc80 [0109.085] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d640 | out: lpFindFileData=0x12d640*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbd2c6940, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0x61151070, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x61151070, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0109.085] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d640 | out: lpFindFileData=0x12d640*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x61151070, ftCreationTime.dwHighDateTime=0x1d5e786, ftLastAccessTime.dwLowDateTime=0x61151070, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x61151070, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x773, dwReserved0=0x0, dwReserved1=0x0, cFileName="Decrypt Instructions.txt", cAlternateFileName="DECRYP~1.TXT")) returned 1 [0109.085] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d640 | out: lpFindFileData=0x12d640*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9ef3e00, ftCreationTime.dwHighDateTime=0x1cbd033, ftLastAccessTime.dwLowDateTime=0xd2618ca0, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xc9ef3e00, ftLastWriteTime.dwHighDateTime=0x1cbd033, nFileSizeHigh=0x0, nFileSizeLow=0xf1b50, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdia100.dll", cAlternateFileName="")) returned 1 [0109.085] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d640 | out: lpFindFileData=0x12d640*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc1c53c00, ftCreationTime.dwHighDateTime=0x1cbfdf3, ftLastAccessTime.dwLowDateTime=0xbd2c6940, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xc1c53c00, ftLastWriteTime.dwHighDateTime=0x1cbfdf3, nFileSizeHigh=0x0, nFileSizeLow=0xd0d50, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdia90.dll", cAlternateFileName="")) returned 1 [0109.086] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d640 | out: lpFindFileData=0x12d640*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc1c53c00, ftCreationTime.dwHighDateTime=0x1cbfdf3, ftLastAccessTime.dwLowDateTime=0xbd2c6940, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xc1c53c00, ftLastWriteTime.dwHighDateTime=0x1cbfdf3, nFileSizeHigh=0x0, nFileSizeLow=0xd0d50, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdia90.dll", cAlternateFileName="")) returned 0 [0109.086] FindClose (in: hFindFile=0x26bc80 | out: hFindFile=0x26bc80) returned 1 [0109.086] SetErrorMode (uMode=0x0) returned 0x1 [0109.086] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\VGX", nBufferLength=0x105, lpBuffer=0x12d3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\VGX", lpFilePart=0x0) returned 0x32 [0109.086] SetErrorMode (uMode=0x1) returned 0x0 [0109.086] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\VGX\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x803feff7, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x803feff7, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x26bc80 [0109.087] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5a0 | out: lpFindFileData=0x12d5a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x803feff7, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x803feff7, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0109.087] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5a0 | out: lpFindFileData=0x12d5a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee7a7ff6, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0xee7a7ff6, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0x454d7b80, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x10f200, dwReserved0=0x0, dwReserved1=0x0, cFileName="VGX.dll", cAlternateFileName="")) returned 1 [0109.087] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5a0 | out: lpFindFileData=0x12d5a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee7a7ff6, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0xee7a7ff6, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0x454d7b80, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x10f200, dwReserved0=0x0, dwReserved1=0x0, cFileName="VGX.dll", cAlternateFileName="")) returned 0 [0109.087] FindClose (in: hFindFile=0x26bc80 | out: hFindFile=0x26bc80) returned 1 [0109.087] SetErrorMode (uMode=0x0) returned 0x1 [0109.088] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\VGX\\Decrypt Instructions.txt", nBufferLength=0x105, lpBuffer=0x12d2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\VGX\\Decrypt Instructions.txt", lpFilePart=0x0) returned 0x4b [0109.088] SetErrorMode (uMode=0x1) returned 0x0 [0109.088] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\VGX\\Decrypt Instructions.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\vgx\\decrypt instructions.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x31c [0109.089] SetErrorMode (uMode=0x0) returned 0x1 [0109.089] GetFileType (hFile=0x31c) returned 0x1 [0109.089] WriteFile (in: hFile=0x31c, lpBuffer=0x277a2b8*, nNumberOfBytesToWrite=0x773, lpNumberOfBytesWritten=0x12d808, lpOverlapped=0x0 | out: lpBuffer=0x277a2b8*, lpNumberOfBytesWritten=0x12d808*=0x773, lpOverlapped=0x0) returned 1 [0109.090] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\VGX", nBufferLength=0x105, lpBuffer=0x12d490, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\VGX", lpFilePart=0x0) returned 0x32 [0109.090] SetErrorMode (uMode=0x1) returned 0x0 [0109.090] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\VGX\\*", lpFindFileData=0x12d630 | out: lpFindFileData=0x12d630*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x611771d0, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x611771d0, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x26bc80 [0109.091] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d640 | out: lpFindFileData=0x12d640*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x611771d0, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x611771d0, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0109.091] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d640 | out: lpFindFileData=0x12d640*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x611771d0, ftCreationTime.dwHighDateTime=0x1d5e786, ftLastAccessTime.dwLowDateTime=0x611771d0, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x611771d0, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x773, dwReserved0=0x0, dwReserved1=0x0, cFileName="Decrypt Instructions.txt", cAlternateFileName="DECRYP~1.TXT")) returned 1 [0109.091] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d640 | out: lpFindFileData=0x12d640*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee7a7ff6, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0xee7a7ff6, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0x454d7b80, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x10f200, dwReserved0=0x0, dwReserved1=0x0, cFileName="VGX.dll", cAlternateFileName="")) returned 1 [0109.091] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d640 | out: lpFindFileData=0x12d640*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee7a7ff6, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0xee7a7ff6, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0x454d7b80, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x10f200, dwReserved0=0x0, dwReserved1=0x0, cFileName="VGX.dll", cAlternateFileName="")) returned 0 [0109.091] FindClose (in: hFindFile=0x26bc80 | out: hFindFile=0x26bc80) returned 1 [0109.091] SetErrorMode (uMode=0x0) returned 0x1 [0109.091] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Visio Shared", nBufferLength=0x105, lpBuffer=0x12d3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\Visio Shared", lpFilePart=0x0) returned 0x3b [0109.091] SetErrorMode (uMode=0x1) returned 0x0 [0109.092] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Visio Shared\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81afcd40, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x81afcd40, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x81afcd40, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x26bc80 [0109.092] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5a0 | out: lpFindFileData=0x12d5a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81afcd40, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x81afcd40, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x81afcd40, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0109.092] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5a0 | out: lpFindFileData=0x12d5a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81afcd40, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x8541dd40, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x8541dd40, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Fonts", cAlternateFileName="")) returned 1 [0109.092] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5a0 | out: lpFindFileData=0x12d5a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81afcd40, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x8541dd40, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x8541dd40, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Fonts", cAlternateFileName="")) returned 0 [0109.092] FindClose (in: hFindFile=0x26bc80 | out: hFindFile=0x26bc80) returned 1 [0109.093] SetErrorMode (uMode=0x0) returned 0x1 [0109.093] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Visio Shared\\Decrypt Instructions.txt", nBufferLength=0x105, lpBuffer=0x12d2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\Visio Shared\\Decrypt Instructions.txt", lpFilePart=0x0) returned 0x54 [0109.093] SetErrorMode (uMode=0x1) returned 0x0 [0109.093] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Visio Shared\\Decrypt Instructions.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\visio shared\\decrypt instructions.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x31c [0109.093] SetErrorMode (uMode=0x0) returned 0x1 [0109.094] GetFileType (hFile=0x31c) returned 0x1 [0109.094] WriteFile (in: hFile=0x31c, lpBuffer=0x27803e8*, nNumberOfBytesToWrite=0x773, lpNumberOfBytesWritten=0x12d808, lpOverlapped=0x0 | out: lpBuffer=0x27803e8*, lpNumberOfBytesWritten=0x12d808*=0x773, lpOverlapped=0x0) returned 1 [0109.095] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Visio Shared", nBufferLength=0x105, lpBuffer=0x12d490, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\Visio Shared", lpFilePart=0x0) returned 0x3b [0109.095] SetErrorMode (uMode=0x1) returned 0x0 [0109.095] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Visio Shared\\*", lpFindFileData=0x12d630 | out: lpFindFileData=0x12d630*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81afcd40, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x611771d0, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x611771d0, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x26bc80 [0109.096] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d640 | out: lpFindFileData=0x12d640*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81afcd40, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x611771d0, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x611771d0, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0109.096] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d640 | out: lpFindFileData=0x12d640*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x611771d0, ftCreationTime.dwHighDateTime=0x1d5e786, ftLastAccessTime.dwLowDateTime=0x611771d0, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x611771d0, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x773, dwReserved0=0x0, dwReserved1=0x0, cFileName="Decrypt Instructions.txt", cAlternateFileName="DECRYP~1.TXT")) returned 1 [0109.096] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d640 | out: lpFindFileData=0x12d640*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81afcd40, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x8541dd40, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x8541dd40, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Fonts", cAlternateFileName="")) returned 1 [0109.096] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d640 | out: lpFindFileData=0x12d640*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81afcd40, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x8541dd40, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x8541dd40, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Fonts", cAlternateFileName="")) returned 0 [0109.096] FindClose (in: hFindFile=0x26bc80 | out: hFindFile=0x26bc80) returned 1 [0109.096] SetErrorMode (uMode=0x0) returned 0x1 [0109.097] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Visio Shared\\Fonts", nBufferLength=0x105, lpBuffer=0x12d390, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\Visio Shared\\Fonts", lpFilePart=0x0) returned 0x41 [0109.097] SetErrorMode (uMode=0x1) returned 0x0 [0109.097] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Visio Shared\\Fonts\\*", lpFindFileData=0x12d530 | out: lpFindFileData=0x12d530*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81afcd40, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x8541dd40, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x8541dd40, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x26bc80 [0109.100] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81afcd40, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x8541dd40, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x8541dd40, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0109.100] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b362800, ftCreationTime.dwHighDateTime=0x1c10ce8, ftLastAccessTime.dwLowDateTime=0x81afcd40, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x2b362800, ftLastWriteTime.dwHighDateTime=0x1c10ce8, nFileSizeHigh=0x0, nFileSizeLow=0x4f2ea, dwReserved0=0x0, dwReserved1=0x0, cFileName="BIGFONT.SHX", cAlternateFileName="")) returned 1 [0109.100] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b362800, ftCreationTime.dwHighDateTime=0x1c10ce8, ftLastAccessTime.dwLowDateTime=0x81c076e0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x2b362800, ftLastWriteTime.dwHighDateTime=0x1c10ce8, nFileSizeHigh=0x0, nFileSizeLow=0xa261d, dwReserved0=0x0, dwReserved1=0x0, cFileName="CHINESET.SHX", cAlternateFileName="")) returned 1 [0109.100] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b362800, ftCreationTime.dwHighDateTime=0x1c10ce8, ftLastAccessTime.dwLowDateTime=0x81eb4fa0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x2b362800, ftLastWriteTime.dwHighDateTime=0x1c10ce8, nFileSizeHigh=0x0, nFileSizeLow=0x6a9e6, dwReserved0=0x0, dwReserved1=0x0, cFileName="EXTFONT.SHX", cAlternateFileName="")) returned 1 [0109.100] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b362800, ftCreationTime.dwHighDateTime=0x1c10ce8, ftLastAccessTime.dwLowDateTime=0x8207e020, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x2b362800, ftLastWriteTime.dwHighDateTime=0x1c10ce8, nFileSizeHigh=0x0, nFileSizeLow=0xdc6b9, dwReserved0=0x0, dwReserved1=0x0, cFileName="GBCBIG.SHX", cAlternateFileName="")) returned 1 [0109.100] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc2656900, ftCreationTime.dwHighDateTime=0x1c2706c, ftLastAccessTime.dwLowDateTime=0x820ca2e0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xc2656900, ftLastWriteTime.dwHighDateTime=0x1c2706c, nFileSizeHigh=0x0, nFileSizeLow=0x2b01, dwReserved0=0x0, dwReserved1=0x0, cFileName="IC-TXT.SHX", cAlternateFileName="")) returned 1 [0109.100] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc8f60300, ftCreationTime.dwHighDateTime=0x1c324cc, ftLastAccessTime.dwLowDateTime=0x820ca2e0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xc8f60300, ftLastWriteTime.dwHighDateTime=0x1c324cc, nFileSizeHigh=0x0, nFileSizeLow=0x146, dwReserved0=0x0, dwReserved1=0x0, cFileName="ICAD.FMP", cAlternateFileName="")) returned 1 [0109.100] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b362800, ftCreationTime.dwHighDateTime=0x1c10ce8, ftLastAccessTime.dwLowDateTime=0x853f7be0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x2b362800, ftLastWriteTime.dwHighDateTime=0x1c10ce8, nFileSizeHigh=0x0, nFileSizeLow=0x369d3, dwReserved0=0x0, dwReserved1=0x0, cFileName="WHGDTXT.SHX", cAlternateFileName="")) returned 1 [0109.100] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b362800, ftCreationTime.dwHighDateTime=0x1c10ce8, ftLastAccessTime.dwLowDateTime=0x853f7be0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x2b362800, ftLastWriteTime.dwHighDateTime=0x1c10ce8, nFileSizeHigh=0x0, nFileSizeLow=0x2fde5, dwReserved0=0x0, dwReserved1=0x0, cFileName="WHGTXT.SHX", cAlternateFileName="")) returned 1 [0109.100] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b362800, ftCreationTime.dwHighDateTime=0x1c10ce8, ftLastAccessTime.dwLowDateTime=0x8541dd40, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x2b362800, ftLastWriteTime.dwHighDateTime=0x1c10ce8, nFileSizeHigh=0x0, nFileSizeLow=0x9e413, dwReserved0=0x0, dwReserved1=0x0, cFileName="WHTGTXT.SHX", cAlternateFileName="")) returned 1 [0109.101] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b362800, ftCreationTime.dwHighDateTime=0x1c10ce8, ftLastAccessTime.dwLowDateTime=0x8541dd40, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x2b362800, ftLastWriteTime.dwHighDateTime=0x1c10ce8, nFileSizeHigh=0x0, nFileSizeLow=0xdfc98, dwReserved0=0x0, dwReserved1=0x0, cFileName="WHTMTXT.SHX", cAlternateFileName="")) returned 1 [0109.101] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b362800, ftCreationTime.dwHighDateTime=0x1c10ce8, ftLastAccessTime.dwLowDateTime=0x8541dd40, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x2b362800, ftLastWriteTime.dwHighDateTime=0x1c10ce8, nFileSizeHigh=0x0, nFileSizeLow=0xdfc98, dwReserved0=0x0, dwReserved1=0x0, cFileName="WHTMTXT.SHX", cAlternateFileName="")) returned 0 [0109.101] FindClose (in: hFindFile=0x26bc80 | out: hFindFile=0x26bc80) returned 1 [0109.102] SetErrorMode (uMode=0x0) returned 0x1 [0109.104] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Visio Shared\\Fonts\\Decrypt Instructions.txt", nBufferLength=0x105, lpBuffer=0x12d240, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\Visio Shared\\Fonts\\Decrypt Instructions.txt", lpFilePart=0x0) returned 0x5a [0109.104] SetErrorMode (uMode=0x1) returned 0x0 [0109.105] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Visio Shared\\Fonts\\Decrypt Instructions.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\visio shared\\fonts\\decrypt instructions.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x31c [0109.106] SetErrorMode (uMode=0x0) returned 0x1 [0109.106] GetFileType (hFile=0x31c) returned 0x1 [0109.107] WriteFile (in: hFile=0x31c, lpBuffer=0x2787af0*, nNumberOfBytesToWrite=0x773, lpNumberOfBytesWritten=0x12d7a8, lpOverlapped=0x0 | out: lpBuffer=0x2787af0*, lpNumberOfBytesWritten=0x12d7a8*=0x773, lpOverlapped=0x0) returned 1 [0109.108] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Visio Shared\\Fonts", nBufferLength=0x105, lpBuffer=0x12d430, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\Visio Shared\\Fonts", lpFilePart=0x0) returned 0x41 [0109.108] SetErrorMode (uMode=0x1) returned 0x0 [0109.108] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Visio Shared\\Fonts\\*", lpFindFileData=0x12d5d0 | out: lpFindFileData=0x12d5d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81afcd40, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x6119d330, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x6119d330, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x26bc80 [0109.108] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81afcd40, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x6119d330, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x6119d330, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0109.109] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b362800, ftCreationTime.dwHighDateTime=0x1c10ce8, ftLastAccessTime.dwLowDateTime=0x81afcd40, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x2b362800, ftLastWriteTime.dwHighDateTime=0x1c10ce8, nFileSizeHigh=0x0, nFileSizeLow=0x4f2ea, dwReserved0=0x0, dwReserved1=0x0, cFileName="BIGFONT.SHX", cAlternateFileName="")) returned 1 [0109.109] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b362800, ftCreationTime.dwHighDateTime=0x1c10ce8, ftLastAccessTime.dwLowDateTime=0x81c076e0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x2b362800, ftLastWriteTime.dwHighDateTime=0x1c10ce8, nFileSizeHigh=0x0, nFileSizeLow=0xa261d, dwReserved0=0x0, dwReserved1=0x0, cFileName="CHINESET.SHX", cAlternateFileName="")) returned 1 [0109.109] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6119d330, ftCreationTime.dwHighDateTime=0x1d5e786, ftLastAccessTime.dwLowDateTime=0x6119d330, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x6119d330, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x773, dwReserved0=0x0, dwReserved1=0x0, cFileName="Decrypt Instructions.txt", cAlternateFileName="DECRYP~1.TXT")) returned 1 [0109.109] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b362800, ftCreationTime.dwHighDateTime=0x1c10ce8, ftLastAccessTime.dwLowDateTime=0x81eb4fa0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x2b362800, ftLastWriteTime.dwHighDateTime=0x1c10ce8, nFileSizeHigh=0x0, nFileSizeLow=0x6a9e6, dwReserved0=0x0, dwReserved1=0x0, cFileName="EXTFONT.SHX", cAlternateFileName="")) returned 1 [0109.109] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b362800, ftCreationTime.dwHighDateTime=0x1c10ce8, ftLastAccessTime.dwLowDateTime=0x8207e020, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x2b362800, ftLastWriteTime.dwHighDateTime=0x1c10ce8, nFileSizeHigh=0x0, nFileSizeLow=0xdc6b9, dwReserved0=0x0, dwReserved1=0x0, cFileName="GBCBIG.SHX", cAlternateFileName="")) returned 1 [0109.109] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc2656900, ftCreationTime.dwHighDateTime=0x1c2706c, ftLastAccessTime.dwLowDateTime=0x820ca2e0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xc2656900, ftLastWriteTime.dwHighDateTime=0x1c2706c, nFileSizeHigh=0x0, nFileSizeLow=0x2b01, dwReserved0=0x0, dwReserved1=0x0, cFileName="IC-TXT.SHX", cAlternateFileName="")) returned 1 [0109.109] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc8f60300, ftCreationTime.dwHighDateTime=0x1c324cc, ftLastAccessTime.dwLowDateTime=0x820ca2e0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xc8f60300, ftLastWriteTime.dwHighDateTime=0x1c324cc, nFileSizeHigh=0x0, nFileSizeLow=0x146, dwReserved0=0x0, dwReserved1=0x0, cFileName="ICAD.FMP", cAlternateFileName="")) returned 1 [0109.109] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b362800, ftCreationTime.dwHighDateTime=0x1c10ce8, ftLastAccessTime.dwLowDateTime=0x853f7be0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x2b362800, ftLastWriteTime.dwHighDateTime=0x1c10ce8, nFileSizeHigh=0x0, nFileSizeLow=0x369d3, dwReserved0=0x0, dwReserved1=0x0, cFileName="WHGDTXT.SHX", cAlternateFileName="")) returned 1 [0109.109] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b362800, ftCreationTime.dwHighDateTime=0x1c10ce8, ftLastAccessTime.dwLowDateTime=0x853f7be0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x2b362800, ftLastWriteTime.dwHighDateTime=0x1c10ce8, nFileSizeHigh=0x0, nFileSizeLow=0x2fde5, dwReserved0=0x0, dwReserved1=0x0, cFileName="WHGTXT.SHX", cAlternateFileName="")) returned 1 [0109.109] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b362800, ftCreationTime.dwHighDateTime=0x1c10ce8, ftLastAccessTime.dwLowDateTime=0x8541dd40, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x2b362800, ftLastWriteTime.dwHighDateTime=0x1c10ce8, nFileSizeHigh=0x0, nFileSizeLow=0x9e413, dwReserved0=0x0, dwReserved1=0x0, cFileName="WHTGTXT.SHX", cAlternateFileName="")) returned 1 [0109.109] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b362800, ftCreationTime.dwHighDateTime=0x1c10ce8, ftLastAccessTime.dwLowDateTime=0x8541dd40, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x2b362800, ftLastWriteTime.dwHighDateTime=0x1c10ce8, nFileSizeHigh=0x0, nFileSizeLow=0xdfc98, dwReserved0=0x0, dwReserved1=0x0, cFileName="WHTMTXT.SHX", cAlternateFileName="")) returned 1 [0109.109] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b362800, ftCreationTime.dwHighDateTime=0x1c10ce8, ftLastAccessTime.dwLowDateTime=0x8541dd40, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x2b362800, ftLastWriteTime.dwHighDateTime=0x1c10ce8, nFileSizeHigh=0x0, nFileSizeLow=0xdfc98, dwReserved0=0x0, dwReserved1=0x0, cFileName="WHTMTXT.SHX", cAlternateFileName="")) returned 0 [0109.110] FindClose (in: hFindFile=0x26bc80 | out: hFindFile=0x26bc80) returned 1 [0109.110] SetErrorMode (uMode=0x0) returned 0x1 [0109.110] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\VSTO", nBufferLength=0x105, lpBuffer=0x12d3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\VSTO", lpFilePart=0x0) returned 0x33 [0109.110] SetErrorMode (uMode=0x1) returned 0x0 [0109.110] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\VSTO\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3a42070, ftCreationTime.dwHighDateTime=0x1d2dda2, ftLastAccessTime.dwLowDateTime=0xd6cdb800, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd6cdb800, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x26bc80 [0109.112] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5a0 | out: lpFindFileData=0x12d5a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3a42070, ftCreationTime.dwHighDateTime=0x1d2dda2, ftLastAccessTime.dwLowDateTime=0xd6cdb800, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd6cdb800, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0109.112] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5a0 | out: lpFindFileData=0x12d5a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3a42070, ftCreationTime.dwHighDateTime=0x1d2dda2, ftLastAccessTime.dwLowDateTime=0xd6d4dc20, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd6d4dc20, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="10.0", cAlternateFileName="")) returned 1 [0109.112] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5a0 | out: lpFindFileData=0x12d5a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a612c00, ftCreationTime.dwHighDateTime=0x1cb6585, ftLastAccessTime.dwLowDateTime=0xd6cdb800, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x6a612c00, ftLastWriteTime.dwHighDateTime=0x1cb6585, nFileSizeHigh=0x0, nFileSizeLow=0x2d148, dwReserved0=0x0, dwReserved1=0x0, cFileName="vstoee.dll", cAlternateFileName="")) returned 1 [0109.112] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5a0 | out: lpFindFileData=0x12d5a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a612c00, ftCreationTime.dwHighDateTime=0x1cb6585, ftLastAccessTime.dwLowDateTime=0xd6c693e0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x6a612c00, ftLastWriteTime.dwHighDateTime=0x1cb6585, nFileSizeHigh=0x0, nFileSizeLow=0x3f50, dwReserved0=0x0, dwReserved1=0x0, cFileName="vstoee100.tlb", cAlternateFileName="VSTOEE~1.TLB")) returned 1 [0109.112] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5a0 | out: lpFindFileData=0x12d5a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a612c00, ftCreationTime.dwHighDateTime=0x1cb6585, ftLastAccessTime.dwLowDateTime=0xd6c8f540, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x6a612c00, ftLastWriteTime.dwHighDateTime=0x1cb6585, nFileSizeHigh=0x0, nFileSizeLow=0x5550, dwReserved0=0x0, dwReserved1=0x0, cFileName="vstoee90.tlb", cAlternateFileName="")) returned 1 [0109.112] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5a0 | out: lpFindFileData=0x12d5a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a612c00, ftCreationTime.dwHighDateTime=0x1cb6585, ftLastAccessTime.dwLowDateTime=0xd6c8f540, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x6a612c00, ftLastWriteTime.dwHighDateTime=0x1cb6585, nFileSizeHigh=0x0, nFileSizeLow=0x5550, dwReserved0=0x0, dwReserved1=0x0, cFileName="vstoee90.tlb", cAlternateFileName="")) returned 0 [0109.113] FindClose (in: hFindFile=0x26bc80 | out: hFindFile=0x26bc80) returned 1 [0109.113] SetErrorMode (uMode=0x0) returned 0x1 [0109.114] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\VSTO\\Decrypt Instructions.txt", nBufferLength=0x105, lpBuffer=0x12d2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\VSTO\\Decrypt Instructions.txt", lpFilePart=0x0) returned 0x4c [0109.114] SetErrorMode (uMode=0x1) returned 0x0 [0109.114] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\VSTO\\Decrypt Instructions.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\decrypt instructions.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x31c [0109.116] SetErrorMode (uMode=0x0) returned 0x1 [0109.117] GetFileType (hFile=0x31c) returned 0x1 [0109.117] WriteFile (in: hFile=0x31c, lpBuffer=0x278e578*, nNumberOfBytesToWrite=0x773, lpNumberOfBytesWritten=0x12d808, lpOverlapped=0x0 | out: lpBuffer=0x278e578*, lpNumberOfBytesWritten=0x12d808*=0x773, lpOverlapped=0x0) returned 1 [0109.118] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\VSTO", nBufferLength=0x105, lpBuffer=0x12d490, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\VSTO", lpFilePart=0x0) returned 0x33 [0109.118] SetErrorMode (uMode=0x1) returned 0x0 [0109.118] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\VSTO\\*", lpFindFileData=0x12d630 | out: lpFindFileData=0x12d630*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3a42070, ftCreationTime.dwHighDateTime=0x1d2dda2, ftLastAccessTime.dwLowDateTime=0x6119d330, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x6119d330, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x26bc80 [0109.119] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d640 | out: lpFindFileData=0x12d640*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3a42070, ftCreationTime.dwHighDateTime=0x1d2dda2, ftLastAccessTime.dwLowDateTime=0x6119d330, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x6119d330, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0109.119] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d640 | out: lpFindFileData=0x12d640*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3a42070, ftCreationTime.dwHighDateTime=0x1d2dda2, ftLastAccessTime.dwLowDateTime=0xd6d4dc20, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd6d4dc20, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="10.0", cAlternateFileName="")) returned 1 [0109.119] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d640 | out: lpFindFileData=0x12d640*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6119d330, ftCreationTime.dwHighDateTime=0x1d5e786, ftLastAccessTime.dwLowDateTime=0x6119d330, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x611c3490, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x773, dwReserved0=0x0, dwReserved1=0x0, cFileName="Decrypt Instructions.txt", cAlternateFileName="DECRYP~1.TXT")) returned 1 [0109.119] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d640 | out: lpFindFileData=0x12d640*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a612c00, ftCreationTime.dwHighDateTime=0x1cb6585, ftLastAccessTime.dwLowDateTime=0xd6cdb800, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x6a612c00, ftLastWriteTime.dwHighDateTime=0x1cb6585, nFileSizeHigh=0x0, nFileSizeLow=0x2d148, dwReserved0=0x0, dwReserved1=0x0, cFileName="vstoee.dll", cAlternateFileName="")) returned 1 [0109.119] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d640 | out: lpFindFileData=0x12d640*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a612c00, ftCreationTime.dwHighDateTime=0x1cb6585, ftLastAccessTime.dwLowDateTime=0xd6c693e0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x6a612c00, ftLastWriteTime.dwHighDateTime=0x1cb6585, nFileSizeHigh=0x0, nFileSizeLow=0x3f50, dwReserved0=0x0, dwReserved1=0x0, cFileName="vstoee100.tlb", cAlternateFileName="VSTOEE~1.TLB")) returned 1 [0109.119] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d640 | out: lpFindFileData=0x12d640*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a612c00, ftCreationTime.dwHighDateTime=0x1cb6585, ftLastAccessTime.dwLowDateTime=0xd6c8f540, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x6a612c00, ftLastWriteTime.dwHighDateTime=0x1cb6585, nFileSizeHigh=0x0, nFileSizeLow=0x5550, dwReserved0=0x0, dwReserved1=0x0, cFileName="vstoee90.tlb", cAlternateFileName="")) returned 1 [0109.119] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d640 | out: lpFindFileData=0x12d640*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a612c00, ftCreationTime.dwHighDateTime=0x1cb6585, ftLastAccessTime.dwLowDateTime=0xd6c8f540, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x6a612c00, ftLastWriteTime.dwHighDateTime=0x1cb6585, nFileSizeHigh=0x0, nFileSizeLow=0x5550, dwReserved0=0x0, dwReserved1=0x0, cFileName="vstoee90.tlb", cAlternateFileName="")) returned 0 [0109.119] FindClose (in: hFindFile=0x26bc80 | out: hFindFile=0x26bc80) returned 1 [0109.119] SetErrorMode (uMode=0x0) returned 0x1 [0109.120] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\VSTO\\10.0", nBufferLength=0x105, lpBuffer=0x12d390, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\VSTO\\10.0", lpFilePart=0x0) returned 0x38 [0109.120] SetErrorMode (uMode=0x1) returned 0x0 [0109.120] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\VSTO\\10.0\\*", lpFindFileData=0x12d530 | out: lpFindFileData=0x12d530*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3a42070, ftCreationTime.dwHighDateTime=0x1d2dda2, ftLastAccessTime.dwLowDateTime=0xd6d4dc20, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd6d4dc20, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x26bc80 [0109.123] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3a42070, ftCreationTime.dwHighDateTime=0x1d2dda2, ftLastAccessTime.dwLowDateTime=0xd6d4dc20, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd6d4dc20, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0109.123] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x617be070, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xd504b000, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd504b000, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 1 [0109.123] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc251dc00, ftCreationTime.dwHighDateTime=0x1cab7c7, ftLastAccessTime.dwLowDateTime=0x5e4b68d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc251dc00, ftLastWriteTime.dwHighDateTime=0x1cab7c7, nFileSizeHigh=0x0, nFileSizeLow=0x2cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="VSTOInstaller.config", cAlternateFileName="VSTOIN~1.CON")) returned 1 [0109.123] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a612c00, ftCreationTime.dwHighDateTime=0x1cb6585, ftLastAccessTime.dwLowDateTime=0xd6d27ac0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x6a612c00, ftLastWriteTime.dwHighDateTime=0x1cb6585, nFileSizeHigh=0x0, nFileSizeLow=0x18558, dwReserved0=0x0, dwReserved1=0x0, cFileName="VSTOInstaller.exe", cAlternateFileName="VSTOIN~1.EXE")) returned 1 [0109.123] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a612c00, ftCreationTime.dwHighDateTime=0x1cb6585, ftLastAccessTime.dwLowDateTime=0xd6d4dc20, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x6a612c00, ftLastWriteTime.dwHighDateTime=0x1cb6585, nFileSizeHigh=0x0, nFileSizeLow=0x5e950, dwReserved0=0x0, dwReserved1=0x0, cFileName="VSTOLoader.dll", cAlternateFileName="VSTOLO~1.DLL")) returned 1 [0109.123] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a612c00, ftCreationTime.dwHighDateTime=0x1cb6585, ftLastAccessTime.dwLowDateTime=0xd51096e0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x6a612c00, ftLastWriteTime.dwHighDateTime=0x1cb6585, nFileSizeHigh=0x0, nFileSizeLow=0xbb68, dwReserved0=0x0, dwReserved1=0x0, cFileName="VSTOMessageProvider.dll", cAlternateFileName="VSTOME~1.DLL")) returned 1 [0109.123] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a612c00, ftCreationTime.dwHighDateTime=0x1cb6585, ftLastAccessTime.dwLowDateTime=0xd51096e0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x6a612c00, ftLastWriteTime.dwHighDateTime=0x1cb6585, nFileSizeHigh=0x0, nFileSizeLow=0xbb68, dwReserved0=0x0, dwReserved1=0x0, cFileName="VSTOMessageProvider.dll", cAlternateFileName="VSTOME~1.DLL")) returned 0 [0109.124] FindClose (in: hFindFile=0x26bc80 | out: hFindFile=0x26bc80) returned 1 [0109.125] SetErrorMode (uMode=0x0) returned 0x1 [0109.126] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\VSTO\\10.0\\Decrypt Instructions.txt", nBufferLength=0x105, lpBuffer=0x12d240, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\VSTO\\10.0\\Decrypt Instructions.txt", lpFilePart=0x0) returned 0x51 [0109.126] SetErrorMode (uMode=0x1) returned 0x0 [0109.126] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\VSTO\\10.0\\Decrypt Instructions.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\10.0\\decrypt instructions.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x31c [0109.128] SetErrorMode (uMode=0x0) returned 0x1 [0109.128] GetFileType (hFile=0x31c) returned 0x1 [0109.128] WriteFile (in: hFile=0x31c, lpBuffer=0x2795588*, nNumberOfBytesToWrite=0x773, lpNumberOfBytesWritten=0x12d7a8, lpOverlapped=0x0 | out: lpBuffer=0x2795588*, lpNumberOfBytesWritten=0x12d7a8*=0x773, lpOverlapped=0x0) returned 1 [0109.129] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\VSTO\\10.0", nBufferLength=0x105, lpBuffer=0x12d430, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\VSTO\\10.0", lpFilePart=0x0) returned 0x38 [0109.129] SetErrorMode (uMode=0x1) returned 0x0 [0109.130] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\VSTO\\10.0\\*", lpFindFileData=0x12d5d0 | out: lpFindFileData=0x12d5d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3a42070, ftCreationTime.dwHighDateTime=0x1d2dda2, ftLastAccessTime.dwLowDateTime=0x611c3490, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x611c3490, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x26bc80 [0109.130] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3a42070, ftCreationTime.dwHighDateTime=0x1d2dda2, ftLastAccessTime.dwLowDateTime=0x611c3490, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x611c3490, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0109.130] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x617be070, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xd504b000, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd504b000, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 1 [0109.130] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x611c3490, ftCreationTime.dwHighDateTime=0x1d5e786, ftLastAccessTime.dwLowDateTime=0x611c3490, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x611c3490, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x773, dwReserved0=0x0, dwReserved1=0x0, cFileName="Decrypt Instructions.txt", cAlternateFileName="DECRYP~1.TXT")) returned 1 [0109.130] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc251dc00, ftCreationTime.dwHighDateTime=0x1cab7c7, ftLastAccessTime.dwLowDateTime=0x5e4b68d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc251dc00, ftLastWriteTime.dwHighDateTime=0x1cab7c7, nFileSizeHigh=0x0, nFileSizeLow=0x2cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="VSTOInstaller.config", cAlternateFileName="VSTOIN~1.CON")) returned 1 [0109.130] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a612c00, ftCreationTime.dwHighDateTime=0x1cb6585, ftLastAccessTime.dwLowDateTime=0xd6d27ac0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x6a612c00, ftLastWriteTime.dwHighDateTime=0x1cb6585, nFileSizeHigh=0x0, nFileSizeLow=0x18558, dwReserved0=0x0, dwReserved1=0x0, cFileName="VSTOInstaller.exe", cAlternateFileName="VSTOIN~1.EXE")) returned 1 [0109.130] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a612c00, ftCreationTime.dwHighDateTime=0x1cb6585, ftLastAccessTime.dwLowDateTime=0xd6d4dc20, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x6a612c00, ftLastWriteTime.dwHighDateTime=0x1cb6585, nFileSizeHigh=0x0, nFileSizeLow=0x5e950, dwReserved0=0x0, dwReserved1=0x0, cFileName="VSTOLoader.dll", cAlternateFileName="VSTOLO~1.DLL")) returned 1 [0109.130] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a612c00, ftCreationTime.dwHighDateTime=0x1cb6585, ftLastAccessTime.dwLowDateTime=0xd51096e0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x6a612c00, ftLastWriteTime.dwHighDateTime=0x1cb6585, nFileSizeHigh=0x0, nFileSizeLow=0xbb68, dwReserved0=0x0, dwReserved1=0x0, cFileName="VSTOMessageProvider.dll", cAlternateFileName="VSTOME~1.DLL")) returned 1 [0109.130] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a612c00, ftCreationTime.dwHighDateTime=0x1cb6585, ftLastAccessTime.dwLowDateTime=0xd51096e0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x6a612c00, ftLastWriteTime.dwHighDateTime=0x1cb6585, nFileSizeHigh=0x0, nFileSizeLow=0xbb68, dwReserved0=0x0, dwReserved1=0x0, cFileName="VSTOMessageProvider.dll", cAlternateFileName="VSTOME~1.DLL")) returned 0 [0109.130] FindClose (in: hFindFile=0x26bc80 | out: hFindFile=0x26bc80) returned 1 [0109.131] SetErrorMode (uMode=0x0) returned 0x1 [0109.131] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\VSTO\\10.0\\1033", nBufferLength=0x105, lpBuffer=0x12d330, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\VSTO\\10.0\\1033", lpFilePart=0x0) returned 0x3d [0109.131] SetErrorMode (uMode=0x1) returned 0x0 [0109.131] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\VSTO\\10.0\\1033\\*", lpFindFileData=0x12d4d0 | out: lpFindFileData=0x12d4d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x617be070, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xd504b000, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd504b000, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x26bc80 [0109.134] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d4e0 | out: lpFindFileData=0x12d4e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x617be070, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xd504b000, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd504b000, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0109.135] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d4e0 | out: lpFindFileData=0x12d4e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a612c00, ftCreationTime.dwHighDateTime=0x1cb6585, ftLastAccessTime.dwLowDateTime=0xd5024ea0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x6a612c00, ftLastWriteTime.dwHighDateTime=0x1cb6585, nFileSizeHigh=0x0, nFileSizeLow=0x2760, dwReserved0=0x0, dwReserved1=0x0, cFileName="VSTOInstallerUI.dll", cAlternateFileName="VSTOIN~1.DLL")) returned 1 [0109.135] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d4e0 | out: lpFindFileData=0x12d4e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a612c00, ftCreationTime.dwHighDateTime=0x1cb6585, ftLastAccessTime.dwLowDateTime=0xd504b000, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x6a612c00, ftLastWriteTime.dwHighDateTime=0x1cb6585, nFileSizeHigh=0x0, nFileSizeLow=0x4758, dwReserved0=0x0, dwReserved1=0x0, cFileName="VSTOLoaderUI.dll", cAlternateFileName="VSTOLO~1.DLL")) returned 1 [0109.135] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d4e0 | out: lpFindFileData=0x12d4e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a612c00, ftCreationTime.dwHighDateTime=0x1cb6585, ftLastAccessTime.dwLowDateTime=0xd504b000, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x6a612c00, ftLastWriteTime.dwHighDateTime=0x1cb6585, nFileSizeHigh=0x0, nFileSizeLow=0x4758, dwReserved0=0x0, dwReserved1=0x0, cFileName="VSTOLoaderUI.dll", cAlternateFileName="VSTOLO~1.DLL")) returned 0 [0109.135] FindClose (in: hFindFile=0x26bc80 | out: hFindFile=0x26bc80) returned 1 [0109.135] SetErrorMode (uMode=0x0) returned 0x1 [0109.136] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\VSTO\\10.0\\1033\\Decrypt Instructions.txt", nBufferLength=0x105, lpBuffer=0x12d1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\VSTO\\10.0\\1033\\Decrypt Instructions.txt", lpFilePart=0x0) returned 0x56 [0109.136] SetErrorMode (uMode=0x1) returned 0x0 [0109.136] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\VSTO\\10.0\\1033\\Decrypt Instructions.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\10.0\\1033\\decrypt instructions.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x31c [0109.139] SetErrorMode (uMode=0x0) returned 0x1 [0109.139] GetFileType (hFile=0x31c) returned 0x1 [0109.139] WriteFile (in: hFile=0x31c, lpBuffer=0x279c3e8*, nNumberOfBytesToWrite=0x773, lpNumberOfBytesWritten=0x12d748, lpOverlapped=0x0 | out: lpBuffer=0x279c3e8*, lpNumberOfBytesWritten=0x12d748*=0x773, lpOverlapped=0x0) returned 1 [0109.140] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\VSTO\\10.0\\1033", nBufferLength=0x105, lpBuffer=0x12d3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\VSTO\\10.0\\1033", lpFilePart=0x0) returned 0x3d [0109.140] SetErrorMode (uMode=0x1) returned 0x0 [0109.141] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\VSTO\\10.0\\1033\\*", lpFindFileData=0x12d570 | out: lpFindFileData=0x12d570*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x617be070, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x611e95f0, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x611e95f0, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x26bc80 [0109.141] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d580 | out: lpFindFileData=0x12d580*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x617be070, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x611e95f0, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x611e95f0, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0109.141] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d580 | out: lpFindFileData=0x12d580*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x611e95f0, ftCreationTime.dwHighDateTime=0x1d5e786, ftLastAccessTime.dwLowDateTime=0x611e95f0, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x611e95f0, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x773, dwReserved0=0x0, dwReserved1=0x0, cFileName="Decrypt Instructions.txt", cAlternateFileName="DECRYP~1.TXT")) returned 1 [0109.141] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d580 | out: lpFindFileData=0x12d580*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a612c00, ftCreationTime.dwHighDateTime=0x1cb6585, ftLastAccessTime.dwLowDateTime=0xd5024ea0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x6a612c00, ftLastWriteTime.dwHighDateTime=0x1cb6585, nFileSizeHigh=0x0, nFileSizeLow=0x2760, dwReserved0=0x0, dwReserved1=0x0, cFileName="VSTOInstallerUI.dll", cAlternateFileName="VSTOIN~1.DLL")) returned 1 [0109.141] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d580 | out: lpFindFileData=0x12d580*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a612c00, ftCreationTime.dwHighDateTime=0x1cb6585, ftLastAccessTime.dwLowDateTime=0xd504b000, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x6a612c00, ftLastWriteTime.dwHighDateTime=0x1cb6585, nFileSizeHigh=0x0, nFileSizeLow=0x4758, dwReserved0=0x0, dwReserved1=0x0, cFileName="VSTOLoaderUI.dll", cAlternateFileName="VSTOLO~1.DLL")) returned 1 [0109.141] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d580 | out: lpFindFileData=0x12d580*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a612c00, ftCreationTime.dwHighDateTime=0x1cb6585, ftLastAccessTime.dwLowDateTime=0xd504b000, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x6a612c00, ftLastWriteTime.dwHighDateTime=0x1cb6585, nFileSizeHigh=0x0, nFileSizeLow=0x4758, dwReserved0=0x0, dwReserved1=0x0, cFileName="VSTOLoaderUI.dll", cAlternateFileName="VSTOLO~1.DLL")) returned 0 [0109.141] FindClose (in: hFindFile=0x26bc80 | out: hFindFile=0x26bc80) returned 1 [0109.141] SetErrorMode (uMode=0x0) returned 0x1 [0109.142] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Web Folders", nBufferLength=0x105, lpBuffer=0x12d3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\Web Folders", lpFilePart=0x0) returned 0x3a [0109.142] SetErrorMode (uMode=0x1) returned 0x0 [0109.142] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Web Folders\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeeb5310, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x6a02ad50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6a02ad50, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x26bc80 [0109.143] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5a0 | out: lpFindFileData=0x12d5a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeeb5310, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x6a02ad50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6a02ad50, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0109.143] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5a0 | out: lpFindFileData=0x12d5a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeeb5310, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeeeb5310, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeeeb5310, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 1 [0109.143] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5a0 | out: lpFindFileData=0x12d5a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbdd9f300, ftCreationTime.dwHighDateTime=0x1cab7c8, ftLastAccessTime.dwLowDateTime=0x6a02ad50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbdd9f300, ftLastWriteTime.dwHighDateTime=0x1cab7c8, nFileSizeHigh=0x0, nFileSizeLow=0xaf88, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOSV.DLL", cAlternateFileName="")) returned 1 [0109.143] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5a0 | out: lpFindFileData=0x12d5a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbdd9f300, ftCreationTime.dwHighDateTime=0x1cab7c8, ftLastAccessTime.dwLowDateTime=0x6a02ad50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbdd9f300, ftLastWriteTime.dwHighDateTime=0x1cab7c8, nFileSizeHigh=0x0, nFileSizeLow=0xaf88, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOSV.DLL", cAlternateFileName="")) returned 0 [0109.143] FindClose (in: hFindFile=0x26bc80 | out: hFindFile=0x26bc80) returned 1 [0109.144] SetErrorMode (uMode=0x0) returned 0x1 [0109.144] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Web Folders\\Decrypt Instructions.txt", nBufferLength=0x105, lpBuffer=0x12d2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\Web Folders\\Decrypt Instructions.txt", lpFilePart=0x0) returned 0x53 [0109.144] SetErrorMode (uMode=0x1) returned 0x0 [0109.144] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Web Folders\\Decrypt Instructions.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\web folders\\decrypt instructions.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x31c [0109.145] SetErrorMode (uMode=0x0) returned 0x1 [0109.145] GetFileType (hFile=0x31c) returned 0x1 [0109.145] WriteFile (in: hFile=0x31c, lpBuffer=0x27a2b10*, nNumberOfBytesToWrite=0x773, lpNumberOfBytesWritten=0x12d808, lpOverlapped=0x0 | out: lpBuffer=0x27a2b10*, lpNumberOfBytesWritten=0x12d808*=0x773, lpOverlapped=0x0) returned 1 [0109.147] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Web Folders", nBufferLength=0x105, lpBuffer=0x12d490, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\Web Folders", lpFilePart=0x0) returned 0x3a [0109.147] SetErrorMode (uMode=0x1) returned 0x0 [0109.147] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Web Folders\\*", lpFindFileData=0x12d630 | out: lpFindFileData=0x12d630*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeeb5310, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x611e95f0, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x611e95f0, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x26bc80 [0109.147] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d640 | out: lpFindFileData=0x12d640*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeeb5310, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x611e95f0, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x611e95f0, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0109.147] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d640 | out: lpFindFileData=0x12d640*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeeb5310, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeeeb5310, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeeeb5310, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 1 [0109.147] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d640 | out: lpFindFileData=0x12d640*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x611e95f0, ftCreationTime.dwHighDateTime=0x1d5e786, ftLastAccessTime.dwLowDateTime=0x611e95f0, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x611e95f0, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x773, dwReserved0=0x0, dwReserved1=0x0, cFileName="Decrypt Instructions.txt", cAlternateFileName="DECRYP~1.TXT")) returned 1 [0109.147] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d640 | out: lpFindFileData=0x12d640*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbdd9f300, ftCreationTime.dwHighDateTime=0x1cab7c8, ftLastAccessTime.dwLowDateTime=0x6a02ad50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbdd9f300, ftLastWriteTime.dwHighDateTime=0x1cab7c8, nFileSizeHigh=0x0, nFileSizeLow=0xaf88, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOSV.DLL", cAlternateFileName="")) returned 1 [0109.147] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d640 | out: lpFindFileData=0x12d640*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbdd9f300, ftCreationTime.dwHighDateTime=0x1cab7c8, ftLastAccessTime.dwLowDateTime=0x6a02ad50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbdd9f300, ftLastWriteTime.dwHighDateTime=0x1cab7c8, nFileSizeHigh=0x0, nFileSizeLow=0xaf88, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOSV.DLL", cAlternateFileName="")) returned 0 [0109.147] FindClose (in: hFindFile=0x26bc80 | out: hFindFile=0x26bc80) returned 1 [0109.148] SetErrorMode (uMode=0x0) returned 0x1 [0109.148] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Web Folders\\1033", nBufferLength=0x105, lpBuffer=0x12d390, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\Web Folders\\1033", lpFilePart=0x0) returned 0x3f [0109.148] SetErrorMode (uMode=0x1) returned 0x0 [0109.148] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Web Folders\\1033\\*", lpFindFileData=0x12d530 | out: lpFindFileData=0x12d530*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeeb5310, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeeeb5310, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeeeb5310, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x26bc80 [0109.149] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeeb5310, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeeeb5310, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeeeb5310, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0109.149] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbca8c600, ftCreationTime.dwHighDateTime=0x1cab7c8, ftLastAccessTime.dwLowDateTime=0xeeeb5310, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xbca8c600, ftLastWriteTime.dwHighDateTime=0x1cab7c8, nFileSizeHigh=0x0, nFileSizeLow=0x2988, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOSVINT.DLL", cAlternateFileName="")) returned 1 [0109.149] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbca8c600, ftCreationTime.dwHighDateTime=0x1cab7c8, ftLastAccessTime.dwLowDateTime=0xeeeb5310, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xbca8c600, ftLastWriteTime.dwHighDateTime=0x1cab7c8, nFileSizeHigh=0x0, nFileSizeLow=0x2988, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOSVINT.DLL", cAlternateFileName="")) returned 0 [0109.149] FindClose (in: hFindFile=0x26bc80 | out: hFindFile=0x26bc80) returned 1 [0109.151] SetErrorMode (uMode=0x0) returned 0x1 [0109.152] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Web Folders\\1033\\Decrypt Instructions.txt", nBufferLength=0x105, lpBuffer=0x12d240, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\Web Folders\\1033\\Decrypt Instructions.txt", lpFilePart=0x0) returned 0x58 [0109.152] SetErrorMode (uMode=0x1) returned 0x0 [0109.152] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Web Folders\\1033\\Decrypt Instructions.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\web folders\\1033\\decrypt instructions.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x31c [0109.153] SetErrorMode (uMode=0x0) returned 0x1 [0109.153] GetFileType (hFile=0x31c) returned 0x1 [0109.153] WriteFile (in: hFile=0x31c, lpBuffer=0x27a9580*, nNumberOfBytesToWrite=0x773, lpNumberOfBytesWritten=0x12d7a8, lpOverlapped=0x0 | out: lpBuffer=0x27a9580*, lpNumberOfBytesWritten=0x12d7a8*=0x773, lpOverlapped=0x0) returned 1 [0109.154] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Web Folders\\1033", nBufferLength=0x105, lpBuffer=0x12d430, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\Web Folders\\1033", lpFilePart=0x0) returned 0x3f [0109.154] SetErrorMode (uMode=0x1) returned 0x0 [0109.154] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Web Folders\\1033\\*", lpFindFileData=0x12d5d0 | out: lpFindFileData=0x12d5d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeeb5310, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x6120f750, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x6120f750, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x26bc80 [0109.155] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeeb5310, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x6120f750, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x6120f750, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0109.155] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6120f750, ftCreationTime.dwHighDateTime=0x1d5e786, ftLastAccessTime.dwLowDateTime=0x6120f750, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x6120f750, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x773, dwReserved0=0x0, dwReserved1=0x0, cFileName="Decrypt Instructions.txt", cAlternateFileName="DECRYP~1.TXT")) returned 1 [0109.155] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbca8c600, ftCreationTime.dwHighDateTime=0x1cab7c8, ftLastAccessTime.dwLowDateTime=0xeeeb5310, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xbca8c600, ftLastWriteTime.dwHighDateTime=0x1cab7c8, nFileSizeHigh=0x0, nFileSizeLow=0x2988, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOSVINT.DLL", cAlternateFileName="")) returned 1 [0109.155] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbca8c600, ftCreationTime.dwHighDateTime=0x1cab7c8, ftLastAccessTime.dwLowDateTime=0xeeeb5310, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xbca8c600, ftLastWriteTime.dwHighDateTime=0x1cab7c8, nFileSizeHigh=0x0, nFileSizeLow=0x2988, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOSVINT.DLL", cAlternateFileName="")) returned 0 [0109.155] FindClose (in: hFindFile=0x26bc80 | out: hFindFile=0x26bc80) returned 1 [0109.155] SetErrorMode (uMode=0x0) returned 0x1 [0109.155] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Web Server Extensions", nBufferLength=0x105, lpBuffer=0x12d3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\Web Server Extensions", lpFilePart=0x0) returned 0x44 [0109.155] SetErrorMode (uMode=0x1) returned 0x0 [0109.156] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Web Server Extensions\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeedaa970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeedaa970, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeedaa970, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x26bc80 [0109.157] FindClose (in: hFindFile=0x26bc80 | out: hFindFile=0x26bc80) returned 1 [0109.157] SetErrorMode (uMode=0x0) returned 0x1 [0109.157] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Web Server Extensions\\Decrypt Instructions.txt", nBufferLength=0x105, lpBuffer=0x12d2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\Web Server Extensions\\Decrypt Instructions.txt", lpFilePart=0x0) returned 0x5d [0109.157] SetErrorMode (uMode=0x1) returned 0x0 [0109.158] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Web Server Extensions\\Decrypt Instructions.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\web server extensions\\decrypt instructions.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x31c [0109.158] SetErrorMode (uMode=0x0) returned 0x1 [0109.158] GetFileType (hFile=0x31c) returned 0x1 [0109.159] WriteFile (in: hFile=0x31c, lpBuffer=0x27af7e0*, nNumberOfBytesToWrite=0x773, lpNumberOfBytesWritten=0x12d808, lpOverlapped=0x0 | out: lpBuffer=0x27af7e0*, lpNumberOfBytesWritten=0x12d808*=0x773, lpOverlapped=0x0) returned 1 [0109.160] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Web Server Extensions", nBufferLength=0x105, lpBuffer=0x12d490, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\Web Server Extensions", lpFilePart=0x0) returned 0x44 [0109.160] SetErrorMode (uMode=0x1) returned 0x0 [0109.160] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Web Server Extensions\\*", lpFindFileData=0x12d630 | out: lpFindFileData=0x12d630*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeedaa970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x6120f750, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x6120f750, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x26bc80 [0109.160] FindClose (in: hFindFile=0x26bc80 | out: hFindFile=0x26bc80) returned 1 [0109.160] SetErrorMode (uMode=0x0) returned 0x1 [0109.161] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Web Server Extensions\\14", nBufferLength=0x105, lpBuffer=0x12d390, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\Web Server Extensions\\14", lpFilePart=0x0) returned 0x47 [0109.161] SetErrorMode (uMode=0x1) returned 0x0 [0109.161] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Web Server Extensions\\14\\*", lpFindFileData=0x12d530 | out: lpFindFileData=0x12d530*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeedaa970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeedaa970, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeedaa970, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x26bc80 [0109.161] FindClose (in: hFindFile=0x26bc80 | out: hFindFile=0x26bc80) returned 1 [0109.162] SetErrorMode (uMode=0x0) returned 0x1 [0109.162] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Web Server Extensions\\14\\Decrypt Instructions.txt", nBufferLength=0x105, lpBuffer=0x12d240, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\Web Server Extensions\\14\\Decrypt Instructions.txt", lpFilePart=0x0) returned 0x60 [0109.162] SetErrorMode (uMode=0x1) returned 0x0 [0109.162] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Web Server Extensions\\14\\Decrypt Instructions.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\web server extensions\\14\\decrypt instructions.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x31c [0109.162] SetErrorMode (uMode=0x0) returned 0x1 [0109.162] GetFileType (hFile=0x31c) returned 0x1 [0109.163] WriteFile (in: hFile=0x31c, lpBuffer=0x27b5ef0*, nNumberOfBytesToWrite=0x773, lpNumberOfBytesWritten=0x12d7a8, lpOverlapped=0x0 | out: lpBuffer=0x27b5ef0*, lpNumberOfBytesWritten=0x12d7a8*=0x773, lpOverlapped=0x0) returned 1 [0109.164] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Web Server Extensions\\14", nBufferLength=0x105, lpBuffer=0x12d430, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\Web Server Extensions\\14", lpFilePart=0x0) returned 0x47 [0109.164] SetErrorMode (uMode=0x1) returned 0x0 [0109.164] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Web Server Extensions\\14\\*", lpFindFileData=0x12d5d0 | out: lpFindFileData=0x12d5d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeedaa970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x6120f750, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x6120f750, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x26bc80 [0109.165] FindClose (in: hFindFile=0x26bc80 | out: hFindFile=0x26bc80) returned 1 [0109.165] SetErrorMode (uMode=0x0) returned 0x1 [0109.165] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Web Server Extensions\\14\\BIN", nBufferLength=0x105, lpBuffer=0x12d330, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\Web Server Extensions\\14\\BIN", lpFilePart=0x0) returned 0x4b [0109.165] SetErrorMode (uMode=0x1) returned 0x0 [0109.165] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Web Server Extensions\\14\\BIN\\*", lpFindFileData=0x12d4d0 | out: lpFindFileData=0x12d4d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeedaa970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xdb7d6d00, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xdb7d6d00, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x26bc80 [0109.167] FindClose (in: hFindFile=0x26bc80 | out: hFindFile=0x26bc80) returned 1 [0109.167] SetErrorMode (uMode=0x0) returned 0x1 [0109.167] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Web Server Extensions\\14\\BIN\\Decrypt Instructions.txt", nBufferLength=0x105, lpBuffer=0x12d1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\Web Server Extensions\\14\\BIN\\Decrypt Instructions.txt", lpFilePart=0x0) returned 0x64 [0109.168] SetErrorMode (uMode=0x1) returned 0x0 [0109.168] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Web Server Extensions\\14\\BIN\\Decrypt Instructions.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\web server extensions\\14\\bin\\decrypt instructions.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x31c [0109.168] SetErrorMode (uMode=0x0) returned 0x1 [0109.168] GetFileType (hFile=0x31c) returned 0x1 [0109.169] WriteFile (in: hFile=0x31c, lpBuffer=0x27bccd8*, nNumberOfBytesToWrite=0x773, lpNumberOfBytesWritten=0x12d748, lpOverlapped=0x0 | out: lpBuffer=0x27bccd8*, lpNumberOfBytesWritten=0x12d748*=0x773, lpOverlapped=0x0) returned 1 [0109.170] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Web Server Extensions\\14\\BIN", nBufferLength=0x105, lpBuffer=0x12d3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\Web Server Extensions\\14\\BIN", lpFilePart=0x0) returned 0x4b [0109.170] SetErrorMode (uMode=0x1) returned 0x0 [0109.170] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Web Server Extensions\\14\\BIN\\*", lpFindFileData=0x12d570 | out: lpFindFileData=0x12d570*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeedaa970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x612358b0, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x612358b0, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x26bc80 [0109.170] FindClose (in: hFindFile=0x26bc80 | out: hFindFile=0x26bc80) returned 1 [0109.171] SetErrorMode (uMode=0x0) returned 0x1 [0109.171] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Web Server Extensions\\14\\BIN\\1033", nBufferLength=0x105, lpBuffer=0x12d2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\Web Server Extensions\\14\\BIN\\1033", lpFilePart=0x0) returned 0x50 [0109.171] SetErrorMode (uMode=0x1) returned 0x0 [0109.171] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Web Server Extensions\\14\\BIN\\1033\\*", lpFindFileData=0x12d470 | out: lpFindFileData=0x12d470*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeedaa970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeedaa970, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeedaa970, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x26bc80 [0109.171] FindClose (in: hFindFile=0x26bc80 | out: hFindFile=0x26bc80) returned 1 [0109.172] SetErrorMode (uMode=0x0) returned 0x1 [0109.172] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Web Server Extensions\\14\\BIN\\1033\\FPEXT.MSG", nBufferLength=0x105, lpBuffer=0x12d4e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\Web Server Extensions\\14\\BIN\\1033\\FPEXT.MSG", lpFilePart=0x0) returned 0x5a [0109.172] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Web Server Extensions\\14\\BIN\\1033\\FPEXT.MSG", nBufferLength=0x105, lpBuffer=0x12d4d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\Web Server Extensions\\14\\BIN\\1033\\FPEXT.MSG", lpFilePart=0x0) returned 0x5a [0109.172] SetErrorMode (uMode=0x1) returned 0x0 [0109.173] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Web Server Extensions\\14\\BIN\\1033\\FPEXT.MSG" (normalized: "c:\\program files\\common files\\microsoft shared\\web server extensions\\14\\bin\\1033\\fpext.msg"), fInfoLevelId=0x0, lpFileInformation=0x12d750 | out: lpFileInformation=0x12d750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x870ca400, ftCreationTime.dwHighDateTime=0x1cac036, ftLastAccessTime.dwLowDateTime=0xeedaa970, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x870ca400, ftLastWriteTime.dwHighDateTime=0x1cac036, nFileSizeHigh=0x0, nFileSizeLow=0x296a5)) returned 1 [0109.173] SetErrorMode (uMode=0x0) returned 0x1 [0109.173] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Web Server Extensions\\14\\BIN\\1033\\FPEXT.MSG", nBufferLength=0x105, lpBuffer=0x12d1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\Web Server Extensions\\14\\BIN\\1033\\FPEXT.MSG", lpFilePart=0x0) returned 0x5a [0109.173] SetErrorMode (uMode=0x1) returned 0x0 [0109.173] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Web Server Extensions\\14\\BIN\\1033\\FPEXT.MSG" (normalized: "c:\\program files\\common files\\microsoft shared\\web server extensions\\14\\bin\\1033\\fpext.msg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x31c [0109.174] SetErrorMode (uMode=0x0) returned 0x1 [0109.174] GetFileType (hFile=0x31c) returned 0x1 [0109.174] GetFileSize (in: hFile=0x31c, lpFileSizeHigh=0x12d808 | out: lpFileSizeHigh=0x12d808*=0x0) returned 0x296a5 [0109.175] ReadFile (in: hFile=0x31c, lpBuffer=0x12727f10, nNumberOfBytesToRead=0x296a5, lpNumberOfBytesRead=0x12d6e8, lpOverlapped=0x0 | out: lpBuffer=0x12727f10*, lpNumberOfBytesRead=0x12d6e8*=0x296a5, lpOverlapped=0x0) returned 1 [0109.225] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Web Server Extensions\\14\\BIN\\1033\\FPEXT.MSG", nBufferLength=0x105, lpBuffer=0x12d1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\Web Server Extensions\\14\\BIN\\1033\\FPEXT.MSG", lpFilePart=0x0) returned 0x5a [0109.226] SetErrorMode (uMode=0x1) returned 0x0 [0109.226] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Web Server Extensions\\14\\BIN\\1033\\FPEXT.MSG" (normalized: "c:\\program files\\common files\\microsoft shared\\web server extensions\\14\\bin\\1033\\fpext.msg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x31c [0109.229] SetErrorMode (uMode=0x0) returned 0x1 [0109.229] GetFileType (hFile=0x31c) returned 0x1 [0109.229] WriteFile (in: hFile=0x31c, lpBuffer=0x127f70f8*, nNumberOfBytesToWrite=0x296b0, lpNumberOfBytesWritten=0x12d768, lpOverlapped=0x0 | out: lpBuffer=0x127f70f8*, lpNumberOfBytesWritten=0x12d768*=0x296b0, lpOverlapped=0x0) returned 1 [0109.234] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Web Server Extensions\\14\\BIN\\1033\\FPEXT.MSG", nBufferLength=0x105, lpBuffer=0x12d440, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\Web Server Extensions\\14\\BIN\\1033\\FPEXT.MSG", lpFilePart=0x0) returned 0x5a [0109.234] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Web Server Extensions\\14\\BIN\\1033\\FPEXT.MSG.encryptedS", nBufferLength=0x105, lpBuffer=0x12d440, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\Web Server Extensions\\14\\BIN\\1033\\FPEXT.MSG.encryptedS", lpFilePart=0x0) returned 0x65 [0109.234] SetErrorMode (uMode=0x1) returned 0x0 [0109.234] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Web Server Extensions\\14\\BIN\\1033\\FPEXT.MSG" (normalized: "c:\\program files\\common files\\microsoft shared\\web server extensions\\14\\bin\\1033\\fpext.msg"), fInfoLevelId=0x0, lpFileInformation=0x12d690 | out: lpFileInformation=0x12d690*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x870ca400, ftCreationTime.dwHighDateTime=0x1cac036, ftLastAccessTime.dwLowDateTime=0xeedaa970, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x612cde30, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x296b0)) returned 1 [0109.234] SetErrorMode (uMode=0x0) returned 0x1 [0109.234] MoveFileW (lpExistingFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Web Server Extensions\\14\\BIN\\1033\\FPEXT.MSG" (normalized: "c:\\program files\\common files\\microsoft shared\\web server extensions\\14\\bin\\1033\\fpext.msg"), lpNewFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Web Server Extensions\\14\\BIN\\1033\\FPEXT.MSG.encryptedS" (normalized: "c:\\program files\\common files\\microsoft shared\\web server extensions\\14\\bin\\1033\\fpext.msg.encrypteds")) returned 1 [0109.235] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Web Server Extensions\\14\\BIN\\1033\\Decrypt Instructions.txt", nBufferLength=0x105, lpBuffer=0x12d180, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\Web Server Extensions\\14\\BIN\\1033\\Decrypt Instructions.txt", lpFilePart=0x0) returned 0x69 [0109.235] SetErrorMode (uMode=0x1) returned 0x0 [0109.235] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Web Server Extensions\\14\\BIN\\1033\\Decrypt Instructions.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\web server extensions\\14\\bin\\1033\\decrypt instructions.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x31c [0109.236] SetErrorMode (uMode=0x0) returned 0x1 [0109.236] GetFileType (hFile=0x31c) returned 0x1 [0109.236] WriteFile (in: hFile=0x31c, lpBuffer=0x28a4bc8*, nNumberOfBytesToWrite=0x773, lpNumberOfBytesWritten=0x12d6e8, lpOverlapped=0x0 | out: lpBuffer=0x28a4bc8*, lpNumberOfBytesWritten=0x12d6e8*=0x773, lpOverlapped=0x0) returned 1 [0109.238] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Web Server Extensions\\14\\BIN\\1033", nBufferLength=0x105, lpBuffer=0x12d370, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\Web Server Extensions\\14\\BIN\\1033", lpFilePart=0x0) returned 0x50 [0109.238] SetErrorMode (uMode=0x1) returned 0x0 [0109.238] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Web Server Extensions\\14\\BIN\\1033\\*", lpFindFileData=0x12d510 | out: lpFindFileData=0x12d510*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeedaa970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x612cde30, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x612cde30, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x26bc80 [0109.238] FindClose (in: hFindFile=0x26bc80 | out: hFindFile=0x26bc80) returned 1 [0109.238] SetErrorMode (uMode=0x0) returned 0x1 [0109.238] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Services", nBufferLength=0x105, lpBuffer=0x12d450, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Services", lpFilePart=0x0) returned 0x26 [0109.239] SetErrorMode (uMode=0x1) returned 0x0 [0109.239] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Services\\*", lpFindFileData=0x12d5f0 | out: lpFindFileData=0x12d5f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd85ef28, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd85ef28, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd85ef28, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x26bc80 [0109.239] FindClose (in: hFindFile=0x26bc80 | out: hFindFile=0x26bc80) returned 1 [0109.239] SetErrorMode (uMode=0x0) returned 0x1 [0109.240] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Services\\Decrypt Instructions.txt", nBufferLength=0x105, lpBuffer=0x12d300, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Services\\Decrypt Instructions.txt", lpFilePart=0x0) returned 0x3f [0109.240] SetErrorMode (uMode=0x1) returned 0x0 [0109.240] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Services\\Decrypt Instructions.txt" (normalized: "c:\\program files\\common files\\services\\decrypt instructions.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x31c [0109.241] SetErrorMode (uMode=0x0) returned 0x1 [0109.241] GetFileType (hFile=0x31c) returned 0x1 [0109.242] WriteFile (in: hFile=0x31c, lpBuffer=0x28ab1d0*, nNumberOfBytesToWrite=0x773, lpNumberOfBytesWritten=0x12d868, lpOverlapped=0x0 | out: lpBuffer=0x28ab1d0*, lpNumberOfBytesWritten=0x12d868*=0x773, lpOverlapped=0x0) returned 1 [0109.244] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Services", nBufferLength=0x105, lpBuffer=0x12d4f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Services", lpFilePart=0x0) returned 0x26 [0109.244] SetErrorMode (uMode=0x1) returned 0x0 [0109.244] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Services\\*", lpFindFileData=0x12d690 | out: lpFindFileData=0x12d690*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd85ef28, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x612cde30, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x612cde30, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x26bc80 [0109.244] FindClose (in: hFindFile=0x26bc80 | out: hFindFile=0x26bc80) returned 1 [0109.244] SetErrorMode (uMode=0x0) returned 0x1 [0109.244] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\SpeechEngines", nBufferLength=0x105, lpBuffer=0x12d450, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\SpeechEngines", lpFilePart=0x0) returned 0x2b [0109.244] SetErrorMode (uMode=0x1) returned 0x0 [0109.245] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\SpeechEngines\\*", lpFindFileData=0x12d5f0 | out: lpFindFileData=0x12d5f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd85ef28, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd85ef28, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd85ef28, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x26bc80 [0109.245] FindClose (in: hFindFile=0x26bc80 | out: hFindFile=0x26bc80) returned 1 [0109.245] SetErrorMode (uMode=0x0) returned 0x1 [0109.245] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\SpeechEngines\\Decrypt Instructions.txt", nBufferLength=0x105, lpBuffer=0x12d300, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\SpeechEngines\\Decrypt Instructions.txt", lpFilePart=0x0) returned 0x44 [0109.245] SetErrorMode (uMode=0x1) returned 0x0 [0109.246] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\SpeechEngines\\Decrypt Instructions.txt" (normalized: "c:\\program files\\common files\\speechengines\\decrypt instructions.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x31c [0109.246] SetErrorMode (uMode=0x0) returned 0x1 [0109.246] GetFileType (hFile=0x31c) returned 0x1 [0109.246] WriteFile (in: hFile=0x31c, lpBuffer=0x28b1200*, nNumberOfBytesToWrite=0x773, lpNumberOfBytesWritten=0x12d868, lpOverlapped=0x0 | out: lpBuffer=0x28b1200*, lpNumberOfBytesWritten=0x12d868*=0x773, lpOverlapped=0x0) returned 1 [0109.248] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\SpeechEngines", nBufferLength=0x105, lpBuffer=0x12d4f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\SpeechEngines", lpFilePart=0x0) returned 0x2b [0109.248] SetErrorMode (uMode=0x1) returned 0x0 [0109.248] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\SpeechEngines\\*", lpFindFileData=0x12d690 | out: lpFindFileData=0x12d690*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd85ef28, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x612f3f90, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x612f3f90, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x26bc80 [0109.248] FindClose (in: hFindFile=0x26bc80 | out: hFindFile=0x26bc80) returned 1 [0109.248] SetErrorMode (uMode=0x0) returned 0x1 [0109.249] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft", nBufferLength=0x105, lpBuffer=0x12d3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft", lpFilePart=0x0) returned 0x35 [0109.249] SetErrorMode (uMode=0x1) returned 0x0 [0109.249] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd85ef28, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd85ef28, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd85ef28, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x26bc80 [0109.251] FindClose (in: hFindFile=0x26bc80 | out: hFindFile=0x26bc80) returned 1 [0109.251] SetErrorMode (uMode=0x0) returned 0x1 [0109.252] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\Decrypt Instructions.txt", nBufferLength=0x105, lpBuffer=0x12d2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\Decrypt Instructions.txt", lpFilePart=0x0) returned 0x4e [0109.252] SetErrorMode (uMode=0x1) returned 0x0 [0109.252] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\Decrypt Instructions.txt" (normalized: "c:\\program files\\common files\\speechengines\\microsoft\\decrypt instructions.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x31c [0109.252] SetErrorMode (uMode=0x0) returned 0x1 [0109.252] GetFileType (hFile=0x31c) returned 0x1 [0109.253] WriteFile (in: hFile=0x31c, lpBuffer=0x28b7688*, nNumberOfBytesToWrite=0x773, lpNumberOfBytesWritten=0x12d808, lpOverlapped=0x0 | out: lpBuffer=0x28b7688*, lpNumberOfBytesWritten=0x12d808*=0x773, lpOverlapped=0x0) returned 1 [0109.254] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft", nBufferLength=0x105, lpBuffer=0x12d490, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft", lpFilePart=0x0) returned 0x35 [0109.254] SetErrorMode (uMode=0x1) returned 0x0 [0109.254] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\*", lpFindFileData=0x12d630 | out: lpFindFileData=0x12d630*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd85ef28, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x612f3f90, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x612f3f90, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x26bc80 [0109.254] FindClose (in: hFindFile=0x26bc80 | out: hFindFile=0x26bc80) returned 1 [0109.255] SetErrorMode (uMode=0x0) returned 0x1 [0109.255] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20", nBufferLength=0x105, lpBuffer=0x12d390, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20", lpFilePart=0x0) returned 0x3b [0109.255] SetErrorMode (uMode=0x1) returned 0x0 [0109.255] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\*", lpFindFileData=0x12d530 | out: lpFindFileData=0x12d530*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd85ef28, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd85ef28, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd85ef28, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x26bc80 [0109.256] FindClose (in: hFindFile=0x26bc80 | out: hFindFile=0x26bc80) returned 1 [0109.256] SetErrorMode (uMode=0x0) returned 0x1 [0109.257] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\Decrypt Instructions.txt", nBufferLength=0x105, lpBuffer=0x12d240, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\Decrypt Instructions.txt", lpFilePart=0x0) returned 0x54 [0109.257] SetErrorMode (uMode=0x1) returned 0x0 [0109.257] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\Decrypt Instructions.txt" (normalized: "c:\\program files\\common files\\speechengines\\microsoft\\tts20\\decrypt instructions.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0109.266] SetErrorMode (uMode=0x0) returned 0x1 [0109.268] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20", nBufferLength=0x105, lpBuffer=0x12d430, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20", lpFilePart=0x0) returned 0x3b [0109.268] SetErrorMode (uMode=0x1) returned 0x0 [0109.268] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\*", lpFindFileData=0x12d5d0 | out: lpFindFileData=0x12d5d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd85ef28, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd85ef28, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd85ef28, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x26bc80 [0109.268] FindClose (in: hFindFile=0x26bc80 | out: hFindFile=0x26bc80) returned 1 [0109.269] SetErrorMode (uMode=0x0) returned 0x1 [0109.269] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US", nBufferLength=0x105, lpBuffer=0x12d330, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US", lpFilePart=0x0) returned 0x41 [0109.269] SetErrorMode (uMode=0x1) returned 0x0 [0109.269] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\*", lpFindFileData=0x12d4d0 | out: lpFindFileData=0x12d4d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd85ef28, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1eab37af, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x26bc80 [0109.270] FindClose (in: hFindFile=0x26bc80 | out: hFindFile=0x26bc80) returned 1 [0109.270] SetErrorMode (uMode=0x0) returned 0x1 [0109.271] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\Decrypt Instructions.txt", nBufferLength=0x105, lpBuffer=0x12d1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\Decrypt Instructions.txt", lpFilePart=0x0) returned 0x5a [0109.271] SetErrorMode (uMode=0x1) returned 0x0 [0109.271] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\Decrypt Instructions.txt" (normalized: "c:\\program files\\common files\\speechengines\\microsoft\\tts20\\en-us\\decrypt instructions.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0109.275] SetErrorMode (uMode=0x0) returned 0x1 [0109.277] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US", nBufferLength=0x105, lpBuffer=0x12d3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US", lpFilePart=0x0) returned 0x41 [0109.277] SetErrorMode (uMode=0x1) returned 0x0 [0109.277] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\*", lpFindFileData=0x12d570 | out: lpFindFileData=0x12d570*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd85ef28, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1eab37af, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x26bc80 [0109.277] FindClose (in: hFindFile=0x26bc80 | out: hFindFile=0x26bc80) returned 1 [0109.277] SetErrorMode (uMode=0x0) returned 0x1 [0109.278] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\enu-dsk", nBufferLength=0x105, lpBuffer=0x12d2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\enu-dsk", lpFilePart=0x0) returned 0x49 [0109.278] SetErrorMode (uMode=0x1) returned 0x0 [0109.278] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\enu-dsk\\*", lpFindFileData=0x12d470 | out: lpFindFileData=0x12d470*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd85ef28, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd85ef28, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xd64fa49b, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x26bc80 [0109.278] FindClose (in: hFindFile=0x26bc80 | out: hFindFile=0x26bc80) returned 1 [0109.279] SetErrorMode (uMode=0x0) returned 0x1 [0109.279] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\enu-dsk\\Decrypt Instructions.txt", nBufferLength=0x105, lpBuffer=0x12d180, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\enu-dsk\\Decrypt Instructions.txt", lpFilePart=0x0) returned 0x62 [0109.279] SetErrorMode (uMode=0x1) returned 0x0 [0109.279] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\enu-dsk\\Decrypt Instructions.txt" (normalized: "c:\\program files\\common files\\speechengines\\microsoft\\tts20\\en-us\\enu-dsk\\decrypt instructions.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0109.283] SetErrorMode (uMode=0x0) returned 0x1 [0109.284] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\enu-dsk", nBufferLength=0x105, lpBuffer=0x12d370, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\enu-dsk", lpFilePart=0x0) returned 0x49 [0109.284] SetErrorMode (uMode=0x1) returned 0x0 [0109.284] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\enu-dsk\\*", lpFindFileData=0x12d510 | out: lpFindFileData=0x12d510*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd85ef28, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd85ef28, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xd64fa49b, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x26bc80 [0109.285] FindClose (in: hFindFile=0x26bc80 | out: hFindFile=0x26bc80) returned 1 [0109.285] SetErrorMode (uMode=0x0) returned 0x1 [0109.285] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\System", nBufferLength=0x105, lpBuffer=0x12d450, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\System", lpFilePart=0x0) returned 0x24 [0109.285] SetErrorMode (uMode=0x1) returned 0x0 [0109.285] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\System\\*", lpFindFileData=0x12d5f0 | out: lpFindFileData=0x12d5f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd85ef28, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xf53e90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf53e90, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x26bc80 [0109.288] FindClose (in: hFindFile=0x26bc80 | out: hFindFile=0x26bc80) returned 1 [0109.289] SetErrorMode (uMode=0x0) returned 0x1 [0109.290] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\System\\Decrypt Instructions.txt", nBufferLength=0x105, lpBuffer=0x12d300, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\System\\Decrypt Instructions.txt", lpFilePart=0x0) returned 0x3d [0109.290] SetErrorMode (uMode=0x1) returned 0x0 [0109.290] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\System\\Decrypt Instructions.txt" (normalized: "c:\\program files\\common files\\system\\decrypt instructions.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x31c [0109.292] SetErrorMode (uMode=0x0) returned 0x1 [0109.292] GetFileType (hFile=0x31c) returned 0x1 [0109.292] WriteFile (in: hFile=0x31c, lpBuffer=0x28ca6c0*, nNumberOfBytesToWrite=0x773, lpNumberOfBytesWritten=0x12d868, lpOverlapped=0x0 | out: lpBuffer=0x28ca6c0*, lpNumberOfBytesWritten=0x12d868*=0x773, lpOverlapped=0x0) returned 1 [0109.294] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\System", nBufferLength=0x105, lpBuffer=0x12d4f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\System", lpFilePart=0x0) returned 0x24 [0109.294] SetErrorMode (uMode=0x1) returned 0x0 [0109.294] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\System\\*", lpFindFileData=0x12d690 | out: lpFindFileData=0x12d690*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd85ef28, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x613663b0, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x613663b0, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x26bc80 [0109.299] FindClose (in: hFindFile=0x26bc80 | out: hFindFile=0x26bc80) returned 1 [0109.299] SetErrorMode (uMode=0x0) returned 0x1 [0109.300] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\System\\ado", nBufferLength=0x105, lpBuffer=0x12d3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\System\\ado", lpFilePart=0x0) returned 0x28 [0109.300] SetErrorMode (uMode=0x1) returned 0x0 [0109.300] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\System\\ado\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd85ef28, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1eab37af, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x26bc80 [0109.302] FindClose (in: hFindFile=0x26bc80 | out: hFindFile=0x26bc80) returned 1 [0109.303] SetErrorMode (uMode=0x0) returned 0x1 [0109.307] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\System\\ado\\Decrypt Instructions.txt", nBufferLength=0x105, lpBuffer=0x12d2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\System\\ado\\Decrypt Instructions.txt", lpFilePart=0x0) returned 0x41 [0109.307] SetErrorMode (uMode=0x1) returned 0x0 [0109.308] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\System\\ado\\Decrypt Instructions.txt" (normalized: "c:\\program files\\common files\\system\\ado\\decrypt instructions.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x31c [0109.309] SetErrorMode (uMode=0x0) returned 0x1 [0109.309] GetFileType (hFile=0x31c) returned 0x1 [0109.310] WriteFile (in: hFile=0x31c, lpBuffer=0x26e0ef0*, nNumberOfBytesToWrite=0x773, lpNumberOfBytesWritten=0x12d808, lpOverlapped=0x0 | out: lpBuffer=0x26e0ef0*, lpNumberOfBytesWritten=0x12d808*=0x773, lpOverlapped=0x0) returned 1 [0109.311] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\System\\ado", nBufferLength=0x105, lpBuffer=0x12d490, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\System\\ado", lpFilePart=0x0) returned 0x28 [0109.311] SetErrorMode (uMode=0x1) returned 0x0 [0109.311] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\System\\ado\\*", lpFindFileData=0x12d630 | out: lpFindFileData=0x12d630*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd85ef28, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x6138c510, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x6138c510, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x26bc80 [0109.311] FindClose (in: hFindFile=0x26bc80 | out: hFindFile=0x26bc80) returned 1 [0109.312] SetErrorMode (uMode=0x0) returned 0x1 [0109.312] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\System\\ado\\en-US", nBufferLength=0x105, lpBuffer=0x12d390, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\System\\ado\\en-US", lpFilePart=0x0) returned 0x2e [0109.312] SetErrorMode (uMode=0x1) returned 0x0 [0109.312] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\System\\ado\\en-US\\*", lpFindFileData=0x12d530 | out: lpFindFileData=0x12d530*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23ef19fc, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x26bc80 [0109.313] FindClose (in: hFindFile=0x26bc80 | out: hFindFile=0x26bc80) returned 1 [0109.313] SetErrorMode (uMode=0x0) returned 0x1 [0109.313] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\System\\ado\\en-US\\Decrypt Instructions.txt", nBufferLength=0x105, lpBuffer=0x12d240, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\System\\ado\\en-US\\Decrypt Instructions.txt", lpFilePart=0x0) returned 0x47 [0109.313] SetErrorMode (uMode=0x1) returned 0x0 [0109.313] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\System\\ado\\en-US\\Decrypt Instructions.txt" (normalized: "c:\\program files\\common files\\system\\ado\\en-us\\decrypt instructions.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x31c [0109.314] SetErrorMode (uMode=0x0) returned 0x1 [0109.314] GetFileType (hFile=0x31c) returned 0x1 [0109.314] WriteFile (in: hFile=0x31c, lpBuffer=0x26e7a00*, nNumberOfBytesToWrite=0x773, lpNumberOfBytesWritten=0x12d7a8, lpOverlapped=0x0 | out: lpBuffer=0x26e7a00*, lpNumberOfBytesWritten=0x12d7a8*=0x773, lpOverlapped=0x0) returned 1 [0109.315] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\System\\ado\\en-US", nBufferLength=0x105, lpBuffer=0x12d430, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\System\\ado\\en-US", lpFilePart=0x0) returned 0x2e [0109.316] SetErrorMode (uMode=0x1) returned 0x0 [0109.316] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\System\\ado\\en-US\\*", lpFindFileData=0x12d5d0 | out: lpFindFileData=0x12d5d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x6138c510, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x6138c510, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x26bc80 [0109.316] FindClose (in: hFindFile=0x26bc80 | out: hFindFile=0x26bc80) returned 1 [0109.316] SetErrorMode (uMode=0x0) returned 0x1 [0109.316] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\System\\en-US", nBufferLength=0x105, lpBuffer=0x12d3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\System\\en-US", lpFilePart=0x0) returned 0x2a [0109.316] SetErrorMode (uMode=0x1) returned 0x0 [0109.316] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\System\\en-US\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23ef19fc, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x26bc80 [0109.317] FindClose (in: hFindFile=0x26bc80 | out: hFindFile=0x26bc80) returned 1 [0109.317] SetErrorMode (uMode=0x0) returned 0x1 [0109.317] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\System\\en-US\\Decrypt Instructions.txt", nBufferLength=0x105, lpBuffer=0x12d2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\System\\en-US\\Decrypt Instructions.txt", lpFilePart=0x0) returned 0x43 [0109.318] SetErrorMode (uMode=0x1) returned 0x0 [0109.318] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\System\\en-US\\Decrypt Instructions.txt" (normalized: "c:\\program files\\common files\\system\\en-us\\decrypt instructions.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x31c [0109.318] SetErrorMode (uMode=0x0) returned 0x1 [0109.318] GetFileType (hFile=0x31c) returned 0x1 [0109.318] WriteFile (in: hFile=0x31c, lpBuffer=0x26ede60*, nNumberOfBytesToWrite=0x773, lpNumberOfBytesWritten=0x12d808, lpOverlapped=0x0 | out: lpBuffer=0x26ede60*, lpNumberOfBytesWritten=0x12d808*=0x773, lpOverlapped=0x0) returned 1 [0109.321] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\System\\en-US", nBufferLength=0x105, lpBuffer=0x12d490, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\System\\en-US", lpFilePart=0x0) returned 0x2a [0109.321] SetErrorMode (uMode=0x1) returned 0x0 [0109.321] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\System\\en-US\\*", lpFindFileData=0x12d630 | out: lpFindFileData=0x12d630*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x6138c510, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x6138c510, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x26bc80 [0109.321] FindClose (in: hFindFile=0x26bc80 | out: hFindFile=0x26bc80) returned 1 [0109.321] SetErrorMode (uMode=0x0) returned 0x1 [0109.321] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\System\\msadc", nBufferLength=0x105, lpBuffer=0x12d3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\System\\msadc", lpFilePart=0x0) returned 0x2a [0109.321] SetErrorMode (uMode=0x1) returned 0x0 [0109.321] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\System\\msadc\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd885082, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1eab37af, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x26bc80 [0109.325] FindClose (in: hFindFile=0x26bc80 | out: hFindFile=0x26bc80) returned 1 [0109.326] SetErrorMode (uMode=0x0) returned 0x1 [0109.326] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\System\\msadc\\Decrypt Instructions.txt", nBufferLength=0x105, lpBuffer=0x12d2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\System\\msadc\\Decrypt Instructions.txt", lpFilePart=0x0) returned 0x43 [0109.326] SetErrorMode (uMode=0x1) returned 0x0 [0109.326] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\System\\msadc\\Decrypt Instructions.txt" (normalized: "c:\\program files\\common files\\system\\msadc\\decrypt instructions.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x31c [0109.328] SetErrorMode (uMode=0x0) returned 0x1 [0109.328] GetFileType (hFile=0x31c) returned 0x1 [0109.328] WriteFile (in: hFile=0x31c, lpBuffer=0x26f5940*, nNumberOfBytesToWrite=0x773, lpNumberOfBytesWritten=0x12d808, lpOverlapped=0x0 | out: lpBuffer=0x26f5940*, lpNumberOfBytesWritten=0x12d808*=0x773, lpOverlapped=0x0) returned 1 [0109.329] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\System\\msadc", nBufferLength=0x105, lpBuffer=0x12d490, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\System\\msadc", lpFilePart=0x0) returned 0x2a [0109.329] SetErrorMode (uMode=0x1) returned 0x0 [0109.330] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\System\\msadc\\*", lpFindFileData=0x12d630 | out: lpFindFileData=0x12d630*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd885082, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x613b2670, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x613b2670, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x26bc80 [0109.330] FindClose (in: hFindFile=0x26bc80 | out: hFindFile=0x26bc80) returned 1 [0109.330] SetErrorMode (uMode=0x0) returned 0x1 [0109.330] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\System\\msadc\\en-US", nBufferLength=0x105, lpBuffer=0x12d390, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\System\\msadc\\en-US", lpFilePart=0x0) returned 0x30 [0109.330] SetErrorMode (uMode=0x1) returned 0x0 [0109.330] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\System\\msadc\\en-US\\*", lpFindFileData=0x12d530 | out: lpFindFileData=0x12d530*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23ef19fc, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x26bc80 [0109.333] FindClose (in: hFindFile=0x26bc80 | out: hFindFile=0x26bc80) returned 1 [0109.334] SetErrorMode (uMode=0x0) returned 0x1 [0109.334] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\System\\msadc\\en-US\\Decrypt Instructions.txt", nBufferLength=0x105, lpBuffer=0x12d240, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\System\\msadc\\en-US\\Decrypt Instructions.txt", lpFilePart=0x0) returned 0x49 [0109.334] SetErrorMode (uMode=0x1) returned 0x0 [0109.334] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\System\\msadc\\en-US\\Decrypt Instructions.txt" (normalized: "c:\\program files\\common files\\system\\msadc\\en-us\\decrypt instructions.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x31c [0109.336] SetErrorMode (uMode=0x0) returned 0x1 [0109.336] GetFileType (hFile=0x31c) returned 0x1 [0109.336] WriteFile (in: hFile=0x31c, lpBuffer=0x26fcc08*, nNumberOfBytesToWrite=0x773, lpNumberOfBytesWritten=0x12d7a8, lpOverlapped=0x0 | out: lpBuffer=0x26fcc08*, lpNumberOfBytesWritten=0x12d7a8*=0x773, lpOverlapped=0x0) returned 1 [0109.338] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\System\\msadc\\en-US", nBufferLength=0x105, lpBuffer=0x12d430, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\System\\msadc\\en-US", lpFilePart=0x0) returned 0x30 [0109.338] SetErrorMode (uMode=0x1) returned 0x0 [0109.338] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\System\\msadc\\en-US\\*", lpFindFileData=0x12d5d0 | out: lpFindFileData=0x12d5d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x613d87d0, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x613d87d0, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x26bc80 [0109.338] FindClose (in: hFindFile=0x26bc80 | out: hFindFile=0x26bc80) returned 1 [0109.338] SetErrorMode (uMode=0x0) returned 0x1 [0109.338] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\System\\MSMAPI", nBufferLength=0x105, lpBuffer=0x12d3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\System\\MSMAPI", lpFilePart=0x0) returned 0x2b [0109.338] SetErrorMode (uMode=0x1) returned 0x0 [0109.339] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\System\\MSMAPI\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf53e90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xf53e90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf53e90, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x26bc80 [0109.340] FindClose (in: hFindFile=0x26bc80 | out: hFindFile=0x26bc80) returned 1 [0109.340] SetErrorMode (uMode=0x0) returned 0x1 [0109.340] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\System\\MSMAPI\\Decrypt Instructions.txt", nBufferLength=0x105, lpBuffer=0x12d2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\System\\MSMAPI\\Decrypt Instructions.txt", lpFilePart=0x0) returned 0x44 [0109.340] SetErrorMode (uMode=0x1) returned 0x0 [0109.340] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\System\\MSMAPI\\Decrypt Instructions.txt" (normalized: "c:\\program files\\common files\\system\\msmapi\\decrypt instructions.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x31c [0109.341] SetErrorMode (uMode=0x0) returned 0x1 [0109.341] GetFileType (hFile=0x31c) returned 0x1 [0109.341] WriteFile (in: hFile=0x31c, lpBuffer=0x2702d68*, nNumberOfBytesToWrite=0x773, lpNumberOfBytesWritten=0x12d808, lpOverlapped=0x0 | out: lpBuffer=0x2702d68*, lpNumberOfBytesWritten=0x12d808*=0x773, lpOverlapped=0x0) returned 1 [0109.342] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\System\\MSMAPI", nBufferLength=0x105, lpBuffer=0x12d490, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\System\\MSMAPI", lpFilePart=0x0) returned 0x2b [0109.343] SetErrorMode (uMode=0x1) returned 0x0 [0109.343] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\System\\MSMAPI\\*", lpFindFileData=0x12d630 | out: lpFindFileData=0x12d630*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf53e90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x613d87d0, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x613d87d0, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x26bc80 [0109.343] FindClose (in: hFindFile=0x26bc80 | out: hFindFile=0x26bc80) returned 1 [0109.343] SetErrorMode (uMode=0x0) returned 0x1 [0109.343] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\System\\MSMAPI\\1033", nBufferLength=0x105, lpBuffer=0x12d390, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\System\\MSMAPI\\1033", lpFilePart=0x0) returned 0x30 [0109.343] SetErrorMode (uMode=0x1) returned 0x0 [0109.343] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\System\\MSMAPI\\1033\\*", lpFindFileData=0x12d530 | out: lpFindFileData=0x12d530*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf53e90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xf53e90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf53e90, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x26bc80 [0109.344] FindClose (in: hFindFile=0x26bc80 | out: hFindFile=0x26bc80) returned 1 [0109.344] SetErrorMode (uMode=0x0) returned 0x1 [0109.344] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\System\\MSMAPI\\1033\\Decrypt Instructions.txt", nBufferLength=0x105, lpBuffer=0x12d240, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\System\\MSMAPI\\1033\\Decrypt Instructions.txt", lpFilePart=0x0) returned 0x49 [0109.344] SetErrorMode (uMode=0x1) returned 0x0 [0109.346] SetErrorMode (uMode=0x0) returned 0x1 [0109.346] GetFileType (hFile=0x31c) returned 0x1 [0109.346] WriteFile (in: hFile=0x31c, lpBuffer=0x27095d8*, nNumberOfBytesToWrite=0x773, lpNumberOfBytesWritten=0x12d7a8, lpOverlapped=0x0 | out: lpBuffer=0x27095d8*, lpNumberOfBytesWritten=0x12d7a8*=0x773, lpOverlapped=0x0) returned 1 [0109.348] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\System\\MSMAPI\\1033", nBufferLength=0x105, lpBuffer=0x12d430, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\System\\MSMAPI\\1033", lpFilePart=0x0) returned 0x30 [0109.348] SetErrorMode (uMode=0x1) returned 0x0 [0109.348] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\System\\MSMAPI\\1033\\*", lpFindFileData=0x12d5d0 | out: lpFindFileData=0x12d5d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf53e90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x613d87d0, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x613d87d0, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x26bc80 [0109.348] FindClose (in: hFindFile=0x26bc80 | out: hFindFile=0x26bc80) returned 1 [0109.348] SetErrorMode (uMode=0x0) returned 0x1 [0109.349] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\System\\Ole DB", nBufferLength=0x105, lpBuffer=0x12d3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\System\\Ole DB", lpFilePart=0x0) returned 0x2b [0109.349] SetErrorMode (uMode=0x1) returned 0x0 [0109.349] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\System\\Ole DB\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd885082, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x5f324e30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5f324e30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x26bc80 [0109.351] FindClose (in: hFindFile=0x26bc80 | out: hFindFile=0x26bc80) returned 1 [0109.352] SetErrorMode (uMode=0x0) returned 0x1 [0109.352] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\System\\Ole DB\\Decrypt Instructions.txt", nBufferLength=0x105, lpBuffer=0x12d2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\System\\Ole DB\\Decrypt Instructions.txt", lpFilePart=0x0) returned 0x44 [0109.352] SetErrorMode (uMode=0x1) returned 0x0 [0109.354] SetErrorMode (uMode=0x0) returned 0x1 [0109.354] GetFileType (hFile=0x31c) returned 0x1 [0109.354] WriteFile (in: hFile=0x31c, lpBuffer=0x2710ec8*, nNumberOfBytesToWrite=0x773, lpNumberOfBytesWritten=0x12d808, lpOverlapped=0x0 | out: lpBuffer=0x2710ec8*, lpNumberOfBytesWritten=0x12d808*=0x773, lpOverlapped=0x0) returned 1 [0109.359] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\System\\Ole DB", nBufferLength=0x105, lpBuffer=0x12d490, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\System\\Ole DB", lpFilePart=0x0) returned 0x2b [0109.359] SetErrorMode (uMode=0x1) returned 0x0 [0109.359] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\System\\Ole DB\\*", lpFindFileData=0x12d630 | out: lpFindFileData=0x12d630*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd885082, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x613fe930, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x613fe930, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x26bc80 [0109.359] FindClose (in: hFindFile=0x26bc80 | out: hFindFile=0x26bc80) returned 1 [0109.359] SetErrorMode (uMode=0x0) returned 0x1 [0109.360] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\System\\Ole DB\\en-US", nBufferLength=0x105, lpBuffer=0x12d390, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\System\\Ole DB\\en-US", lpFilePart=0x0) returned 0x31 [0109.360] SetErrorMode (uMode=0x1) returned 0x0 [0109.360] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\System\\Ole DB\\en-US\\*", lpFindFileData=0x12d530 | out: lpFindFileData=0x12d530*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23ef19fc, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x26bc80 [0109.360] FindClose (in: hFindFile=0x26bc80 | out: hFindFile=0x26bc80) returned 1 [0109.360] SetErrorMode (uMode=0x0) returned 0x1 [0109.361] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\System\\Ole DB\\en-US\\Decrypt Instructions.txt", nBufferLength=0x105, lpBuffer=0x12d240, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\System\\Ole DB\\en-US\\Decrypt Instructions.txt", lpFilePart=0x0) returned 0x4a [0109.361] SetErrorMode (uMode=0x1) returned 0x0 [0109.363] SetErrorMode (uMode=0x0) returned 0x1 [0109.363] GetFileType (hFile=0x31c) returned 0x1 [0109.363] WriteFile (in: hFile=0x31c, lpBuffer=0x2717e80*, nNumberOfBytesToWrite=0x773, lpNumberOfBytesWritten=0x12d7a8, lpOverlapped=0x0 | out: lpBuffer=0x2717e80*, lpNumberOfBytesWritten=0x12d7a8*=0x773, lpOverlapped=0x0) returned 1 [0109.365] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\System\\Ole DB\\en-US", nBufferLength=0x105, lpBuffer=0x12d430, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\System\\Ole DB\\en-US", lpFilePart=0x0) returned 0x31 [0109.365] SetErrorMode (uMode=0x1) returned 0x0 [0109.365] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\System\\Ole DB\\en-US\\*", lpFindFileData=0x12d5d0 | out: lpFindFileData=0x12d5d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x613fe930, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x613fe930, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x26bc80 [0109.365] FindClose (in: hFindFile=0x26bc80 | out: hFindFile=0x26bc80) returned 1 [0109.365] SetErrorMode (uMode=0x0) returned 0x1 [0109.366] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker", nBufferLength=0x105, lpBuffer=0x12d4b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker", lpFilePart=0x0) returned 0x1a [0109.366] SetErrorMode (uMode=0x1) returned 0x0 [0109.366] FindFirstFileW (in: lpFileName="C:\\Program Files\\DVD Maker\\*", lpFindFileData=0x12d650 | out: lpFindFileData=0x12d650*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x9f9d33b0, ftLastAccessTime.dwHighDateTime=0x1d5c60a, ftLastWriteTime.dwLowDateTime=0x9f9d33b0, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x26bc80 [0109.366] FindClose (in: hFindFile=0x26bc80 | out: hFindFile=0x26bc80) returned 1 [0109.366] SetErrorMode (uMode=0x0) returned 0x1 [0109.367] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Decrypt Instructions.txt", nBufferLength=0x105, lpBuffer=0x12d360, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Decrypt Instructions.txt", lpFilePart=0x0) returned 0x33 [0109.367] SetErrorMode (uMode=0x1) returned 0x0 [0109.367] SetErrorMode (uMode=0x0) returned 0x1 [0109.367] GetFileType (hFile=0x31c) returned 0x1 [0109.368] WriteFile (in: hFile=0x31c, lpBuffer=0x271f7e8*, nNumberOfBytesToWrite=0x773, lpNumberOfBytesWritten=0x12d8c8, lpOverlapped=0x0 | out: lpBuffer=0x271f7e8*, lpNumberOfBytesWritten=0x12d8c8*=0x773, lpOverlapped=0x0) returned 1 [0109.369] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker", nBufferLength=0x105, lpBuffer=0x12d550, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker", lpFilePart=0x0) returned 0x1a [0109.369] SetErrorMode (uMode=0x1) returned 0x0 [0109.369] FindFirstFileW (in: lpFileName="C:\\Program Files\\DVD Maker\\*", lpFindFileData=0x12d6f0 | out: lpFindFileData=0x12d6f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x61424a90, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x61424a90, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x26bc80 [0109.369] FindClose (in: hFindFile=0x26bc80 | out: hFindFile=0x26bc80) returned 1 [0109.370] SetErrorMode (uMode=0x0) returned 0x1 [0109.370] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\en-US", nBufferLength=0x105, lpBuffer=0x12d450, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\en-US", lpFilePart=0x0) returned 0x20 [0109.370] SetErrorMode (uMode=0x1) returned 0x0 [0109.370] FindFirstFileW (in: lpFileName="C:\\Program Files\\DVD Maker\\en-US\\*", lpFindFileData=0x12d5f0 | out: lpFindFileData=0x12d5f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ead9a68, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xaa276ca7, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9f05f082, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x26bc80 [0109.370] FindClose (in: hFindFile=0x26bc80 | out: hFindFile=0x26bc80) returned 1 [0109.371] SetErrorMode (uMode=0x0) returned 0x1 [0109.371] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\en-US\\Decrypt Instructions.txt", nBufferLength=0x105, lpBuffer=0x12d300, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\en-US\\Decrypt Instructions.txt", lpFilePart=0x0) returned 0x39 [0109.371] SetErrorMode (uMode=0x1) returned 0x0 [0109.371] SetErrorMode (uMode=0x0) returned 0x1 [0109.371] GetFileType (hFile=0x31c) returned 0x1 [0109.372] WriteFile (in: hFile=0x31c, lpBuffer=0x2726598*, nNumberOfBytesToWrite=0x773, lpNumberOfBytesWritten=0x12d868, lpOverlapped=0x0 | out: lpBuffer=0x2726598*, lpNumberOfBytesWritten=0x12d868*=0x773, lpOverlapped=0x0) returned 1 [0109.373] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\en-US", nBufferLength=0x105, lpBuffer=0x12d4f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\en-US", lpFilePart=0x0) returned 0x20 [0109.373] SetErrorMode (uMode=0x1) returned 0x0 [0109.373] FindFirstFileW (in: lpFileName="C:\\Program Files\\DVD Maker\\en-US\\*", lpFindFileData=0x12d690 | out: lpFindFileData=0x12d690*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ead9a68, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x61424a90, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x61424a90, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x26bc80 [0109.373] FindClose (in: hFindFile=0x26bc80 | out: hFindFile=0x26bc80) returned 1 [0109.374] SetErrorMode (uMode=0x0) returned 0x1 [0109.374] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared", nBufferLength=0x105, lpBuffer=0x12d450, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared", lpFilePart=0x0) returned 0x21 [0109.374] SetErrorMode (uMode=0x1) returned 0x0 [0109.374] FindFirstFileW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\*", lpFindFileData=0x12d5f0 | out: lpFindFileData=0x12d5f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x9f0852f1, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9f0852f1, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x26bc80 [0109.376] FindClose (in: hFindFile=0x26bc80 | out: hFindFile=0x26bc80) returned 1 [0109.377] SetErrorMode (uMode=0x0) returned 0x1 [0109.377] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DissolveAnother.png", nBufferLength=0x105, lpBuffer=0x12d660, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DissolveAnother.png", lpFilePart=0x0) returned 0x35 [0109.377] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DissolveAnother.png", nBufferLength=0x105, lpBuffer=0x12d650, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DissolveAnother.png", lpFilePart=0x0) returned 0x35 [0109.378] SetErrorMode (uMode=0x1) returned 0x0 [0109.378] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DissolveAnother.png" (normalized: "c:\\program files\\dvd maker\\shared\\dissolveanother.png"), fInfoLevelId=0x0, lpFileInformation=0x12d8d0 | out: lpFileInformation=0x12d8d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93d12cc5, ftCreationTime.dwHighDateTime=0x1ca0419, ftLastAccessTime.dwLowDateTime=0x93d12cc5, ftLastAccessTime.dwHighDateTime=0x1ca0419, ftLastWriteTime.dwLowDateTime=0x6895ae5b, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x6d1f)) returned 1 [0109.381] SetErrorMode (uMode=0x0) returned 0x1 [0109.381] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DissolveAnother.png", nBufferLength=0x105, lpBuffer=0x12d320, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DissolveAnother.png", lpFilePart=0x0) returned 0x35 [0109.381] SetErrorMode (uMode=0x1) returned 0x0 [0109.381] SetErrorMode (uMode=0x0) returned 0x1 [0109.381] GetFileType (hFile=0x31c) returned 0x1 [0109.381] GetFileSize (in: hFile=0x31c, lpFileSizeHigh=0x12d988 | out: lpFileSizeHigh=0x12d988*=0x0) returned 0x6d1f [0109.411] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DissolveAnother.png", nBufferLength=0x105, lpBuffer=0x12d330, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DissolveAnother.png", lpFilePart=0x0) returned 0x35 [0109.411] SetErrorMode (uMode=0x1) returned 0x0 [0109.417] SetErrorMode (uMode=0x0) returned 0x1 [0109.419] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DissolveNoise.png", nBufferLength=0x105, lpBuffer=0x12d660, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DissolveNoise.png", lpFilePart=0x0) returned 0x33 [0109.419] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DissolveNoise.png", nBufferLength=0x105, lpBuffer=0x12d650, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DissolveNoise.png", lpFilePart=0x0) returned 0x33 [0109.419] SetErrorMode (uMode=0x1) returned 0x0 [0109.420] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DissolveNoise.png" (normalized: "c:\\program files\\dvd maker\\shared\\dissolvenoise.png"), fInfoLevelId=0x0, lpFileInformation=0x12d8d0 | out: lpFileInformation=0x12d8d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93d38e22, ftCreationTime.dwHighDateTime=0x1ca0419, ftLastAccessTime.dwLowDateTime=0x93d38e22, ftLastAccessTime.dwHighDateTime=0x1ca0419, ftLastWriteTime.dwLowDateTime=0x68980fb9, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xb7835)) returned 1 [0109.420] SetErrorMode (uMode=0x0) returned 0x1 [0109.420] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DissolveNoise.png", nBufferLength=0x105, lpBuffer=0x12d320, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DissolveNoise.png", lpFilePart=0x0) returned 0x33 [0109.420] SetErrorMode (uMode=0x1) returned 0x0 [0109.420] SetErrorMode (uMode=0x0) returned 0x1 [0109.420] GetFileType (hFile=0x31c) returned 0x1 [0109.421] GetFileSize (in: hFile=0x31c, lpFileSizeHigh=0x12d988 | out: lpFileSizeHigh=0x12d988*=0x0) returned 0xb7835 [0109.423] ReadFile (in: hFile=0x31c, lpBuffer=0x128207d8, nNumberOfBytesToRead=0xb7835, lpNumberOfBytesRead=0x12d868, lpOverlapped=0x0 | out: lpBuffer=0x128207d8*, lpNumberOfBytesRead=0x12d868*=0xb7835, lpOverlapped=0x0) returned 1 [0109.627] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DissolveNoise.png", nBufferLength=0x105, lpBuffer=0x12d330, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DissolveNoise.png", lpFilePart=0x0) returned 0x33 [0109.627] SetErrorMode (uMode=0x1) returned 0x0 [0109.630] SetErrorMode (uMode=0x0) returned 0x1 [0109.631] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\Decrypt Instructions.txt", nBufferLength=0x105, lpBuffer=0x12d300, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\Decrypt Instructions.txt", lpFilePart=0x0) returned 0x3a [0109.632] SetErrorMode (uMode=0x1) returned 0x0 [0109.632] SetErrorMode (uMode=0x0) returned 0x1 [0109.632] GetFileType (hFile=0x31c) returned 0x1 [0109.633] WriteFile (in: hFile=0x31c, lpBuffer=0x26c5290*, nNumberOfBytesToWrite=0x773, lpNumberOfBytesWritten=0x12d868, lpOverlapped=0x0 | out: lpBuffer=0x26c5290*, lpNumberOfBytesWritten=0x12d868*=0x773, lpOverlapped=0x0) returned 1 [0109.634] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared", nBufferLength=0x105, lpBuffer=0x12d4f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared", lpFilePart=0x0) returned 0x21 [0109.635] SetErrorMode (uMode=0x1) returned 0x0 [0109.635] FindFirstFileW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\*", lpFindFileData=0x12d690 | out: lpFindFileData=0x12d690*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x616ac1f0, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x616ac1f0, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x26bc80 [0109.635] FindClose (in: hFindFile=0x26bc80 | out: hFindFile=0x26bc80) returned 1 [0109.635] SetErrorMode (uMode=0x0) returned 0x1 [0109.635] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles", nBufferLength=0x105, lpBuffer=0x12d3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles", lpFilePart=0x0) returned 0x2b [0109.635] SetErrorMode (uMode=0x1) returned 0x0 [0109.636] FindFirstFileW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9f0852f1, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaabb4389, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa1ad8615, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x26bc80 [0109.757] FindClose (in: hFindFile=0x26bc80 | out: hFindFile=0x26bc80) returned 1 [0109.758] SetErrorMode (uMode=0x0) returned 0x1 [0109.758] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\16to9Squareframe_Buttongraphic.png", nBufferLength=0x105, lpBuffer=0x12d600, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\16to9Squareframe_Buttongraphic.png", lpFilePart=0x0) returned 0x4e [0109.758] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\16to9Squareframe_Buttongraphic.png", nBufferLength=0x105, lpBuffer=0x12d5f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\16to9Squareframe_Buttongraphic.png", lpFilePart=0x0) returned 0x4e [0109.759] SetErrorMode (uMode=0x1) returned 0x0 [0109.759] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\16to9Squareframe_Buttongraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\16to9squareframe_buttongraphic.png"), fInfoLevelId=0x0, lpFileInformation=0x12d870 | out: lpFileInformation=0x12d870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ec183f4, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6ec183f4, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x49c9fe3b, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x278b)) returned 1 [0109.803] SetErrorMode (uMode=0x0) returned 0x1 [0109.803] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\16to9Squareframe_Buttongraphic.png", nBufferLength=0x105, lpBuffer=0x12d2c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\16to9Squareframe_Buttongraphic.png", lpFilePart=0x0) returned 0x4e [0109.803] SetErrorMode (uMode=0x1) returned 0x0 [0109.804] SetErrorMode (uMode=0x0) returned 0x1 [0109.804] GetFileType (hFile=0x31c) returned 0x1 [0109.804] GetFileSize (in: hFile=0x31c, lpFileSizeHigh=0x12d928 | out: lpFileSizeHigh=0x12d928*=0x0) returned 0x278b [0109.804] ReadFile (in: hFile=0x31c, lpBuffer=0x26cd688, nNumberOfBytesToRead=0x278b, lpNumberOfBytesRead=0x12d808, lpOverlapped=0x0 | out: lpBuffer=0x26cd688*, lpNumberOfBytesRead=0x12d808*=0x278b, lpOverlapped=0x0) returned 1 [0109.869] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\16to9Squareframe_Buttongraphic.png", nBufferLength=0x105, lpBuffer=0x12d2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\16to9Squareframe_Buttongraphic.png", lpFilePart=0x0) returned 0x4e [0109.869] SetErrorMode (uMode=0x1) returned 0x0 [0109.871] SetErrorMode (uMode=0x0) returned 0x1 [0109.873] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\16to9Squareframe_SelectionSubpicture.png", nBufferLength=0x105, lpBuffer=0x12d600, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\16to9Squareframe_SelectionSubpicture.png", lpFilePart=0x0) returned 0x54 [0109.873] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\16to9Squareframe_SelectionSubpicture.png", nBufferLength=0x105, lpBuffer=0x12d5f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\16to9Squareframe_SelectionSubpicture.png", lpFilePart=0x0) returned 0x54 [0109.873] SetErrorMode (uMode=0x1) returned 0x0 [0109.873] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\16to9Squareframe_SelectionSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\16to9squareframe_selectionsubpicture.png"), fInfoLevelId=0x0, lpFileInformation=0x12d870 | out: lpFileInformation=0x12d870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ec3e551, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6ec3e551, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x49c9fe3b, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xcd6)) returned 1 [0109.874] SetErrorMode (uMode=0x0) returned 0x1 [0109.874] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\16to9Squareframe_SelectionSubpicture.png", nBufferLength=0x105, lpBuffer=0x12d2c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\16to9Squareframe_SelectionSubpicture.png", lpFilePart=0x0) returned 0x54 [0109.874] SetErrorMode (uMode=0x1) returned 0x0 [0109.874] SetErrorMode (uMode=0x0) returned 0x1 [0109.874] GetFileType (hFile=0x31c) returned 0x1 [0109.874] GetFileSize (in: hFile=0x31c, lpFileSizeHigh=0x12d928 | out: lpFileSizeHigh=0x12d928*=0x0) returned 0xcd6 [0109.874] ReadFile (in: hFile=0x31c, lpBuffer=0x27be858, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12d808, lpOverlapped=0x0 | out: lpBuffer=0x27be858*, lpNumberOfBytesRead=0x12d808*=0xcd6, lpOverlapped=0x0) returned 1 [0110.020] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\16to9Squareframe_SelectionSubpicture.png", nBufferLength=0x105, lpBuffer=0x12d2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\16to9Squareframe_SelectionSubpicture.png", lpFilePart=0x0) returned 0x54 [0110.020] SetErrorMode (uMode=0x1) returned 0x0 [0110.022] SetErrorMode (uMode=0x0) returned 0x1 [0110.023] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\16to9Squareframe_VideoInset.png", nBufferLength=0x105, lpBuffer=0x12d600, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\16to9Squareframe_VideoInset.png", lpFilePart=0x0) returned 0x4b [0110.023] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\16to9Squareframe_VideoInset.png", nBufferLength=0x105, lpBuffer=0x12d5f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\16to9Squareframe_VideoInset.png", lpFilePart=0x0) returned 0x4b [0110.024] SetErrorMode (uMode=0x1) returned 0x0 [0110.024] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\16to9Squareframe_VideoInset.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\16to9squareframe_videoinset.png"), fInfoLevelId=0x0, lpFileInformation=0x12d870 | out: lpFileInformation=0x12d870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ec3e551, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6ec3e551, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x49c9fe3b, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xcf4)) returned 1 [0110.063] SetErrorMode (uMode=0x0) returned 0x1 [0110.063] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\16to9Squareframe_VideoInset.png", nBufferLength=0x105, lpBuffer=0x12d2c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\16to9Squareframe_VideoInset.png", lpFilePart=0x0) returned 0x4b [0110.063] SetErrorMode (uMode=0x1) returned 0x0 [0110.064] SetErrorMode (uMode=0x0) returned 0x1 [0110.064] GetFileType (hFile=0x31c) returned 0x1 [0110.064] GetFileSize (in: hFile=0x31c, lpFileSizeHigh=0x12d928 | out: lpFileSizeHigh=0x12d928*=0x0) returned 0xcf4 [0110.064] ReadFile (in: hFile=0x31c, lpBuffer=0x28a5a08, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12d808, lpOverlapped=0x0 | out: lpBuffer=0x28a5a08*, lpNumberOfBytesRead=0x12d808*=0xcf4, lpOverlapped=0x0) returned 1 [0110.134] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\16to9Squareframe_VideoInset.png", nBufferLength=0x105, lpBuffer=0x12d2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\16to9Squareframe_VideoInset.png", lpFilePart=0x0) returned 0x4b [0110.134] SetErrorMode (uMode=0x1) returned 0x0 [0110.136] SetErrorMode (uMode=0x0) returned 0x1 [0110.138] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\4to3Squareframe_Buttongraphic.png", nBufferLength=0x105, lpBuffer=0x12d600, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\4to3Squareframe_Buttongraphic.png", lpFilePart=0x0) returned 0x4d [0110.138] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\4to3Squareframe_Buttongraphic.png", nBufferLength=0x105, lpBuffer=0x12d5f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\4to3Squareframe_Buttongraphic.png", lpFilePart=0x0) returned 0x4d [0110.138] SetErrorMode (uMode=0x1) returned 0x0 [0110.138] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\4to3Squareframe_Buttongraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\4to3squareframe_buttongraphic.png"), fInfoLevelId=0x0, lpFileInformation=0x12d870 | out: lpFileInformation=0x12d870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ec646ae, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6ec646ae, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x49cc5f99, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x2e55)) returned 1 [0110.138] SetErrorMode (uMode=0x0) returned 0x1 [0110.139] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\4to3Squareframe_Buttongraphic.png", nBufferLength=0x105, lpBuffer=0x12d2c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\4to3Squareframe_Buttongraphic.png", lpFilePart=0x0) returned 0x4d [0110.139] SetErrorMode (uMode=0x1) returned 0x0 [0110.139] SetErrorMode (uMode=0x0) returned 0x1 [0110.139] GetFileType (hFile=0x31c) returned 0x1 [0110.139] GetFileSize (in: hFile=0x31c, lpFileSizeHigh=0x12d928 | out: lpFileSizeHigh=0x12d928*=0x0) returned 0x2e55 [0110.139] ReadFile (in: hFile=0x31c, lpBuffer=0x27904d0, nNumberOfBytesToRead=0x2e55, lpNumberOfBytesRead=0x12d808, lpOverlapped=0x0 | out: lpBuffer=0x27904d0*, lpNumberOfBytesRead=0x12d808*=0x2e55, lpOverlapped=0x0) returned 1 [0110.214] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\4to3Squareframe_Buttongraphic.png", nBufferLength=0x105, lpBuffer=0x12d2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\4to3Squareframe_Buttongraphic.png", lpFilePart=0x0) returned 0x4d [0110.214] SetErrorMode (uMode=0x1) returned 0x0 [0110.216] SetErrorMode (uMode=0x0) returned 0x1 [0110.218] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\4to3Squareframe_SelectionSubpicture.png", nBufferLength=0x105, lpBuffer=0x12d600, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\4to3Squareframe_SelectionSubpicture.png", lpFilePart=0x0) returned 0x53 [0110.218] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\4to3Squareframe_SelectionSubpicture.png", nBufferLength=0x105, lpBuffer=0x12d5f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\4to3Squareframe_SelectionSubpicture.png", lpFilePart=0x0) returned 0x53 [0110.218] SetErrorMode (uMode=0x1) returned 0x0 [0110.218] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\4to3Squareframe_SelectionSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\4to3squareframe_selectionsubpicture.png"), fInfoLevelId=0x0, lpFileInformation=0x12d870 | out: lpFileInformation=0x12d870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ec646ae, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6ec646ae, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x49cc5f99, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xce8)) returned 1 [0110.218] SetErrorMode (uMode=0x0) returned 0x1 [0110.218] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\4to3Squareframe_SelectionSubpicture.png", nBufferLength=0x105, lpBuffer=0x12d2c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\4to3Squareframe_SelectionSubpicture.png", lpFilePart=0x0) returned 0x53 [0110.219] SetErrorMode (uMode=0x1) returned 0x0 [0110.219] SetErrorMode (uMode=0x0) returned 0x1 [0110.219] GetFileType (hFile=0x31c) returned 0x1 [0110.219] GetFileSize (in: hFile=0x31c, lpFileSizeHigh=0x12d928 | out: lpFileSizeHigh=0x12d928*=0x0) returned 0xce8 [0110.219] ReadFile (in: hFile=0x31c, lpBuffer=0x2883f60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12d808, lpOverlapped=0x0 | out: lpBuffer=0x2883f60*, lpNumberOfBytesRead=0x12d808*=0xce8, lpOverlapped=0x0) returned 1 [0110.245] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\4to3Squareframe_SelectionSubpicture.png", nBufferLength=0x105, lpBuffer=0x12d2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\4to3Squareframe_SelectionSubpicture.png", lpFilePart=0x0) returned 0x53 [0110.245] SetErrorMode (uMode=0x1) returned 0x0 [0110.247] SetErrorMode (uMode=0x0) returned 0x1 [0110.249] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\4to3Squareframe_VideoInset.png", nBufferLength=0x105, lpBuffer=0x12d600, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\4to3Squareframe_VideoInset.png", lpFilePart=0x0) returned 0x4a [0110.249] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\4to3Squareframe_VideoInset.png", nBufferLength=0x105, lpBuffer=0x12d5f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\4to3Squareframe_VideoInset.png", lpFilePart=0x0) returned 0x4a [0110.249] SetErrorMode (uMode=0x1) returned 0x0 [0110.249] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\4to3Squareframe_VideoInset.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\4to3squareframe_videoinset.png"), fInfoLevelId=0x0, lpFileInformation=0x12d870 | out: lpFileInformation=0x12d870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ec8a80b, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6ec8a80b, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x49cc5f99, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xd8b)) returned 1 [0110.250] SetErrorMode (uMode=0x0) returned 0x1 [0110.250] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\4to3Squareframe_VideoInset.png", nBufferLength=0x105, lpBuffer=0x12d2c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\4to3Squareframe_VideoInset.png", lpFilePart=0x0) returned 0x4a [0110.250] SetErrorMode (uMode=0x1) returned 0x0 [0110.250] SetErrorMode (uMode=0x0) returned 0x1 [0110.250] GetFileType (hFile=0x31c) returned 0x1 [0110.250] GetFileSize (in: hFile=0x31c, lpFileSizeHigh=0x12d928 | out: lpFileSizeHigh=0x12d928*=0x0) returned 0xd8b [0110.251] ReadFile (in: hFile=0x31c, lpBuffer=0x276e3f0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12d808, lpOverlapped=0x0 | out: lpBuffer=0x276e3f0*, lpNumberOfBytesRead=0x12d808*=0xd8b, lpOverlapped=0x0) returned 1 [0110.306] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\4to3Squareframe_VideoInset.png", nBufferLength=0x105, lpBuffer=0x12d2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\4to3Squareframe_VideoInset.png", lpFilePart=0x0) returned 0x4a [0110.307] SetErrorMode (uMode=0x1) returned 0x0 [0110.309] SetErrorMode (uMode=0x0) returned 0x1 [0110.310] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\circleround_glass.png", nBufferLength=0x105, lpBuffer=0x12d600, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\circleround_glass.png", lpFilePart=0x0) returned 0x41 [0110.310] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\circleround_glass.png", nBufferLength=0x105, lpBuffer=0x12d5f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\circleround_glass.png", lpFilePart=0x0) returned 0x41 [0110.310] SetErrorMode (uMode=0x1) returned 0x0 [0110.311] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\circleround_glass.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\circleround_glass.png"), fInfoLevelId=0x0, lpFileInformation=0x12d870 | out: lpFileInformation=0x12d870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ebf2297, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6ebf2297, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4c9679c1, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x6a91)) returned 1 [0110.350] SetErrorMode (uMode=0x0) returned 0x1 [0110.350] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\circleround_glass.png", nBufferLength=0x105, lpBuffer=0x12d2c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\circleround_glass.png", lpFilePart=0x0) returned 0x41 [0110.350] SetErrorMode (uMode=0x1) returned 0x0 [0110.350] SetErrorMode (uMode=0x0) returned 0x1 [0110.350] GetFileType (hFile=0x31c) returned 0x1 [0110.350] GetFileSize (in: hFile=0x31c, lpFileSizeHigh=0x12d928 | out: lpFileSizeHigh=0x12d928*=0x0) returned 0x6a91 [0110.350] ReadFile (in: hFile=0x31c, lpBuffer=0x2854ea0, nNumberOfBytesToRead=0x6a91, lpNumberOfBytesRead=0x12d808, lpOverlapped=0x0 | out: lpBuffer=0x2854ea0*, lpNumberOfBytesRead=0x12d808*=0x6a91, lpOverlapped=0x0) returned 1 [0110.377] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\circleround_glass.png", nBufferLength=0x105, lpBuffer=0x12d2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\circleround_glass.png", lpFilePart=0x0) returned 0x41 [0110.377] SetErrorMode (uMode=0x1) returned 0x0 [0110.379] SetErrorMode (uMode=0x0) returned 0x1 [0110.380] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\circleround_selectionsubpicture.png", nBufferLength=0x105, lpBuffer=0x12d600, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\circleround_selectionsubpicture.png", lpFilePart=0x0) returned 0x4f [0110.381] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\circleround_selectionsubpicture.png", nBufferLength=0x105, lpBuffer=0x12d5f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\circleround_selectionsubpicture.png", lpFilePart=0x0) returned 0x4f [0110.381] SetErrorMode (uMode=0x1) returned 0x0 [0110.381] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\circleround_selectionsubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\circleround_selectionsubpicture.png"), fInfoLevelId=0x0, lpFileInformation=0x12d870 | out: lpFileInformation=0x12d870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ebf2297, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6ebf2297, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4c9679c1, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xf26)) returned 1 [0110.382] SetErrorMode (uMode=0x0) returned 0x1 [0110.382] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\circleround_selectionsubpicture.png", nBufferLength=0x105, lpBuffer=0x12d2c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\circleround_selectionsubpicture.png", lpFilePart=0x0) returned 0x4f [0110.382] SetErrorMode (uMode=0x1) returned 0x0 [0110.382] SetErrorMode (uMode=0x0) returned 0x1 [0110.382] GetFileType (hFile=0x31c) returned 0x1 [0110.382] GetFileSize (in: hFile=0x31c, lpFileSizeHigh=0x12d928 | out: lpFileSizeHigh=0x12d928*=0x0) returned 0xf26 [0110.383] ReadFile (in: hFile=0x31c, lpBuffer=0x27680d8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12d808, lpOverlapped=0x0 | out: lpBuffer=0x27680d8*, lpNumberOfBytesRead=0x12d808*=0xf26, lpOverlapped=0x0) returned 1 [0110.407] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\circleround_selectionsubpicture.png", nBufferLength=0x105, lpBuffer=0x12d2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\circleround_selectionsubpicture.png", lpFilePart=0x0) returned 0x4f [0110.407] SetErrorMode (uMode=0x1) returned 0x0 [0110.411] SetErrorMode (uMode=0x0) returned 0x1 [0110.444] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\circleround_videoinset.png", nBufferLength=0x105, lpBuffer=0x12d600, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\circleround_videoinset.png", lpFilePart=0x0) returned 0x46 [0110.444] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\circleround_videoinset.png", nBufferLength=0x105, lpBuffer=0x12d5f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\circleround_videoinset.png", lpFilePart=0x0) returned 0x46 [0110.444] SetErrorMode (uMode=0x1) returned 0x0 [0110.444] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\circleround_videoinset.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\circleround_videoinset.png"), fInfoLevelId=0x0, lpFileInformation=0x12d870 | out: lpFileInformation=0x12d870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ebcc13a, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6ebcc13a, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4c9679c1, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13c3)) returned 1 [0110.445] SetErrorMode (uMode=0x0) returned 0x1 [0110.445] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\circleround_videoinset.png", nBufferLength=0x105, lpBuffer=0x12d2c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\circleround_videoinset.png", lpFilePart=0x0) returned 0x46 [0110.445] SetErrorMode (uMode=0x1) returned 0x0 [0110.445] SetErrorMode (uMode=0x0) returned 0x1 [0110.445] GetFileType (hFile=0x31c) returned 0x1 [0110.445] GetFileSize (in: hFile=0x31c, lpFileSizeHigh=0x12d928 | out: lpFileSizeHigh=0x12d928*=0x0) returned 0x13c3 [0110.445] ReadFile (in: hFile=0x31c, lpBuffer=0x284f3b0, nNumberOfBytesToRead=0x13c3, lpNumberOfBytesRead=0x12d808, lpOverlapped=0x0 | out: lpBuffer=0x284f3b0*, lpNumberOfBytesRead=0x12d808*=0x13c3, lpOverlapped=0x0) returned 1 [0110.478] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\circleround_videoinset.png", nBufferLength=0x105, lpBuffer=0x12d2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\circleround_videoinset.png", lpFilePart=0x0) returned 0x46 [0110.478] SetErrorMode (uMode=0x1) returned 0x0 [0110.480] SetErrorMode (uMode=0x0) returned 0x1 [0110.481] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Circle_ButtonGraphic.png", nBufferLength=0x105, lpBuffer=0x12d600, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Circle_ButtonGraphic.png", lpFilePart=0x0) returned 0x44 [0110.481] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Circle_ButtonGraphic.png", nBufferLength=0x105, lpBuffer=0x12d5f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Circle_ButtonGraphic.png", lpFilePart=0x0) returned 0x44 [0110.481] SetErrorMode (uMode=0x1) returned 0x0 [0110.482] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Circle_ButtonGraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\circle_buttongraphic.png"), fInfoLevelId=0x0, lpFileInformation=0x12d870 | out: lpFileInformation=0x12d870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6edbb2f3, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6edbb2f3, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4c53d379, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x6a91)) returned 1 [0110.482] SetErrorMode (uMode=0x0) returned 0x1 [0110.482] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Circle_ButtonGraphic.png", nBufferLength=0x105, lpBuffer=0x12d2c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Circle_ButtonGraphic.png", lpFilePart=0x0) returned 0x44 [0110.482] SetErrorMode (uMode=0x1) returned 0x0 [0110.482] SetErrorMode (uMode=0x0) returned 0x1 [0110.482] GetFileType (hFile=0x31c) returned 0x1 [0110.482] GetFileSize (in: hFile=0x31c, lpFileSizeHigh=0x12d928 | out: lpFileSizeHigh=0x12d928*=0x0) returned 0x6a91 [0110.482] ReadFile (in: hFile=0x31c, lpBuffer=0x2747220, nNumberOfBytesToRead=0x6a91, lpNumberOfBytesRead=0x12d808, lpOverlapped=0x0 | out: lpBuffer=0x2747220*, lpNumberOfBytesRead=0x12d808*=0x6a91, lpOverlapped=0x0) returned 1 [0110.536] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Circle_ButtonGraphic.png", nBufferLength=0x105, lpBuffer=0x12d2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Circle_ButtonGraphic.png", lpFilePart=0x0) returned 0x44 [0110.536] SetErrorMode (uMode=0x1) returned 0x0 [0110.552] SetErrorMode (uMode=0x0) returned 0x1 [0110.553] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Circle_SelectionSubpictureA.png", nBufferLength=0x105, lpBuffer=0x12d600, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Circle_SelectionSubpictureA.png", lpFilePart=0x0) returned 0x4b [0110.553] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Circle_SelectionSubpictureA.png", nBufferLength=0x105, lpBuffer=0x12d5f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Circle_SelectionSubpictureA.png", lpFilePart=0x0) returned 0x4b [0110.553] SetErrorMode (uMode=0x1) returned 0x0 [0110.553] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Circle_SelectionSubpictureA.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\circle_selectionsubpicturea.png"), fInfoLevelId=0x0, lpFileInformation=0x12d870 | out: lpFileInformation=0x12d870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ede1450, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6ede1450, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4c7063e1, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xf26)) returned 1 [0110.554] SetErrorMode (uMode=0x0) returned 0x1 [0110.554] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Circle_SelectionSubpictureA.png", nBufferLength=0x105, lpBuffer=0x12d2c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Circle_SelectionSubpictureA.png", lpFilePart=0x0) returned 0x4b [0110.554] SetErrorMode (uMode=0x1) returned 0x0 [0110.554] SetErrorMode (uMode=0x0) returned 0x1 [0110.554] GetFileType (hFile=0x31c) returned 0x1 [0110.554] GetFileSize (in: hFile=0x31c, lpFileSizeHigh=0x12d928 | out: lpFileSizeHigh=0x12d928*=0x0) returned 0xf26 [0110.554] ReadFile (in: hFile=0x31c, lpBuffer=0x2851820, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12d808, lpOverlapped=0x0 | out: lpBuffer=0x2851820*, lpNumberOfBytesRead=0x12d808*=0xf26, lpOverlapped=0x0) returned 1 [0110.615] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Circle_SelectionSubpictureA.png", nBufferLength=0x105, lpBuffer=0x12d2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Circle_SelectionSubpictureA.png", lpFilePart=0x0) returned 0x4b [0110.615] SetErrorMode (uMode=0x1) returned 0x0 [0110.617] SetErrorMode (uMode=0x0) returned 0x1 [0110.618] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Circle_SelectionSubpictureB.png", nBufferLength=0x105, lpBuffer=0x12d600, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Circle_SelectionSubpictureB.png", lpFilePart=0x0) returned 0x4b [0110.619] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Circle_SelectionSubpictureB.png", nBufferLength=0x105, lpBuffer=0x12d5f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Circle_SelectionSubpictureB.png", lpFilePart=0x0) returned 0x4b [0110.619] SetErrorMode (uMode=0x1) returned 0x0 [0110.619] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Circle_SelectionSubpictureB.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\circle_selectionsubpictureb.png"), fInfoLevelId=0x0, lpFileInformation=0x12d870 | out: lpFileInformation=0x12d870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ede1450, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6ede1450, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4c7063e1, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc8f)) returned 1 [0110.655] SetErrorMode (uMode=0x0) returned 0x1 [0110.655] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Circle_SelectionSubpictureB.png", nBufferLength=0x105, lpBuffer=0x12d2c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Circle_SelectionSubpictureB.png", lpFilePart=0x0) returned 0x4b [0110.656] SetErrorMode (uMode=0x1) returned 0x0 [0110.656] SetErrorMode (uMode=0x0) returned 0x1 [0110.656] GetFileType (hFile=0x31c) returned 0x1 [0110.656] GetFileSize (in: hFile=0x31c, lpFileSizeHigh=0x12d928 | out: lpFileSizeHigh=0x12d928*=0x0) returned 0xc8f [0110.656] ReadFile (in: hFile=0x31c, lpBuffer=0x273d670, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12d808, lpOverlapped=0x0 | out: lpBuffer=0x273d670*, lpNumberOfBytesRead=0x12d808*=0xc8f, lpOverlapped=0x0) returned 1 [0110.726] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Circle_SelectionSubpictureB.png", nBufferLength=0x105, lpBuffer=0x12d2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Circle_SelectionSubpictureB.png", lpFilePart=0x0) returned 0x4b [0110.726] SetErrorMode (uMode=0x1) returned 0x0 [0110.728] SetErrorMode (uMode=0x0) returned 0x1 [0110.729] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Circle_VideoInset.png", nBufferLength=0x105, lpBuffer=0x12d600, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Circle_VideoInset.png", lpFilePart=0x0) returned 0x41 [0110.730] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Circle_VideoInset.png", nBufferLength=0x105, lpBuffer=0x12d5f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Circle_VideoInset.png", lpFilePart=0x0) returned 0x41 [0110.730] SetErrorMode (uMode=0x1) returned 0x0 [0110.730] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Circle_VideoInset.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\circle_videoinset.png"), fInfoLevelId=0x0, lpFileInformation=0x12d870 | out: lpFileInformation=0x12d870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ee2d70a, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6ee2d70a, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4c9679c1, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13c3)) returned 1 [0110.730] SetErrorMode (uMode=0x0) returned 0x1 [0110.730] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Circle_VideoInset.png", nBufferLength=0x105, lpBuffer=0x12d2c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Circle_VideoInset.png", lpFilePart=0x0) returned 0x41 [0110.731] SetErrorMode (uMode=0x1) returned 0x0 [0110.731] SetErrorMode (uMode=0x0) returned 0x1 [0110.731] GetFileType (hFile=0x31c) returned 0x1 [0110.731] GetFileSize (in: hFile=0x31c, lpFileSizeHigh=0x12d928 | out: lpFileSizeHigh=0x12d928*=0x0) returned 0x13c3 [0110.731] ReadFile (in: hFile=0x31c, lpBuffer=0x2823bd0, nNumberOfBytesToRead=0x13c3, lpNumberOfBytesRead=0x12d808, lpOverlapped=0x0 | out: lpBuffer=0x2823bd0*, lpNumberOfBytesRead=0x12d808*=0x13c3, lpOverlapped=0x0) returned 1 [0110.757] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Circle_VideoInset.png", nBufferLength=0x105, lpBuffer=0x12d2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Circle_VideoInset.png", lpFilePart=0x0) returned 0x41 [0110.758] SetErrorMode (uMode=0x1) returned 0x0 [0110.760] SetErrorMode (uMode=0x0) returned 0x1 [0110.761] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Dot.png", nBufferLength=0x105, lpBuffer=0x12d600, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Dot.png", lpFilePart=0x0) returned 0x33 [0110.761] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Dot.png", nBufferLength=0x105, lpBuffer=0x12d5f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Dot.png", lpFilePart=0x0) returned 0x33 [0110.761] SetErrorMode (uMode=0x1) returned 0x0 [0110.762] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Dot.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\dot.png"), fInfoLevelId=0x0, lpFileInformation=0x12d870 | out: lpFileInformation=0x12d870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ee2d70a, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6ee2d70a, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4c9fff39, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x5c9f)) returned 1 [0110.762] SetErrorMode (uMode=0x0) returned 0x1 [0110.762] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Dot.png", nBufferLength=0x105, lpBuffer=0x12d2c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Dot.png", lpFilePart=0x0) returned 0x33 [0110.762] SetErrorMode (uMode=0x1) returned 0x0 [0110.762] SetErrorMode (uMode=0x0) returned 0x1 [0110.763] GetFileType (hFile=0x31c) returned 0x1 [0110.763] GetFileSize (in: hFile=0x31c, lpFileSizeHigh=0x12d928 | out: lpFileSizeHigh=0x12d928*=0x0) returned 0x5c9f [0110.763] ReadFile (in: hFile=0x31c, lpBuffer=0x270caa0, nNumberOfBytesToRead=0x5c9f, lpNumberOfBytesRead=0x12d808, lpOverlapped=0x0 | out: lpBuffer=0x270caa0*, lpNumberOfBytesRead=0x12d808*=0x5c9f, lpOverlapped=0x0) returned 1 [0110.823] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Dot.png", nBufferLength=0x105, lpBuffer=0x12d2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Dot.png", lpFilePart=0x0) returned 0x33 [0110.823] SetErrorMode (uMode=0x1) returned 0x0 [0110.825] SetErrorMode (uMode=0x0) returned 0x1 [0110.827] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Heart_ButtonGraphic.png", nBufferLength=0x105, lpBuffer=0x12d600, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Heart_ButtonGraphic.png", lpFilePart=0x0) returned 0x43 [0110.827] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Heart_ButtonGraphic.png", nBufferLength=0x105, lpBuffer=0x12d5f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Heart_ButtonGraphic.png", lpFilePart=0x0) returned 0x43 [0110.827] SetErrorMode (uMode=0x1) returned 0x0 [0110.827] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Heart_ButtonGraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\heart_buttongraphic.png"), fInfoLevelId=0x0, lpFileInformation=0x12d870 | out: lpFileInformation=0x12d870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6eec5c7e, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6eec5c7e, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d1240d9, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x75ba)) returned 1 [0110.864] SetErrorMode (uMode=0x0) returned 0x1 [0110.865] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Heart_ButtonGraphic.png", nBufferLength=0x105, lpBuffer=0x12d2c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Heart_ButtonGraphic.png", lpFilePart=0x0) returned 0x43 [0110.865] SetErrorMode (uMode=0x1) returned 0x0 [0110.865] SetErrorMode (uMode=0x0) returned 0x1 [0110.865] GetFileType (hFile=0x31c) returned 0x1 [0110.865] GetFileSize (in: hFile=0x31c, lpFileSizeHigh=0x12d928 | out: lpFileSizeHigh=0x12d928*=0x0) returned 0x75ba [0110.865] ReadFile (in: hFile=0x31c, lpBuffer=0x2810b28, nNumberOfBytesToRead=0x75ba, lpNumberOfBytesRead=0x12d808, lpOverlapped=0x0 | out: lpBuffer=0x2810b28*, lpNumberOfBytesRead=0x12d808*=0x75ba, lpOverlapped=0x0) returned 1 [0110.992] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Heart_ButtonGraphic.png", nBufferLength=0x105, lpBuffer=0x12d2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Heart_ButtonGraphic.png", lpFilePart=0x0) returned 0x43 [0110.992] SetErrorMode (uMode=0x1) returned 0x0 [0110.994] SetErrorMode (uMode=0x0) returned 0x1 [0110.996] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Heart_SelectionSubpicture.png", nBufferLength=0x105, lpBuffer=0x12d600, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Heart_SelectionSubpicture.png", lpFilePart=0x0) returned 0x49 [0110.996] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Heart_SelectionSubpicture.png", nBufferLength=0x105, lpBuffer=0x12d5f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Heart_SelectionSubpicture.png", lpFilePart=0x0) returned 0x49 [0110.996] SetErrorMode (uMode=0x1) returned 0x0 [0110.996] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Heart_SelectionSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\heart_selectionsubpicture.png"), fInfoLevelId=0x0, lpFileInformation=0x12d870 | out: lpFileInformation=0x12d870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6eec5c7e, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6eec5c7e, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d1240d9, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x1278)) returned 1 [0110.996] SetErrorMode (uMode=0x0) returned 0x1 [0110.997] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Heart_SelectionSubpicture.png", nBufferLength=0x105, lpBuffer=0x12d2c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Heart_SelectionSubpicture.png", lpFilePart=0x0) returned 0x49 [0110.997] SetErrorMode (uMode=0x1) returned 0x0 [0110.997] SetErrorMode (uMode=0x0) returned 0x1 [0110.997] GetFileType (hFile=0x31c) returned 0x1 [0110.997] GetFileSize (in: hFile=0x31c, lpFileSizeHigh=0x12d928 | out: lpFileSizeHigh=0x12d928*=0x0) returned 0x1278 [0110.997] ReadFile (in: hFile=0x31c, lpBuffer=0x2724250, nNumberOfBytesToRead=0x1278, lpNumberOfBytesRead=0x12d808, lpOverlapped=0x0 | out: lpBuffer=0x2724250*, lpNumberOfBytesRead=0x12d808*=0x1278, lpOverlapped=0x0) returned 1 [0111.019] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Heart_SelectionSubpicture.png", nBufferLength=0x105, lpBuffer=0x12d2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Heart_SelectionSubpicture.png", lpFilePart=0x0) returned 0x49 [0111.019] SetErrorMode (uMode=0x1) returned 0x0 [0111.058] SetErrorMode (uMode=0x0) returned 0x1 [0111.059] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Heart_VideoInset.png", nBufferLength=0x105, lpBuffer=0x12d600, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Heart_VideoInset.png", lpFilePart=0x0) returned 0x40 [0111.059] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Heart_VideoInset.png", nBufferLength=0x105, lpBuffer=0x12d5f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Heart_VideoInset.png", lpFilePart=0x0) returned 0x40 [0111.060] SetErrorMode (uMode=0x1) returned 0x0 [0111.060] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Heart_VideoInset.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\heart_videoinset.png"), fInfoLevelId=0x0, lpFileInformation=0x12d870 | out: lpFileInformation=0x12d870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6eeebddb, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6eeebddb, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d1240d9, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x166e)) returned 1 [0111.060] SetErrorMode (uMode=0x0) returned 0x1 [0111.060] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Heart_VideoInset.png", nBufferLength=0x105, lpBuffer=0x12d2c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Heart_VideoInset.png", lpFilePart=0x0) returned 0x40 [0111.060] SetErrorMode (uMode=0x1) returned 0x0 [0111.061] SetErrorMode (uMode=0x0) returned 0x1 [0111.061] GetFileType (hFile=0x31c) returned 0x1 [0111.061] GetFileSize (in: hFile=0x31c, lpFileSizeHigh=0x12d928 | out: lpFileSizeHigh=0x12d928*=0x0) returned 0x166e [0111.061] ReadFile (in: hFile=0x31c, lpBuffer=0x280c7d0, nNumberOfBytesToRead=0x166e, lpNumberOfBytesRead=0x12d808, lpOverlapped=0x0 | out: lpBuffer=0x280c7d0*, lpNumberOfBytesRead=0x12d808*=0x166e, lpOverlapped=0x0) returned 1 [0111.087] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Heart_VideoInset.png", nBufferLength=0x105, lpBuffer=0x12d2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Heart_VideoInset.png", lpFilePart=0x0) returned 0x40 [0111.087] SetErrorMode (uMode=0x1) returned 0x0 [0111.089] SetErrorMode (uMode=0x0) returned 0x1 [0111.090] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\menu_style_default_Thumbnail.png", nBufferLength=0x105, lpBuffer=0x12d600, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\menu_style_default_Thumbnail.png", lpFilePart=0x0) returned 0x4c [0111.090] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\menu_style_default_Thumbnail.png", nBufferLength=0x105, lpBuffer=0x12d5f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\menu_style_default_Thumbnail.png", lpFilePart=0x0) returned 0x4c [0111.090] SetErrorMode (uMode=0x1) returned 0x0 [0111.091] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\menu_style_default_Thumbnail.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\menu_style_default_thumbnail.png"), fInfoLevelId=0x0, lpFileInformation=0x12d870 | out: lpFileInformation=0x12d870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6e96ab6a, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6e96ab6a, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d2ed141, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x12ea)) returned 1 [0111.128] SetErrorMode (uMode=0x0) returned 0x1 [0111.128] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\menu_style_default_Thumbnail.png", nBufferLength=0x105, lpBuffer=0x12d2c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\menu_style_default_Thumbnail.png", lpFilePart=0x0) returned 0x4c [0111.128] SetErrorMode (uMode=0x1) returned 0x0 [0111.128] SetErrorMode (uMode=0x0) returned 0x1 [0111.128] GetFileType (hFile=0x31c) returned 0x1 [0111.129] GetFileSize (in: hFile=0x31c, lpFileSizeHigh=0x12d928 | out: lpFileSizeHigh=0x12d928*=0x0) returned 0x12ea [0111.129] ReadFile (in: hFile=0x31c, lpBuffer=0x26f03a0, nNumberOfBytesToRead=0x12ea, lpNumberOfBytesRead=0x12d808, lpOverlapped=0x0 | out: lpBuffer=0x26f03a0*, lpNumberOfBytesRead=0x12d808*=0x12ea, lpOverlapped=0x0) returned 1 [0111.150] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\menu_style_default_Thumbnail.png", nBufferLength=0x105, lpBuffer=0x12d2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\menu_style_default_Thumbnail.png", lpFilePart=0x0) returned 0x4c [0111.150] SetErrorMode (uMode=0x1) returned 0x0 [0111.152] SetErrorMode (uMode=0x0) returned 0x1 [0111.154] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\NavigationLeft_ButtonGraphic.png", nBufferLength=0x105, lpBuffer=0x12d600, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\NavigationLeft_ButtonGraphic.png", lpFilePart=0x0) returned 0x4c [0111.154] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\NavigationLeft_ButtonGraphic.png", nBufferLength=0x105, lpBuffer=0x12d5f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\NavigationLeft_ButtonGraphic.png", lpFilePart=0x0) returned 0x4c [0111.154] SetErrorMode (uMode=0x1) returned 0x0 [0111.154] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\NavigationLeft_ButtonGraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\navigationleft_buttongraphic.png"), fInfoLevelId=0x0, lpFileInformation=0x12d870 | out: lpFileInformation=0x12d870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ef11f38, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6ef11f38, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d2ed141, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13e0)) returned 1 [0111.155] SetErrorMode (uMode=0x0) returned 0x1 [0111.155] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\NavigationLeft_ButtonGraphic.png", nBufferLength=0x105, lpBuffer=0x12d2c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\NavigationLeft_ButtonGraphic.png", lpFilePart=0x0) returned 0x4c [0111.155] SetErrorMode (uMode=0x1) returned 0x0 [0111.156] SetErrorMode (uMode=0x0) returned 0x1 [0111.156] GetFileType (hFile=0x31c) returned 0x1 [0111.156] GetFileSize (in: hFile=0x31c, lpFileSizeHigh=0x12d928 | out: lpFileSizeHigh=0x12d928*=0x0) returned 0x13e0 [0111.156] ReadFile (in: hFile=0x31c, lpBuffer=0x27d8c68, nNumberOfBytesToRead=0x13e0, lpNumberOfBytesRead=0x12d808, lpOverlapped=0x0 | out: lpBuffer=0x27d8c68*, lpNumberOfBytesRead=0x12d808*=0x13e0, lpOverlapped=0x0) returned 1 [0111.211] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\NavigationLeft_ButtonGraphic.png", nBufferLength=0x105, lpBuffer=0x12d2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\NavigationLeft_ButtonGraphic.png", lpFilePart=0x0) returned 0x4c [0111.211] SetErrorMode (uMode=0x1) returned 0x0 [0111.213] SetErrorMode (uMode=0x0) returned 0x1 [0111.214] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\NavigationLeft_SelectionSubpicture.png", nBufferLength=0x105, lpBuffer=0x12d600, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\NavigationLeft_SelectionSubpicture.png", lpFilePart=0x0) returned 0x52 [0111.214] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\NavigationLeft_SelectionSubpicture.png", nBufferLength=0x105, lpBuffer=0x12d5f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\NavigationLeft_SelectionSubpicture.png", lpFilePart=0x0) returned 0x52 [0111.214] SetErrorMode (uMode=0x1) returned 0x0 [0111.215] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\NavigationLeft_SelectionSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\navigationleft_selectionsubpicture.png"), fInfoLevelId=0x0, lpFileInformation=0x12d870 | out: lpFileInformation=0x12d870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ef11f38, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6ef11f38, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d2ed141, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc3a)) returned 1 [0111.254] SetErrorMode (uMode=0x0) returned 0x1 [0111.255] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\NavigationLeft_SelectionSubpicture.png", nBufferLength=0x105, lpBuffer=0x12d2c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\NavigationLeft_SelectionSubpicture.png", lpFilePart=0x0) returned 0x52 [0111.255] SetErrorMode (uMode=0x1) returned 0x0 [0111.255] SetErrorMode (uMode=0x0) returned 0x1 [0111.255] GetFileType (hFile=0x31c) returned 0x1 [0111.255] GetFileSize (in: hFile=0x31c, lpFileSizeHigh=0x12d928 | out: lpFileSizeHigh=0x12d928*=0x0) returned 0xc3a [0111.255] ReadFile (in: hFile=0x31c, lpBuffer=0x28c2490, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12d808, lpOverlapped=0x0 | out: lpBuffer=0x28c2490*, lpNumberOfBytesRead=0x12d808*=0xc3a, lpOverlapped=0x0) returned 1 [0111.283] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\NavigationLeft_SelectionSubpicture.png", nBufferLength=0x105, lpBuffer=0x12d2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\NavigationLeft_SelectionSubpicture.png", lpFilePart=0x0) returned 0x52 [0111.283] SetErrorMode (uMode=0x1) returned 0x0 [0111.285] SetErrorMode (uMode=0x0) returned 0x1 [0111.321] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\NavigationRight_ButtonGraphic.png", nBufferLength=0x105, lpBuffer=0x12d600, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\NavigationRight_ButtonGraphic.png", lpFilePart=0x0) returned 0x4d [0111.321] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\NavigationRight_ButtonGraphic.png", nBufferLength=0x105, lpBuffer=0x12d5f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\NavigationRight_ButtonGraphic.png", lpFilePart=0x0) returned 0x4d [0111.322] SetErrorMode (uMode=0x1) returned 0x0 [0111.322] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\NavigationRight_ButtonGraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\navigationright_buttongraphic.png"), fInfoLevelId=0x0, lpFileInformation=0x12d870 | out: lpFileInformation=0x12d870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ef38095, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6ef38095, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d2ed141, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13a1)) returned 1 [0111.356] SetErrorMode (uMode=0x0) returned 0x1 [0111.356] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\NavigationRight_ButtonGraphic.png", nBufferLength=0x105, lpBuffer=0x12d2c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\NavigationRight_ButtonGraphic.png", lpFilePart=0x0) returned 0x4d [0111.356] SetErrorMode (uMode=0x1) returned 0x0 [0111.356] SetErrorMode (uMode=0x0) returned 0x1 [0111.356] GetFileType (hFile=0x31c) returned 0x1 [0111.356] GetFileSize (in: hFile=0x31c, lpFileSizeHigh=0x12d928 | out: lpFileSizeHigh=0x12d928*=0x0) returned 0x13a1 [0111.356] ReadFile (in: hFile=0x31c, lpBuffer=0x27a7d88, nNumberOfBytesToRead=0x13a1, lpNumberOfBytesRead=0x12d808, lpOverlapped=0x0 | out: lpBuffer=0x27a7d88*, lpNumberOfBytesRead=0x12d808*=0x13a1, lpOverlapped=0x0) returned 1 [0111.373] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\NavigationRight_ButtonGraphic.png", nBufferLength=0x105, lpBuffer=0x12d2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\NavigationRight_ButtonGraphic.png", lpFilePart=0x0) returned 0x4d [0111.373] SetErrorMode (uMode=0x1) returned 0x0 [0111.375] SetErrorMode (uMode=0x0) returned 0x1 [0111.377] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\NavigationRight_SelectionSubpicture.png", nBufferLength=0x105, lpBuffer=0x12d600, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\NavigationRight_SelectionSubpicture.png", lpFilePart=0x0) returned 0x53 [0111.377] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\NavigationRight_SelectionSubpicture.png", nBufferLength=0x105, lpBuffer=0x12d5f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\NavigationRight_SelectionSubpicture.png", lpFilePart=0x0) returned 0x53 [0111.377] SetErrorMode (uMode=0x1) returned 0x0 [0111.377] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\NavigationRight_SelectionSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\navigationright_selectionsubpicture.png"), fInfoLevelId=0x0, lpFileInformation=0x12d870 | out: lpFileInformation=0x12d870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ef5e1f2, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6ef5e1f2, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d2ed141, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc2e)) returned 1 [0111.378] SetErrorMode (uMode=0x0) returned 0x1 [0111.378] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\NavigationRight_SelectionSubpicture.png", nBufferLength=0x105, lpBuffer=0x12d2c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\NavigationRight_SelectionSubpicture.png", lpFilePart=0x0) returned 0x53 [0111.378] SetErrorMode (uMode=0x1) returned 0x0 [0111.378] SetErrorMode (uMode=0x0) returned 0x1 [0111.379] GetFileType (hFile=0x31c) returned 0x1 [0111.379] GetFileSize (in: hFile=0x31c, lpFileSizeHigh=0x12d928 | out: lpFileSizeHigh=0x12d928*=0x0) returned 0xc2e [0111.379] ReadFile (in: hFile=0x31c, lpBuffer=0x2891740, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12d808, lpOverlapped=0x0 | out: lpBuffer=0x2891740*, lpNumberOfBytesRead=0x12d808*=0xc2e, lpOverlapped=0x0) returned 1 [0111.400] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\NavigationRight_SelectionSubpicture.png", nBufferLength=0x105, lpBuffer=0x12d2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\NavigationRight_SelectionSubpicture.png", lpFilePart=0x0) returned 0x53 [0111.400] SetErrorMode (uMode=0x1) returned 0x0 [0111.402] SetErrorMode (uMode=0x0) returned 0x1 [0111.403] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\NavigationUp_ButtonGraphic.png", nBufferLength=0x105, lpBuffer=0x12d600, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\NavigationUp_ButtonGraphic.png", lpFilePart=0x0) returned 0x4a [0111.403] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\NavigationUp_ButtonGraphic.png", nBufferLength=0x105, lpBuffer=0x12d5f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\NavigationUp_ButtonGraphic.png", lpFilePart=0x0) returned 0x4a [0111.403] SetErrorMode (uMode=0x1) returned 0x0 [0111.404] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\NavigationUp_ButtonGraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\navigationup_buttongraphic.png"), fInfoLevelId=0x0, lpFileInformation=0x12d870 | out: lpFileInformation=0x12d870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ef8434f, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6ef8434f, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d2ed141, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x135b)) returned 1 [0111.404] SetErrorMode (uMode=0x0) returned 0x1 [0111.405] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\NavigationUp_ButtonGraphic.png", nBufferLength=0x105, lpBuffer=0x12d2c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\NavigationUp_ButtonGraphic.png", lpFilePart=0x0) returned 0x4a [0111.405] SetErrorMode (uMode=0x1) returned 0x0 [0111.405] SetErrorMode (uMode=0x0) returned 0x1 [0111.405] GetFileType (hFile=0x31c) returned 0x1 [0111.405] GetFileSize (in: hFile=0x31c, lpFileSizeHigh=0x12d928 | out: lpFileSizeHigh=0x12d928*=0x0) returned 0x135b [0111.405] ReadFile (in: hFile=0x31c, lpBuffer=0x2777690, nNumberOfBytesToRead=0x135b, lpNumberOfBytesRead=0x12d808, lpOverlapped=0x0 | out: lpBuffer=0x2777690*, lpNumberOfBytesRead=0x12d808*=0x135b, lpOverlapped=0x0) returned 1 [0111.421] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\NavigationUp_ButtonGraphic.png", nBufferLength=0x105, lpBuffer=0x12d2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\NavigationUp_ButtonGraphic.png", lpFilePart=0x0) returned 0x4a [0111.421] SetErrorMode (uMode=0x1) returned 0x0 [0111.423] SetErrorMode (uMode=0x0) returned 0x1 [0111.424] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\NavigationUp_SelectionSubpicture.png", nBufferLength=0x105, lpBuffer=0x12d600, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\NavigationUp_SelectionSubpicture.png", lpFilePart=0x0) returned 0x50 [0111.424] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\NavigationUp_SelectionSubpicture.png", nBufferLength=0x105, lpBuffer=0x12d5f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\NavigationUp_SelectionSubpicture.png", lpFilePart=0x0) returned 0x50 [0111.424] SetErrorMode (uMode=0x1) returned 0x0 [0111.424] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\NavigationUp_SelectionSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\navigationup_selectionsubpicture.png"), fInfoLevelId=0x0, lpFileInformation=0x12d870 | out: lpFileInformation=0x12d870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ef8434f, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6ef8434f, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d2ed141, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc09)) returned 1 [0111.459] SetErrorMode (uMode=0x0) returned 0x1 [0111.459] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\NavigationUp_SelectionSubpicture.png", nBufferLength=0x105, lpBuffer=0x12d2c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\NavigationUp_SelectionSubpicture.png", lpFilePart=0x0) returned 0x50 [0111.459] SetErrorMode (uMode=0x1) returned 0x0 [0111.459] SetErrorMode (uMode=0x0) returned 0x1 [0111.459] GetFileType (hFile=0x31c) returned 0x1 [0111.459] GetFileSize (in: hFile=0x31c, lpFileSizeHigh=0x12d928 | out: lpFileSizeHigh=0x12d928*=0x0) returned 0xc09 [0111.459] ReadFile (in: hFile=0x31c, lpBuffer=0x2860e28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12d808, lpOverlapped=0x0 | out: lpBuffer=0x2860e28*, lpNumberOfBytesRead=0x12d808*=0xc09, lpOverlapped=0x0) returned 1 [0111.477] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\NavigationUp_SelectionSubpicture.png", nBufferLength=0x105, lpBuffer=0x12d2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\NavigationUp_SelectionSubpicture.png", lpFilePart=0x0) returned 0x50 [0111.477] SetErrorMode (uMode=0x1) returned 0x0 [0111.479] SetErrorMode (uMode=0x0) returned 0x1 [0111.480] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\photoedge_buttongraphic.png", nBufferLength=0x105, lpBuffer=0x12d600, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\photoedge_buttongraphic.png", lpFilePart=0x0) returned 0x47 [0111.480] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\photoedge_buttongraphic.png", nBufferLength=0x105, lpBuffer=0x12d5f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\photoedge_buttongraphic.png", lpFilePart=0x0) returned 0x47 [0111.480] SetErrorMode (uMode=0x1) returned 0x0 [0111.481] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\photoedge_buttongraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\photoedge_buttongraphic.png"), fInfoLevelId=0x0, lpFileInformation=0x12d870 | out: lpFileInformation=0x12d870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4ee00a15, ftCreationTime.dwHighDateTime=0x1c9ea0f, ftLastAccessTime.dwLowDateTime=0x4ee00a15, ftLastAccessTime.dwHighDateTime=0x1c9ea0f, ftLastWriteTime.dwLowDateTime=0x4ee00a15, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x14fc)) returned 1 [0111.481] SetErrorMode (uMode=0x0) returned 0x1 [0111.481] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\photoedge_buttongraphic.png", nBufferLength=0x105, lpBuffer=0x12d2c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\photoedge_buttongraphic.png", lpFilePart=0x0) returned 0x47 [0111.481] SetErrorMode (uMode=0x1) returned 0x0 [0111.481] SetErrorMode (uMode=0x0) returned 0x1 [0111.481] GetFileType (hFile=0x31c) returned 0x1 [0111.481] GetFileSize (in: hFile=0x31c, lpFileSizeHigh=0x12d928 | out: lpFileSizeHigh=0x12d928*=0x0) returned 0x14fc [0111.481] ReadFile (in: hFile=0x31c, lpBuffer=0x2746e20, nNumberOfBytesToRead=0x14fc, lpNumberOfBytesRead=0x12d808, lpOverlapped=0x0 | out: lpBuffer=0x2746e20*, lpNumberOfBytesRead=0x12d808*=0x14fc, lpOverlapped=0x0) returned 1 [0111.495] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\photoedge_buttongraphic.png", nBufferLength=0x105, lpBuffer=0x12d2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\photoedge_buttongraphic.png", lpFilePart=0x0) returned 0x47 [0111.496] SetErrorMode (uMode=0x1) returned 0x0 [0111.497] SetErrorMode (uMode=0x0) returned 0x1 [0111.498] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\photoedge_selectionsubpicture.png", nBufferLength=0x105, lpBuffer=0x12d600, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\photoedge_selectionsubpicture.png", lpFilePart=0x0) returned 0x4d [0111.499] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\photoedge_selectionsubpicture.png", nBufferLength=0x105, lpBuffer=0x12d5f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\photoedge_selectionsubpicture.png", lpFilePart=0x0) returned 0x4d [0111.499] SetErrorMode (uMode=0x1) returned 0x0 [0111.499] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\photoedge_selectionsubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\photoedge_selectionsubpicture.png"), fInfoLevelId=0x0, lpFileInformation=0x12d870 | out: lpFileInformation=0x12d870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6e8601df, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6e8601df, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ee00a15, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x1274)) returned 1 [0111.499] SetErrorMode (uMode=0x0) returned 0x1 [0111.499] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\photoedge_selectionsubpicture.png", nBufferLength=0x105, lpBuffer=0x12d2c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\photoedge_selectionsubpicture.png", lpFilePart=0x0) returned 0x4d [0111.499] SetErrorMode (uMode=0x1) returned 0x0 [0111.499] SetErrorMode (uMode=0x0) returned 0x1 [0111.499] GetFileType (hFile=0x31c) returned 0x1 [0111.499] GetFileSize (in: hFile=0x31c, lpFileSizeHigh=0x12d928 | out: lpFileSizeHigh=0x12d928*=0x0) returned 0x1274 [0111.500] ReadFile (in: hFile=0x31c, lpBuffer=0x2830300, nNumberOfBytesToRead=0x1274, lpNumberOfBytesRead=0x12d808, lpOverlapped=0x0 | out: lpBuffer=0x2830300*, lpNumberOfBytesRead=0x12d808*=0x1274, lpOverlapped=0x0) returned 1 [0111.570] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\photoedge_selectionsubpicture.png", nBufferLength=0x105, lpBuffer=0x12d2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\photoedge_selectionsubpicture.png", lpFilePart=0x0) returned 0x4d [0111.570] SetErrorMode (uMode=0x1) returned 0x0 [0111.572] SetErrorMode (uMode=0x0) returned 0x1 [0111.573] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\photoedge_videoinset.png", nBufferLength=0x105, lpBuffer=0x12d600, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\photoedge_videoinset.png", lpFilePart=0x0) returned 0x44 [0111.573] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\photoedge_videoinset.png", nBufferLength=0x105, lpBuffer=0x12d5f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\photoedge_videoinset.png", lpFilePart=0x0) returned 0x44 [0111.573] SetErrorMode (uMode=0x1) returned 0x0 [0111.573] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\photoedge_videoinset.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\photoedge_videoinset.png"), fInfoLevelId=0x0, lpFileInformation=0x12d870 | out: lpFileInformation=0x12d870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6e88633c, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6e88633c, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ee00a15, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x1266)) returned 1 [0111.574] SetErrorMode (uMode=0x0) returned 0x1 [0111.574] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\photoedge_videoinset.png", nBufferLength=0x105, lpBuffer=0x12d2c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\photoedge_videoinset.png", lpFilePart=0x0) returned 0x44 [0111.574] SetErrorMode (uMode=0x1) returned 0x0 [0111.574] SetErrorMode (uMode=0x0) returned 0x1 [0111.574] GetFileType (hFile=0x31c) returned 0x1 [0111.574] GetFileSize (in: hFile=0x31c, lpFileSizeHigh=0x12d928 | out: lpFileSizeHigh=0x12d928*=0x0) returned 0x1266 [0111.574] ReadFile (in: hFile=0x31c, lpBuffer=0x2718c50, nNumberOfBytesToRead=0x1266, lpNumberOfBytesRead=0x12d808, lpOverlapped=0x0 | out: lpBuffer=0x2718c50*, lpNumberOfBytesRead=0x12d808*=0x1266, lpOverlapped=0x0) returned 1 [0111.633] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\photoedge_videoinset.png", nBufferLength=0x105, lpBuffer=0x12d2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\photoedge_videoinset.png", lpFilePart=0x0) returned 0x44 [0111.634] SetErrorMode (uMode=0x1) returned 0x0 [0111.636] SetErrorMode (uMode=0x0) returned 0x1 [0111.638] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Postage_ButtonGraphic.png", nBufferLength=0x105, lpBuffer=0x12d600, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Postage_ButtonGraphic.png", lpFilePart=0x0) returned 0x45 [0111.638] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Postage_ButtonGraphic.png", nBufferLength=0x105, lpBuffer=0x12d5f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Postage_ButtonGraphic.png", lpFilePart=0x0) returned 0x45 [0111.638] SetErrorMode (uMode=0x1) returned 0x0 [0111.638] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Postage_ButtonGraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\postage_buttongraphic.png"), fInfoLevelId=0x0, lpFileInformation=0x12d870 | out: lpFileInformation=0x12d870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6efaa4ac, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6efaa4ac, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ee00a15, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x59b9)) returned 1 [0111.676] SetErrorMode (uMode=0x0) returned 0x1 [0111.676] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Postage_ButtonGraphic.png", nBufferLength=0x105, lpBuffer=0x12d2c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Postage_ButtonGraphic.png", lpFilePart=0x0) returned 0x45 [0111.676] SetErrorMode (uMode=0x1) returned 0x0 [0111.676] SetErrorMode (uMode=0x0) returned 0x1 [0111.676] GetFileType (hFile=0x31c) returned 0x1 [0111.676] GetFileSize (in: hFile=0x31c, lpFileSizeHigh=0x12d928 | out: lpFileSizeHigh=0x12d928*=0x0) returned 0x59b9 [0111.676] ReadFile (in: hFile=0x31c, lpBuffer=0x2801178, nNumberOfBytesToRead=0x59b9, lpNumberOfBytesRead=0x12d808, lpOverlapped=0x0 | out: lpBuffer=0x2801178*, lpNumberOfBytesRead=0x12d808*=0x59b9, lpOverlapped=0x0) returned 1 [0111.744] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Postage_ButtonGraphic.png", nBufferLength=0x105, lpBuffer=0x12d2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Postage_ButtonGraphic.png", lpFilePart=0x0) returned 0x45 [0111.744] SetErrorMode (uMode=0x1) returned 0x0 [0111.746] SetErrorMode (uMode=0x0) returned 0x1 [0111.747] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Postage_SelectionSubpicture.png", nBufferLength=0x105, lpBuffer=0x12d600, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Postage_SelectionSubpicture.png", lpFilePart=0x0) returned 0x4b [0111.747] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Postage_SelectionSubpicture.png", nBufferLength=0x105, lpBuffer=0x12d5f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Postage_SelectionSubpicture.png", lpFilePart=0x0) returned 0x4b [0111.747] SetErrorMode (uMode=0x1) returned 0x0 [0111.747] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Postage_SelectionSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\postage_selectionsubpicture.png"), fInfoLevelId=0x0, lpFileInformation=0x12d870 | out: lpFileInformation=0x12d870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6efd0609, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6efd0609, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ee26b73, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x160f)) returned 1 [0111.748] SetErrorMode (uMode=0x0) returned 0x1 [0111.748] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Postage_SelectionSubpicture.png", nBufferLength=0x105, lpBuffer=0x12d2c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Postage_SelectionSubpicture.png", lpFilePart=0x0) returned 0x4b [0111.748] SetErrorMode (uMode=0x1) returned 0x0 [0111.748] SetErrorMode (uMode=0x0) returned 0x1 [0111.748] GetFileType (hFile=0x31c) returned 0x1 [0111.748] GetFileSize (in: hFile=0x31c, lpFileSizeHigh=0x12d928 | out: lpFileSizeHigh=0x12d928*=0x0) returned 0x160f [0111.748] ReadFile (in: hFile=0x31c, lpBuffer=0x2708668, nNumberOfBytesToRead=0x160f, lpNumberOfBytesRead=0x12d808, lpOverlapped=0x0 | out: lpBuffer=0x2708668*, lpNumberOfBytesRead=0x12d808*=0x160f, lpOverlapped=0x0) returned 1 [0111.805] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Postage_SelectionSubpicture.png", nBufferLength=0x105, lpBuffer=0x12d2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Postage_SelectionSubpicture.png", lpFilePart=0x0) returned 0x4b [0111.805] SetErrorMode (uMode=0x1) returned 0x0 [0111.807] SetErrorMode (uMode=0x0) returned 0x1 [0111.809] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Postage_VideoInset.png", nBufferLength=0x105, lpBuffer=0x12d600, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Postage_VideoInset.png", lpFilePart=0x0) returned 0x42 [0111.809] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Postage_VideoInset.png", nBufferLength=0x105, lpBuffer=0x12d5f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Postage_VideoInset.png", lpFilePart=0x0) returned 0x42 [0111.809] SetErrorMode (uMode=0x1) returned 0x0 [0111.809] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Postage_VideoInset.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\postage_videoinset.png"), fInfoLevelId=0x0, lpFileInformation=0x12d870 | out: lpFileInformation=0x12d870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6efd0609, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6efd0609, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ee26b73, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc8e)) returned 1 [0111.810] SetErrorMode (uMode=0x0) returned 0x1 [0111.810] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Postage_VideoInset.png", nBufferLength=0x105, lpBuffer=0x12d2c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Postage_VideoInset.png", lpFilePart=0x0) returned 0x42 [0111.810] SetErrorMode (uMode=0x1) returned 0x0 [0111.810] SetErrorMode (uMode=0x0) returned 0x1 [0111.810] GetFileType (hFile=0x31c) returned 0x1 [0111.810] GetFileSize (in: hFile=0x31c, lpFileSizeHigh=0x12d928 | out: lpFileSizeHigh=0x12d928*=0x0) returned 0xc8e [0111.810] ReadFile (in: hFile=0x31c, lpBuffer=0x27f2e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12d808, lpOverlapped=0x0 | out: lpBuffer=0x27f2e00*, lpNumberOfBytesRead=0x12d808*=0xc8e, lpOverlapped=0x0) returned 1 [0111.832] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Postage_VideoInset.png", nBufferLength=0x105, lpBuffer=0x12d2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Postage_VideoInset.png", lpFilePart=0x0) returned 0x42 [0111.832] SetErrorMode (uMode=0x1) returned 0x0 [0111.834] SetErrorMode (uMode=0x0) returned 0x1 [0111.835] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\shadowonlyframe_buttongraphic.png", nBufferLength=0x105, lpBuffer=0x12d600, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\shadowonlyframe_buttongraphic.png", lpFilePart=0x0) returned 0x4d [0111.835] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\shadowonlyframe_buttongraphic.png", nBufferLength=0x105, lpBuffer=0x12d5f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\shadowonlyframe_buttongraphic.png", lpFilePart=0x0) returned 0x4d [0111.835] SetErrorMode (uMode=0x1) returned 0x0 [0111.835] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\shadowonlyframe_buttongraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\shadowonlyframe_buttongraphic.png"), fInfoLevelId=0x0, lpFileInformation=0x12d870 | out: lpFileInformation=0x12d870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6e8d25f6, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6e8d25f6, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4f204eff, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xd86)) returned 1 [0111.870] SetErrorMode (uMode=0x0) returned 0x1 [0111.870] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\shadowonlyframe_buttongraphic.png", nBufferLength=0x105, lpBuffer=0x12d2c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\shadowonlyframe_buttongraphic.png", lpFilePart=0x0) returned 0x4d [0111.870] SetErrorMode (uMode=0x1) returned 0x0 [0111.870] SetErrorMode (uMode=0x0) returned 0x1 [0111.870] GetFileType (hFile=0x31c) returned 0x1 [0111.870] GetFileSize (in: hFile=0x31c, lpFileSizeHigh=0x12d928 | out: lpFileSizeHigh=0x12d928*=0x0) returned 0xd86 [0111.870] ReadFile (in: hFile=0x31c, lpBuffer=0x28da1d0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12d808, lpOverlapped=0x0 | out: lpBuffer=0x28da1d0*, lpNumberOfBytesRead=0x12d808*=0xd86, lpOverlapped=0x0) returned 1 [0111.908] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\shadowonlyframe_buttongraphic.png", nBufferLength=0x105, lpBuffer=0x12d2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\shadowonlyframe_buttongraphic.png", lpFilePart=0x0) returned 0x4d [0111.908] SetErrorMode (uMode=0x1) returned 0x0 [0111.910] SetErrorMode (uMode=0x0) returned 0x1 [0111.912] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\shadowonlyframe_selectionsubpicture.png", nBufferLength=0x105, lpBuffer=0x12d600, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\shadowonlyframe_selectionsubpicture.png", lpFilePart=0x0) returned 0x53 [0111.912] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\shadowonlyframe_selectionsubpicture.png", nBufferLength=0x105, lpBuffer=0x12d5f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\shadowonlyframe_selectionsubpicture.png", lpFilePart=0x0) returned 0x53 [0111.912] SetErrorMode (uMode=0x1) returned 0x0 [0111.912] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\shadowonlyframe_selectionsubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\shadowonlyframe_selectionsubpicture.png"), fInfoLevelId=0x0, lpFileInformation=0x12d870 | out: lpFileInformation=0x12d870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6e8f8753, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6e8f8753, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4f204eff, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xd3e)) returned 1 [0111.913] SetErrorMode (uMode=0x0) returned 0x1 [0111.913] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\shadowonlyframe_selectionsubpicture.png", nBufferLength=0x105, lpBuffer=0x12d2c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\shadowonlyframe_selectionsubpicture.png", lpFilePart=0x0) returned 0x53 [0111.914] SetErrorMode (uMode=0x1) returned 0x0 [0111.914] SetErrorMode (uMode=0x0) returned 0x1 [0111.914] GetFileType (hFile=0x31c) returned 0x1 [0111.914] GetFileSize (in: hFile=0x31c, lpFileSizeHigh=0x12d928 | out: lpFileSizeHigh=0x12d928*=0x0) returned 0xd3e [0111.914] ReadFile (in: hFile=0x31c, lpBuffer=0x27bcc48, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12d808, lpOverlapped=0x0 | out: lpBuffer=0x27bcc48*, lpNumberOfBytesRead=0x12d808*=0xd3e, lpOverlapped=0x0) returned 1 [0112.060] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\shadowonlyframe_selectionsubpicture.png", nBufferLength=0x105, lpBuffer=0x12d2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\shadowonlyframe_selectionsubpicture.png", lpFilePart=0x0) returned 0x53 [0112.060] SetErrorMode (uMode=0x1) returned 0x0 [0112.062] SetErrorMode (uMode=0x0) returned 0x1 [0112.064] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\shadowonlyframe_videoinset.png", nBufferLength=0x105, lpBuffer=0x12d600, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\shadowonlyframe_videoinset.png", lpFilePart=0x0) returned 0x4a [0112.064] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\shadowonlyframe_videoinset.png", nBufferLength=0x105, lpBuffer=0x12d5f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\shadowonlyframe_videoinset.png", lpFilePart=0x0) returned 0x4a [0112.064] SetErrorMode (uMode=0x1) returned 0x0 [0112.064] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\shadowonlyframe_videoinset.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\shadowonlyframe_videoinset.png"), fInfoLevelId=0x0, lpFileInformation=0x12d870 | out: lpFileInformation=0x12d870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6e8ac499, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6e8ac499, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4f204eff, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc8e)) returned 1 [0112.064] SetErrorMode (uMode=0x0) returned 0x1 [0112.064] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\shadowonlyframe_videoinset.png", nBufferLength=0x105, lpBuffer=0x12d2c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\shadowonlyframe_videoinset.png", lpFilePart=0x0) returned 0x4a [0112.064] SetErrorMode (uMode=0x1) returned 0x0 [0112.065] SetErrorMode (uMode=0x0) returned 0x1 [0112.065] GetFileType (hFile=0x31c) returned 0x1 [0112.065] GetFileSize (in: hFile=0x31c, lpFileSizeHigh=0x12d928 | out: lpFileSizeHigh=0x12d928*=0x0) returned 0xc8e [0112.065] ReadFile (in: hFile=0x31c, lpBuffer=0x28a4260, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12d808, lpOverlapped=0x0 | out: lpBuffer=0x28a4260*, lpNumberOfBytesRead=0x12d808*=0xc8e, lpOverlapped=0x0) returned 1 [0112.091] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\shadowonlyframe_videoinset.png", nBufferLength=0x105, lpBuffer=0x12d2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\shadowonlyframe_videoinset.png", lpFilePart=0x0) returned 0x4a [0112.091] SetErrorMode (uMode=0x1) returned 0x0 [0112.093] SetErrorMode (uMode=0x0) returned 0x1 [0112.095] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\WhiteDot.png", nBufferLength=0x105, lpBuffer=0x12d600, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\WhiteDot.png", lpFilePart=0x0) returned 0x38 [0112.095] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\WhiteDot.png", nBufferLength=0x105, lpBuffer=0x12d5f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\WhiteDot.png", lpFilePart=0x0) returned 0x38 [0112.095] SetErrorMode (uMode=0x1) returned 0x0 [0112.095] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\WhiteDot.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\whitedot.png"), fInfoLevelId=0x0, lpFileInformation=0x12d870 | out: lpFileInformation=0x12d870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ee53867, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6ee53867, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x554cdacf, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x5caa)) returned 1 [0112.096] SetErrorMode (uMode=0x0) returned 0x1 [0112.096] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\WhiteDot.png", nBufferLength=0x105, lpBuffer=0x12d2c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\WhiteDot.png", lpFilePart=0x0) returned 0x38 [0112.096] SetErrorMode (uMode=0x1) returned 0x0 [0112.096] SetErrorMode (uMode=0x0) returned 0x1 [0112.096] GetFileType (hFile=0x31c) returned 0x1 [0112.096] GetFileSize (in: hFile=0x31c, lpFileSizeHigh=0x12d928 | out: lpFileSizeHigh=0x12d928*=0x0) returned 0x5caa [0112.096] ReadFile (in: hFile=0x31c, lpBuffer=0x278a1f8, nNumberOfBytesToRead=0x5caa, lpNumberOfBytesRead=0x12d808, lpOverlapped=0x0 | out: lpBuffer=0x278a1f8*, lpNumberOfBytesRead=0x12d808*=0x5caa, lpOverlapped=0x0) returned 1 [0112.158] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\WhiteDot.png", nBufferLength=0x105, lpBuffer=0x12d2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\WhiteDot.png", lpFilePart=0x0) returned 0x38 [0112.158] SetErrorMode (uMode=0x1) returned 0x0 [0112.160] SetErrorMode (uMode=0x0) returned 0x1 [0112.161] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Decrypt Instructions.txt", nBufferLength=0x105, lpBuffer=0x12d2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Decrypt Instructions.txt", lpFilePart=0x0) returned 0x44 [0112.161] SetErrorMode (uMode=0x1) returned 0x0 [0112.162] SetErrorMode (uMode=0x0) returned 0x1 [0112.162] GetFileType (hFile=0x31c) returned 0x1 [0112.162] WriteFile (in: hFile=0x31c, lpBuffer=0x2891218*, nNumberOfBytesToWrite=0x773, lpNumberOfBytesWritten=0x12d808, lpOverlapped=0x0 | out: lpBuffer=0x2891218*, lpNumberOfBytesWritten=0x12d808*=0x773, lpOverlapped=0x0) returned 1 [0112.164] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles", nBufferLength=0x105, lpBuffer=0x12d490, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles", lpFilePart=0x0) returned 0x2b [0112.164] SetErrorMode (uMode=0x1) returned 0x0 [0112.164] FindFirstFileW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\*", lpFindFileData=0x12d630 | out: lpFindFileData=0x12d630*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9f0852f1, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x62ec60b0, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x62ec60b0, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x26bc80 [0112.165] FindClose (in: hFindFile=0x26bc80 | out: hFindFile=0x26bc80) returned 1 [0112.165] SetErrorMode (uMode=0x0) returned 0x1 [0112.165] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyBoy", nBufferLength=0x105, lpBuffer=0x12d390, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyBoy", lpFilePart=0x0) returned 0x33 [0112.165] SetErrorMode (uMode=0x1) returned 0x0 [0112.165] FindFirstFileW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyBoy\\*", lpFindFileData=0x12d530 | out: lpFindFileData=0x12d530*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9f9e8c42, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa7d4443, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9fbd8be5, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x26bc80 [0112.243] FindClose (in: hFindFile=0x26bc80 | out: hFindFile=0x26bc80) returned 1 [0112.244] SetErrorMode (uMode=0x0) returned 0x1 [0112.245] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyBoy\\babyblue.png", nBufferLength=0x105, lpBuffer=0x12d5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyBoy\\babyblue.png", lpFilePart=0x0) returned 0x40 [0112.245] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyBoy\\babyblue.png", nBufferLength=0x105, lpBuffer=0x12d590, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyBoy\\babyblue.png", lpFilePart=0x0) returned 0x40 [0112.245] SetErrorMode (uMode=0x1) returned 0x0 [0112.245] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyBoy\\babyblue.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babyboy\\babyblue.png"), fInfoLevelId=0x0, lpFileInformation=0x12d810 | out: lpFileInformation=0x12d810*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70cace83, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70cace83, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x49cc5f99, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x303d)) returned 1 [0112.284] SetErrorMode (uMode=0x0) returned 0x1 [0112.284] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyBoy\\babyblue.png", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyBoy\\babyblue.png", lpFilePart=0x0) returned 0x40 [0112.284] SetErrorMode (uMode=0x1) returned 0x0 [0112.285] SetErrorMode (uMode=0x0) returned 0x1 [0112.285] GetFileType (hFile=0x31c) returned 0x1 [0112.285] GetFileSize (in: hFile=0x31c, lpFileSizeHigh=0x12d8c8 | out: lpFileSizeHigh=0x12d8c8*=0x0) returned 0x303d [0112.285] ReadFile (in: hFile=0x31c, lpBuffer=0x2898600, nNumberOfBytesToRead=0x303d, lpNumberOfBytesRead=0x12d7a8, lpOverlapped=0x0 | out: lpBuffer=0x2898600*, lpNumberOfBytesRead=0x12d7a8*=0x303d, lpOverlapped=0x0) returned 1 [0112.311] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyBoy\\babyblue.png", nBufferLength=0x105, lpBuffer=0x12d270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyBoy\\babyblue.png", lpFilePart=0x0) returned 0x40 [0112.311] SetErrorMode (uMode=0x1) returned 0x0 [0112.313] SetErrorMode (uMode=0x0) returned 0x1 [0112.314] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyBoy\\BabyBoyMainBackground.wmv", nBufferLength=0x105, lpBuffer=0x12d5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyBoy\\BabyBoyMainBackground.wmv", lpFilePart=0x0) returned 0x4d [0112.314] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyBoy\\BabyBoyMainBackground.wmv", nBufferLength=0x105, lpBuffer=0x12d590, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyBoy\\BabyBoyMainBackground.wmv", lpFilePart=0x0) returned 0x4d [0112.314] SetErrorMode (uMode=0x1) returned 0x0 [0112.315] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyBoy\\BabyBoyMainBackground.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babyboy\\babyboymainbackground.wmv"), fInfoLevelId=0x0, lpFileInformation=0x12d810 | out: lpFileInformation=0x12d810*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70d1f29a, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70d1f29a, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x49cec0f7, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x5354a)) returned 1 [0112.316] SetErrorMode (uMode=0x0) returned 0x1 [0112.317] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyBoy\\BabyBoyMainBackground.wmv", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyBoy\\BabyBoyMainBackground.wmv", lpFilePart=0x0) returned 0x4d [0112.317] SetErrorMode (uMode=0x1) returned 0x0 [0112.317] SetErrorMode (uMode=0x0) returned 0x1 [0112.317] GetFileType (hFile=0x31c) returned 0x1 [0112.317] GetFileSize (in: hFile=0x31c, lpFileSizeHigh=0x12d8c8 | out: lpFileSizeHigh=0x12d8c8*=0x0) returned 0x5354a [0112.318] ReadFile (in: hFile=0x31c, lpBuffer=0x12bb6188, nNumberOfBytesToRead=0x5354a, lpNumberOfBytesRead=0x12d7a8, lpOverlapped=0x0 | out: lpBuffer=0x12bb6188*, lpNumberOfBytesRead=0x12d7a8*=0x5354a, lpOverlapped=0x0) returned 1 [0112.421] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyBoy\\BabyBoyMainBackground.wmv", nBufferLength=0x105, lpBuffer=0x12d270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyBoy\\BabyBoyMainBackground.wmv", lpFilePart=0x0) returned 0x4d [0112.421] SetErrorMode (uMode=0x1) returned 0x0 [0112.423] SetErrorMode (uMode=0x0) returned 0x1 [0112.467] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyBoy\\BabyBoyMainBackground_PAL.wmv", nBufferLength=0x105, lpBuffer=0x12d5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyBoy\\BabyBoyMainBackground_PAL.wmv", lpFilePart=0x0) returned 0x51 [0112.467] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyBoy\\BabyBoyMainBackground_PAL.wmv", nBufferLength=0x105, lpBuffer=0x12d590, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyBoy\\BabyBoyMainBackground_PAL.wmv", lpFilePart=0x0) returned 0x51 [0112.467] SetErrorMode (uMode=0x1) returned 0x0 [0112.467] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyBoy\\BabyBoyMainBackground_PAL.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babyboy\\babyboymainbackground_pal.wmv"), fInfoLevelId=0x0, lpFileInformation=0x12d810 | out: lpFileInformation=0x12d810*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70d6b554, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70d6b554, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x49cec0f7, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x4f6ca)) returned 1 [0112.468] SetErrorMode (uMode=0x0) returned 0x1 [0112.468] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyBoy\\BabyBoyMainBackground_PAL.wmv", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyBoy\\BabyBoyMainBackground_PAL.wmv", lpFilePart=0x0) returned 0x51 [0112.468] SetErrorMode (uMode=0x1) returned 0x0 [0112.468] SetErrorMode (uMode=0x0) returned 0x1 [0112.468] GetFileType (hFile=0x31c) returned 0x1 [0112.468] GetFileSize (in: hFile=0x31c, lpFileSizeHigh=0x12d8c8 | out: lpFileSizeHigh=0x12d8c8*=0x0) returned 0x4f6ca [0112.472] ReadFile (in: hFile=0x31c, lpBuffer=0x128216b0, nNumberOfBytesToRead=0x4f6ca, lpNumberOfBytesRead=0x12d7a8, lpOverlapped=0x0 | out: lpBuffer=0x128216b0*, lpNumberOfBytesRead=0x12d7a8*=0x4f6ca, lpOverlapped=0x0) returned 1 [0112.625] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyBoy\\BabyBoyMainBackground_PAL.wmv", nBufferLength=0x105, lpBuffer=0x12d270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyBoy\\BabyBoyMainBackground_PAL.wmv", lpFilePart=0x0) returned 0x51 [0112.625] SetErrorMode (uMode=0x1) returned 0x0 [0112.627] SetErrorMode (uMode=0x0) returned 0x1 [0112.628] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyBoy\\BabyBoyMainToNotesBackground.wmv", nBufferLength=0x105, lpBuffer=0x12d5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyBoy\\BabyBoyMainToNotesBackground.wmv", lpFilePart=0x0) returned 0x54 [0112.628] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyBoy\\BabyBoyMainToNotesBackground.wmv", nBufferLength=0x105, lpBuffer=0x12d590, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyBoy\\BabyBoyMainToNotesBackground.wmv", lpFilePart=0x0) returned 0x54 [0112.629] SetErrorMode (uMode=0x1) returned 0x0 [0112.629] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyBoy\\BabyBoyMainToNotesBackground.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babyboy\\babyboymaintonotesbackground.wmv"), fInfoLevelId=0x0, lpFileInformation=0x12d810 | out: lpFileInformation=0x12d810*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70e03ac8, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70e03ac8, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x49d12255, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x2279e)) returned 1 [0112.629] SetErrorMode (uMode=0x0) returned 0x1 [0112.629] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyBoy\\BabyBoyMainToNotesBackground.wmv", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyBoy\\BabyBoyMainToNotesBackground.wmv", lpFilePart=0x0) returned 0x54 [0112.629] SetErrorMode (uMode=0x1) returned 0x0 [0112.629] SetErrorMode (uMode=0x0) returned 0x1 [0112.629] GetFileType (hFile=0x31c) returned 0x1 [0112.629] GetFileSize (in: hFile=0x31c, lpFileSizeHigh=0x12d8c8 | out: lpFileSizeHigh=0x12d8c8*=0x0) returned 0x2279e [0112.631] ReadFile (in: hFile=0x31c, lpBuffer=0x126d02a0, nNumberOfBytesToRead=0x2279e, lpNumberOfBytesRead=0x12d7a8, lpOverlapped=0x0 | out: lpBuffer=0x126d02a0*, lpNumberOfBytesRead=0x12d7a8*=0x2279e, lpOverlapped=0x0) returned 1 [0112.656] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyBoy\\BabyBoyMainToNotesBackground.wmv", nBufferLength=0x105, lpBuffer=0x12d270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyBoy\\BabyBoyMainToNotesBackground.wmv", lpFilePart=0x0) returned 0x54 [0112.657] SetErrorMode (uMode=0x1) returned 0x0 [0112.697] SetErrorMode (uMode=0x0) returned 0x1 [0112.698] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyBoy\\BabyBoyMainToNotesBackground_PAL.wmv", nBufferLength=0x105, lpBuffer=0x12d5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyBoy\\BabyBoyMainToNotesBackground_PAL.wmv", lpFilePart=0x0) returned 0x58 [0112.698] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyBoy\\BabyBoyMainToNotesBackground_PAL.wmv", nBufferLength=0x105, lpBuffer=0x12d590, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyBoy\\BabyBoyMainToNotesBackground_PAL.wmv", lpFilePart=0x0) returned 0x58 [0112.698] SetErrorMode (uMode=0x1) returned 0x0 [0112.698] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyBoy\\BabyBoyMainToNotesBackground_PAL.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babyboy\\babyboymaintonotesbackground_pal.wmv"), fInfoLevelId=0x0, lpFileInformation=0x12d810 | out: lpFileInformation=0x12d810*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70e29c25, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70e29c25, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x49eb515f, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x2661e)) returned 1 [0112.699] SetErrorMode (uMode=0x0) returned 0x1 [0112.699] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyBoy\\BabyBoyMainToNotesBackground_PAL.wmv", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyBoy\\BabyBoyMainToNotesBackground_PAL.wmv", lpFilePart=0x0) returned 0x58 [0112.699] SetErrorMode (uMode=0x1) returned 0x0 [0112.699] SetErrorMode (uMode=0x0) returned 0x1 [0112.699] GetFileType (hFile=0x31c) returned 0x1 [0112.699] GetFileSize (in: hFile=0x31c, lpFileSizeHigh=0x12d8c8 | out: lpFileSizeHigh=0x12d8c8*=0x0) returned 0x2661e [0112.701] ReadFile (in: hFile=0x31c, lpBuffer=0x1279f110, nNumberOfBytesToRead=0x2661e, lpNumberOfBytesRead=0x12d7a8, lpOverlapped=0x0 | out: lpBuffer=0x1279f110*, lpNumberOfBytesRead=0x12d7a8*=0x2661e, lpOverlapped=0x0) returned 1 [0112.729] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyBoy\\BabyBoyMainToNotesBackground_PAL.wmv", nBufferLength=0x105, lpBuffer=0x12d270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyBoy\\BabyBoyMainToNotesBackground_PAL.wmv", lpFilePart=0x0) returned 0x58 [0112.729] SetErrorMode (uMode=0x1) returned 0x0 [0112.731] SetErrorMode (uMode=0x0) returned 0x1 [0112.732] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyBoy\\BabyBoyMainToScenesBackground.wmv", nBufferLength=0x105, lpBuffer=0x12d5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyBoy\\BabyBoyMainToScenesBackground.wmv", lpFilePart=0x0) returned 0x55 [0112.732] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyBoy\\BabyBoyMainToScenesBackground.wmv", nBufferLength=0x105, lpBuffer=0x12d590, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyBoy\\BabyBoyMainToScenesBackground.wmv", lpFilePart=0x0) returned 0x55 [0112.732] SetErrorMode (uMode=0x1) returned 0x0 [0112.732] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyBoy\\BabyBoyMainToScenesBackground.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babyboy\\babyboymaintoscenesbackground.wmv"), fInfoLevelId=0x0, lpFileInformation=0x12d810 | out: lpFileInformation=0x12d810*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70e4fd82, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70e4fd82, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x49eb515f, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x1c9de)) returned 1 [0112.766] SetErrorMode (uMode=0x0) returned 0x1 [0112.766] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyBoy\\BabyBoyMainToScenesBackground.wmv", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyBoy\\BabyBoyMainToScenesBackground.wmv", lpFilePart=0x0) returned 0x55 [0112.766] SetErrorMode (uMode=0x1) returned 0x0 [0112.766] SetErrorMode (uMode=0x0) returned 0x1 [0112.766] GetFileType (hFile=0x31c) returned 0x1 [0112.767] GetFileSize (in: hFile=0x31c, lpFileSizeHigh=0x12d8c8 | out: lpFileSizeHigh=0x12d8c8*=0x0) returned 0x1c9de [0112.768] ReadFile (in: hFile=0x31c, lpBuffer=0x12885680, nNumberOfBytesToRead=0x1c9de, lpNumberOfBytesRead=0x12d7a8, lpOverlapped=0x0 | out: lpBuffer=0x12885680*, lpNumberOfBytesRead=0x12d7a8*=0x1c9de, lpOverlapped=0x0) returned 1 [0112.795] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyBoy\\BabyBoyMainToScenesBackground.wmv", nBufferLength=0x105, lpBuffer=0x12d270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyBoy\\BabyBoyMainToScenesBackground.wmv", lpFilePart=0x0) returned 0x55 [0112.795] SetErrorMode (uMode=0x1) returned 0x0 [0112.797] SetErrorMode (uMode=0x0) returned 0x1 [0112.798] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyBoy\\BabyBoyMainToScenesBackground_PAL.wmv", nBufferLength=0x105, lpBuffer=0x12d5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyBoy\\BabyBoyMainToScenesBackground_PAL.wmv", lpFilePart=0x0) returned 0x59 [0112.798] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyBoy\\BabyBoyMainToScenesBackground_PAL.wmv", nBufferLength=0x105, lpBuffer=0x12d590, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyBoy\\BabyBoyMainToScenesBackground_PAL.wmv", lpFilePart=0x0) returned 0x59 [0112.799] SetErrorMode (uMode=0x1) returned 0x0 [0112.799] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyBoy\\BabyBoyMainToScenesBackground_PAL.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babyboy\\babyboymaintoscenesbackground_pal.wmv"), fInfoLevelId=0x0, lpFileInformation=0x12d810 | out: lpFileInformation=0x12d810*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70e4fd82, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70e4fd82, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x49eb515f, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x2279e)) returned 1 [0112.799] SetErrorMode (uMode=0x0) returned 0x1 [0112.799] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyBoy\\BabyBoyMainToScenesBackground_PAL.wmv", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyBoy\\BabyBoyMainToScenesBackground_PAL.wmv", lpFilePart=0x0) returned 0x59 [0112.799] SetErrorMode (uMode=0x1) returned 0x0 [0112.799] SetErrorMode (uMode=0x0) returned 0x1 [0112.799] GetFileType (hFile=0x31c) returned 0x1 [0112.799] GetFileSize (in: hFile=0x31c, lpFileSizeHigh=0x12d8c8 | out: lpFileSizeHigh=0x12d8c8*=0x0) returned 0x2279e [0112.800] ReadFile (in: hFile=0x31c, lpBuffer=0x12a04708, nNumberOfBytesToRead=0x2279e, lpNumberOfBytesRead=0x12d7a8, lpOverlapped=0x0 | out: lpBuffer=0x12a04708*, lpNumberOfBytesRead=0x12d7a8*=0x2279e, lpOverlapped=0x0) returned 1 [0112.935] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyBoy\\BabyBoyMainToScenesBackground_PAL.wmv", nBufferLength=0x105, lpBuffer=0x12d270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyBoy\\BabyBoyMainToScenesBackground_PAL.wmv", lpFilePart=0x0) returned 0x59 [0112.935] SetErrorMode (uMode=0x1) returned 0x0 [0112.937] SetErrorMode (uMode=0x0) returned 0x1 [0112.938] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyBoy\\BabyBoyNotesBackground.wmv", nBufferLength=0x105, lpBuffer=0x12d5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyBoy\\BabyBoyNotesBackground.wmv", lpFilePart=0x0) returned 0x4e [0112.938] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyBoy\\BabyBoyNotesBackground.wmv", nBufferLength=0x105, lpBuffer=0x12d590, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyBoy\\BabyBoyNotesBackground.wmv", lpFilePart=0x0) returned 0x4e [0112.938] SetErrorMode (uMode=0x1) returned 0x0 [0112.938] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyBoy\\BabyBoyNotesBackground.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babyboy\\babyboynotesbackground.wmv"), fInfoLevelId=0x0, lpFileInformation=0x12d810 | out: lpFileInformation=0x12d810*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70ec2199, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70ec2199, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x49edb2bd, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x2666c)) returned 1 [0112.939] SetErrorMode (uMode=0x0) returned 0x1 [0112.939] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyBoy\\BabyBoyNotesBackground.wmv", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyBoy\\BabyBoyNotesBackground.wmv", lpFilePart=0x0) returned 0x4e [0112.939] SetErrorMode (uMode=0x1) returned 0x0 [0112.940] SetErrorMode (uMode=0x0) returned 0x1 [0112.940] GetFileType (hFile=0x31c) returned 0x1 [0112.940] GetFileSize (in: hFile=0x31c, lpFileSizeHigh=0x12d8c8 | out: lpFileSizeHigh=0x12d8c8*=0x0) returned 0x2666c [0112.941] ReadFile (in: hFile=0x31c, lpBuffer=0x126e82c0, nNumberOfBytesToRead=0x2666c, lpNumberOfBytesRead=0x12d7a8, lpOverlapped=0x0 | out: lpBuffer=0x126e82c0*, lpNumberOfBytesRead=0x12d7a8*=0x2666c, lpOverlapped=0x0) returned 1 [0112.967] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyBoy\\BabyBoyNotesBackground.wmv", nBufferLength=0x105, lpBuffer=0x12d270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyBoy\\BabyBoyNotesBackground.wmv", lpFilePart=0x0) returned 0x4e [0112.967] SetErrorMode (uMode=0x1) returned 0x0 [0112.969] SetErrorMode (uMode=0x0) returned 0x1 [0113.011] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyBoy\\BabyBoyNotesBackground_PAL.wmv", nBufferLength=0x105, lpBuffer=0x12d5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyBoy\\BabyBoyNotesBackground_PAL.wmv", lpFilePart=0x0) returned 0x52 [0113.011] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyBoy\\BabyBoyNotesBackground_PAL.wmv", nBufferLength=0x105, lpBuffer=0x12d590, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyBoy\\BabyBoyNotesBackground_PAL.wmv", lpFilePart=0x0) returned 0x52 [0113.011] SetErrorMode (uMode=0x1) returned 0x0 [0113.011] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyBoy\\BabyBoyNotesBackground_PAL.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babyboy\\babyboynotesbackground_pal.wmv"), fInfoLevelId=0x0, lpFileInformation=0x12d810 | out: lpFileInformation=0x12d810*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70f345b0, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70f345b0, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x49edb2bd, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x2666c)) returned 1 [0113.011] SetErrorMode (uMode=0x0) returned 0x1 [0113.012] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyBoy\\BabyBoyNotesBackground_PAL.wmv", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyBoy\\BabyBoyNotesBackground_PAL.wmv", lpFilePart=0x0) returned 0x52 [0113.012] SetErrorMode (uMode=0x1) returned 0x0 [0113.012] SetErrorMode (uMode=0x0) returned 0x1 [0113.012] GetFileType (hFile=0x31c) returned 0x1 [0113.012] GetFileSize (in: hFile=0x31c, lpFileSizeHigh=0x12d8c8 | out: lpFileSizeHigh=0x12d8c8*=0x0) returned 0x2666c [0113.014] ReadFile (in: hFile=0x31c, lpBuffer=0x127cea10, nNumberOfBytesToRead=0x2666c, lpNumberOfBytesRead=0x12d7a8, lpOverlapped=0x0 | out: lpBuffer=0x127cea10*, lpNumberOfBytesRead=0x12d7a8*=0x2666c, lpOverlapped=0x0) returned 1 [0113.039] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyBoy\\BabyBoyNotesBackground_PAL.wmv", nBufferLength=0x105, lpBuffer=0x12d270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyBoy\\BabyBoyNotesBackground_PAL.wmv", lpFilePart=0x0) returned 0x52 [0113.039] SetErrorMode (uMode=0x1) returned 0x0 [0113.041] SetErrorMode (uMode=0x0) returned 0x1 [0113.043] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyBoy\\BabyBoyScenesBackground.wmv", nBufferLength=0x105, lpBuffer=0x12d5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyBoy\\BabyBoyScenesBackground.wmv", lpFilePart=0x0) returned 0x4f [0113.043] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyBoy\\BabyBoyScenesBackground.wmv", nBufferLength=0x105, lpBuffer=0x12d590, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyBoy\\BabyBoyScenesBackground.wmv", lpFilePart=0x0) returned 0x4f [0113.044] SetErrorMode (uMode=0x1) returned 0x0 [0113.044] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyBoy\\BabyBoyScenesBackground.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babyboy\\babyboyscenesbackground.wmv"), fInfoLevelId=0x0, lpFileInformation=0x12d810 | out: lpFileInformation=0x12d810*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70f5a70d, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70f5a70d, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x49f0141b, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x2472c)) returned 1 [0113.080] SetErrorMode (uMode=0x0) returned 0x1 [0113.081] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyBoy\\BabyBoyScenesBackground.wmv", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyBoy\\BabyBoyScenesBackground.wmv", lpFilePart=0x0) returned 0x4f [0113.081] SetErrorMode (uMode=0x1) returned 0x0 [0113.081] SetErrorMode (uMode=0x0) returned 0x1 [0113.081] GetFileType (hFile=0x31c) returned 0x1 [0113.081] GetFileSize (in: hFile=0x31c, lpFileSizeHigh=0x12d8c8 | out: lpFileSizeHigh=0x12d8c8*=0x0) returned 0x2472c [0113.116] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyBoy\\BabyBoyScenesBackground.wmv", nBufferLength=0x105, lpBuffer=0x12d270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyBoy\\BabyBoyScenesBackground.wmv", lpFilePart=0x0) returned 0x4f [0113.116] SetErrorMode (uMode=0x1) returned 0x0 [0113.119] SetErrorMode (uMode=0x0) returned 0x1 [0113.120] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyBoy\\BabyBoyScenesBackground_PAL.wmv", nBufferLength=0x105, lpBuffer=0x12d5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyBoy\\BabyBoyScenesBackground_PAL.wmv", lpFilePart=0x0) returned 0x53 [0113.120] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyBoy\\BabyBoyScenesBackground_PAL.wmv", nBufferLength=0x105, lpBuffer=0x12d590, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyBoy\\BabyBoyScenesBackground_PAL.wmv", lpFilePart=0x0) returned 0x53 [0113.121] SetErrorMode (uMode=0x1) returned 0x0 [0113.121] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyBoy\\BabyBoyScenesBackground_PAL.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babyboy\\babyboyscenesbackground_pal.wmv"), fInfoLevelId=0x0, lpFileInformation=0x12d810 | out: lpFileInformation=0x12d810*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70f8086a, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70f8086a, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x49f0141b, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x1e96c)) returned 1 [0113.121] SetErrorMode (uMode=0x0) returned 0x1 [0113.121] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyBoy\\BabyBoyScenesBackground_PAL.wmv", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyBoy\\BabyBoyScenesBackground_PAL.wmv", lpFilePart=0x0) returned 0x53 [0113.121] SetErrorMode (uMode=0x1) returned 0x0 [0113.121] SetErrorMode (uMode=0x0) returned 0x1 [0113.121] GetFileType (hFile=0x31c) returned 0x1 [0113.122] GetFileSize (in: hFile=0x31c, lpFileSizeHigh=0x12d8c8 | out: lpFileSizeHigh=0x12d8c8*=0x0) returned 0x1e96c [0113.191] ReadFile (in: hFile=0x31c, lpBuffer=0x12680ba0, nNumberOfBytesToRead=0x1e96c, lpNumberOfBytesRead=0x12d7a8, lpOverlapped=0x0 | out: lpBuffer=0x12680ba0*, lpNumberOfBytesRead=0x12d7a8*=0x1e96c, lpOverlapped=0x0) returned 1 [0113.263] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyBoy\\BabyBoyScenesBackground_PAL.wmv", nBufferLength=0x105, lpBuffer=0x12d270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyBoy\\BabyBoyScenesBackground_PAL.wmv", lpFilePart=0x0) returned 0x53 [0113.263] SetErrorMode (uMode=0x1) returned 0x0 [0113.265] SetErrorMode (uMode=0x0) returned 0x1 [0113.266] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyBoy\\LightBlueRectangle.PNG", nBufferLength=0x105, lpBuffer=0x12d5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyBoy\\LightBlueRectangle.PNG", lpFilePart=0x0) returned 0x4a [0113.267] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyBoy\\LightBlueRectangle.PNG", nBufferLength=0x105, lpBuffer=0x12d590, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyBoy\\LightBlueRectangle.PNG", lpFilePart=0x0) returned 0x4a [0113.267] SetErrorMode (uMode=0x1) returned 0x0 [0113.267] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyBoy\\LightBlueRectangle.PNG" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babyboy\\lightbluerectangle.png"), fInfoLevelId=0x0, lpFileInformation=0x12d810 | out: lpFileInformation=0x12d810*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70fa69c7, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70fa69c7, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x49f0141b, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xdc)) returned 1 [0113.267] SetErrorMode (uMode=0x0) returned 0x1 [0113.267] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyBoy\\LightBlueRectangle.PNG", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyBoy\\LightBlueRectangle.PNG", lpFilePart=0x0) returned 0x4a [0113.267] SetErrorMode (uMode=0x1) returned 0x0 [0113.267] SetErrorMode (uMode=0x0) returned 0x1 [0113.268] GetFileType (hFile=0x31c) returned 0x1 [0113.268] GetFileSize (in: hFile=0x31c, lpFileSizeHigh=0x12d8c8 | out: lpFileSizeHigh=0x12d8c8*=0x0) returned 0xdc [0113.268] ReadFile (in: hFile=0x31c, lpBuffer=0x27a3940, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12d7a8, lpOverlapped=0x0 | out: lpBuffer=0x27a3940*, lpNumberOfBytesRead=0x12d7a8*=0xdc, lpOverlapped=0x0) returned 1 [0113.330] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyBoy\\LightBlueRectangle.PNG", nBufferLength=0x105, lpBuffer=0x12d270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyBoy\\LightBlueRectangle.PNG", lpFilePart=0x0) returned 0x4a [0113.330] SetErrorMode (uMode=0x1) returned 0x0 [0113.332] SetErrorMode (uMode=0x0) returned 0x1 [0113.334] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyBoy\\MainMenuButtonIcon.png", nBufferLength=0x105, lpBuffer=0x12d5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyBoy\\MainMenuButtonIcon.png", lpFilePart=0x0) returned 0x4a [0113.334] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyBoy\\MainMenuButtonIcon.png", nBufferLength=0x105, lpBuffer=0x12d590, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyBoy\\MainMenuButtonIcon.png", lpFilePart=0x0) returned 0x4a [0113.334] SetErrorMode (uMode=0x1) returned 0x0 [0113.334] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyBoy\\MainMenuButtonIcon.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babyboy\\mainmenubuttonicon.png"), fInfoLevelId=0x0, lpFileInformation=0x12d810 | out: lpFileInformation=0x12d810*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70fccb24, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70fccb24, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x49f27579, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xb6a)) returned 1 [0113.334] SetErrorMode (uMode=0x0) returned 0x1 [0113.335] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyBoy\\MainMenuButtonIcon.png", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyBoy\\MainMenuButtonIcon.png", lpFilePart=0x0) returned 0x4a [0113.335] SetErrorMode (uMode=0x1) returned 0x0 [0113.335] SetErrorMode (uMode=0x0) returned 0x1 [0113.335] GetFileType (hFile=0x31c) returned 0x1 [0113.335] GetFileSize (in: hFile=0x31c, lpFileSizeHigh=0x12d8c8 | out: lpFileSizeHigh=0x12d8c8*=0x0) returned 0xb6a [0113.335] ReadFile (in: hFile=0x31c, lpBuffer=0x2886b38, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12d7a8, lpOverlapped=0x0 | out: lpBuffer=0x2886b38*, lpNumberOfBytesRead=0x12d7a8*=0xb6a, lpOverlapped=0x0) returned 1 [0113.356] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyBoy\\MainMenuButtonIcon.png", nBufferLength=0x105, lpBuffer=0x12d270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyBoy\\MainMenuButtonIcon.png", lpFilePart=0x0) returned 0x4a [0113.356] SetErrorMode (uMode=0x1) returned 0x0 [0113.358] SetErrorMode (uMode=0x0) returned 0x1 [0113.359] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyBoy\\navSubpicture.png", nBufferLength=0x105, lpBuffer=0x12d5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyBoy\\navSubpicture.png", lpFilePart=0x0) returned 0x45 [0113.359] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyBoy\\navSubpicture.png", nBufferLength=0x105, lpBuffer=0x12d590, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyBoy\\navSubpicture.png", lpFilePart=0x0) returned 0x45 [0113.359] SetErrorMode (uMode=0x1) returned 0x0 [0113.359] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyBoy\\navSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babyboy\\navsubpicture.png"), fInfoLevelId=0x0, lpFileInformation=0x12d810 | out: lpFileInformation=0x12d810*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7103ef3b, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x7103ef3b, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x49f4d6d7, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xf63)) returned 1 [0113.369] SetErrorMode (uMode=0x0) returned 0x1 [0113.369] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyBoy\\navSubpicture.png", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyBoy\\navSubpicture.png", lpFilePart=0x0) returned 0x45 [0113.369] SetErrorMode (uMode=0x1) returned 0x0 [0113.369] SetErrorMode (uMode=0x0) returned 0x1 [0113.369] GetFileType (hFile=0x31c) returned 0x1 [0113.369] GetFileSize (in: hFile=0x31c, lpFileSizeHigh=0x12d8c8 | out: lpFileSizeHigh=0x12d8c8*=0x0) returned 0xf63 [0113.370] ReadFile (in: hFile=0x31c, lpBuffer=0x276ed90, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12d7a8, lpOverlapped=0x0 | out: lpBuffer=0x276ed90*, lpNumberOfBytesRead=0x12d7a8*=0xf63, lpOverlapped=0x0) returned 1 [0113.434] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyBoy\\navSubpicture.png", nBufferLength=0x105, lpBuffer=0x12d270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyBoy\\navSubpicture.png", lpFilePart=0x0) returned 0x45 [0113.434] SetErrorMode (uMode=0x1) returned 0x0 [0113.436] SetErrorMode (uMode=0x0) returned 0x1 [0113.439] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyBoy\\nav_leftarrow.png", nBufferLength=0x105, lpBuffer=0x12d5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyBoy\\nav_leftarrow.png", lpFilePart=0x0) returned 0x45 [0113.439] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyBoy\\nav_leftarrow.png", nBufferLength=0x105, lpBuffer=0x12d590, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyBoy\\nav_leftarrow.png", lpFilePart=0x0) returned 0x45 [0113.439] SetErrorMode (uMode=0x1) returned 0x0 [0113.439] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyBoy\\nav_leftarrow.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babyboy\\nav_leftarrow.png"), fInfoLevelId=0x0, lpFileInformation=0x12d810 | out: lpFileInformation=0x12d810*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70fccb24, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70fccb24, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x49f27579, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x1197)) returned 1 [0113.440] SetErrorMode (uMode=0x0) returned 0x1 [0113.440] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyBoy\\nav_leftarrow.png", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyBoy\\nav_leftarrow.png", lpFilePart=0x0) returned 0x45 [0113.440] SetErrorMode (uMode=0x1) returned 0x0 [0113.440] SetErrorMode (uMode=0x0) returned 0x1 [0113.440] GetFileType (hFile=0x31c) returned 0x1 [0113.440] GetFileSize (in: hFile=0x31c, lpFileSizeHigh=0x12d8c8 | out: lpFileSizeHigh=0x12d8c8*=0x0) returned 0x1197 [0113.440] ReadFile (in: hFile=0x31c, lpBuffer=0x2856120, nNumberOfBytesToRead=0x1197, lpNumberOfBytesRead=0x12d7a8, lpOverlapped=0x0 | out: lpBuffer=0x2856120*, lpNumberOfBytesRead=0x12d7a8*=0x1197, lpOverlapped=0x0) returned 1 [0113.500] QueryPerformanceCounter (in: lpPerformanceCount=0x12d330 | out: lpPerformanceCount=0x12d330*=25542145324) returned 1 [0113.512] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyBoy\\nav_leftarrow.png", nBufferLength=0x105, lpBuffer=0x12d270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyBoy\\nav_leftarrow.png", lpFilePart=0x0) returned 0x45 [0113.512] SetErrorMode (uMode=0x1) returned 0x0 [0113.514] SetErrorMode (uMode=0x0) returned 0x1 [0113.515] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyBoy\\nav_rightarrow.png", nBufferLength=0x105, lpBuffer=0x12d5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyBoy\\nav_rightarrow.png", lpFilePart=0x0) returned 0x46 [0113.515] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyBoy\\nav_rightarrow.png", nBufferLength=0x105, lpBuffer=0x12d590, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyBoy\\nav_rightarrow.png", lpFilePart=0x0) returned 0x46 [0113.516] SetErrorMode (uMode=0x1) returned 0x0 [0113.516] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyBoy\\nav_rightarrow.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babyboy\\nav_rightarrow.png"), fInfoLevelId=0x0, lpFileInformation=0x12d810 | out: lpFileInformation=0x12d810*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70ff2c81, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70ff2c81, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x49f27579, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x11a3)) returned 1 [0113.517] SetErrorMode (uMode=0x0) returned 0x1 [0113.517] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyBoy\\nav_rightarrow.png", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyBoy\\nav_rightarrow.png", lpFilePart=0x0) returned 0x46 [0113.517] SetErrorMode (uMode=0x1) returned 0x0 [0113.517] SetErrorMode (uMode=0x0) returned 0x1 [0113.517] GetFileType (hFile=0x31c) returned 0x1 [0113.517] GetFileSize (in: hFile=0x31c, lpFileSizeHigh=0x12d8c8 | out: lpFileSizeHigh=0x12d8c8*=0x0) returned 0x11a3 [0113.517] ReadFile (in: hFile=0x31c, lpBuffer=0x273dd60, nNumberOfBytesToRead=0x11a3, lpNumberOfBytesRead=0x12d7a8, lpOverlapped=0x0 | out: lpBuffer=0x273dd60*, lpNumberOfBytesRead=0x12d7a8*=0x11a3, lpOverlapped=0x0) returned 1 [0113.539] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyBoy\\nav_rightarrow.png", nBufferLength=0x105, lpBuffer=0x12d270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyBoy\\nav_rightarrow.png", lpFilePart=0x0) returned 0x46 [0113.539] SetErrorMode (uMode=0x1) returned 0x0 [0113.541] SetErrorMode (uMode=0x0) returned 0x1 [0113.542] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyBoy\\nav_uparrow.png", nBufferLength=0x105, lpBuffer=0x12d5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyBoy\\nav_uparrow.png", lpFilePart=0x0) returned 0x43 [0113.543] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyBoy\\nav_uparrow.png", nBufferLength=0x105, lpBuffer=0x12d590, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyBoy\\nav_uparrow.png", lpFilePart=0x0) returned 0x43 [0113.543] SetErrorMode (uMode=0x1) returned 0x0 [0113.543] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyBoy\\nav_uparrow.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babyboy\\nav_uparrow.png"), fInfoLevelId=0x0, lpFileInformation=0x12d810 | out: lpFileInformation=0x12d810*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71018dde, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x71018dde, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x49f4d6d7, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x1068)) returned 1 [0113.543] SetErrorMode (uMode=0x0) returned 0x1 [0113.543] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyBoy\\nav_uparrow.png", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyBoy\\nav_uparrow.png", lpFilePart=0x0) returned 0x43 [0113.544] SetErrorMode (uMode=0x1) returned 0x0 [0113.544] SetErrorMode (uMode=0x0) returned 0x1 [0113.544] GetFileType (hFile=0x31c) returned 0x1 [0113.544] GetFileSize (in: hFile=0x31c, lpFileSizeHigh=0x12d8c8 | out: lpFileSizeHigh=0x12d8c8*=0x0) returned 0x1068 [0113.544] ReadFile (in: hFile=0x31c, lpBuffer=0x2825db8, nNumberOfBytesToRead=0x1068, lpNumberOfBytesRead=0x12d7a8, lpOverlapped=0x0 | out: lpBuffer=0x2825db8*, lpNumberOfBytesRead=0x12d7a8*=0x1068, lpOverlapped=0x0) returned 1 [0113.619] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyBoy\\nav_uparrow.png", nBufferLength=0x105, lpBuffer=0x12d270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyBoy\\nav_uparrow.png", lpFilePart=0x0) returned 0x43 [0113.619] SetErrorMode (uMode=0x1) returned 0x0 [0113.622] SetErrorMode (uMode=0x0) returned 0x1 [0113.624] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyBoy\\Decrypt Instructions.txt", nBufferLength=0x105, lpBuffer=0x12d240, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyBoy\\Decrypt Instructions.txt", lpFilePart=0x0) returned 0x4c [0113.624] SetErrorMode (uMode=0x1) returned 0x0 [0113.624] SetErrorMode (uMode=0x0) returned 0x1 [0113.625] GetFileType (hFile=0x31c) returned 0x1 [0113.625] WriteFile (in: hFile=0x31c, lpBuffer=0x2714030*, nNumberOfBytesToWrite=0x773, lpNumberOfBytesWritten=0x12d7a8, lpOverlapped=0x0 | out: lpBuffer=0x2714030*, lpNumberOfBytesWritten=0x12d7a8*=0x773, lpOverlapped=0x0) returned 1 [0113.626] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyBoy", nBufferLength=0x105, lpBuffer=0x12d430, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyBoy", lpFilePart=0x0) returned 0x33 [0113.627] SetErrorMode (uMode=0x1) returned 0x0 [0113.627] FindFirstFileW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyBoy\\*", lpFindFileData=0x12d5d0 | out: lpFindFileData=0x12d5d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9f9e8c42, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x63c9c090, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x63c9c090, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x26bc80 [0113.627] FindClose (in: hFindFile=0x26bc80 | out: hFindFile=0x26bc80) returned 1 [0113.628] SetErrorMode (uMode=0x0) returned 0x1 [0113.628] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl", nBufferLength=0x105, lpBuffer=0x12d390, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl", lpFilePart=0x0) returned 0x34 [0113.628] SetErrorMode (uMode=0x1) returned 0x0 [0113.628] FindFirstFileW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\*", lpFindFileData=0x12d530 | out: lpFindFileData=0x12d530*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa12338ef, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaab67eab, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa15a10e8, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x26bc80 [0113.719] FindClose (in: hFindFile=0x26bc80 | out: hFindFile=0x26bc80) returned 1 [0113.720] SetErrorMode (uMode=0x0) returned 0x1 [0113.721] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\16_9-frame-background.png", nBufferLength=0x105, lpBuffer=0x12d5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\16_9-frame-background.png", lpFilePart=0x0) returned 0x4e [0113.721] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\16_9-frame-background.png", nBufferLength=0x105, lpBuffer=0x12d590, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\16_9-frame-background.png", lpFilePart=0x0) returned 0x4e [0113.721] SetErrorMode (uMode=0x1) returned 0x0 [0113.721] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\16_9-frame-background.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babygirl\\16_9-frame-background.png"), fInfoLevelId=0x0, lpFileInformation=0x12d810 | out: lpFileInformation=0x12d810*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72858c15, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x72858c15, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x49f4d6d7, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xab3)) returned 1 [0113.724] SetErrorMode (uMode=0x0) returned 0x1 [0113.724] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\16_9-frame-background.png", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\16_9-frame-background.png", lpFilePart=0x0) returned 0x4e [0113.724] SetErrorMode (uMode=0x1) returned 0x0 [0113.725] SetErrorMode (uMode=0x0) returned 0x1 [0113.725] GetFileType (hFile=0x31c) returned 0x1 [0113.725] GetFileSize (in: hFile=0x31c, lpFileSizeHigh=0x12d8c8 | out: lpFileSizeHigh=0x12d8c8*=0x0) returned 0xab3 [0113.725] ReadFile (in: hFile=0x31c, lpBuffer=0x271a940, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12d7a8, lpOverlapped=0x0 | out: lpBuffer=0x271a940*, lpNumberOfBytesRead=0x12d7a8*=0xab3, lpOverlapped=0x0) returned 1 [0113.747] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\16_9-frame-background.png", nBufferLength=0x105, lpBuffer=0x12d270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\16_9-frame-background.png", lpFilePart=0x0) returned 0x4e [0113.747] SetErrorMode (uMode=0x1) returned 0x0 [0113.749] SetErrorMode (uMode=0x0) returned 0x1 [0113.751] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\16_9-frame-highlight.png", nBufferLength=0x105, lpBuffer=0x12d5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\16_9-frame-highlight.png", lpFilePart=0x0) returned 0x4d [0113.751] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\16_9-frame-highlight.png", nBufferLength=0x105, lpBuffer=0x12d590, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\16_9-frame-highlight.png", lpFilePart=0x0) returned 0x4d [0113.751] SetErrorMode (uMode=0x1) returned 0x0 [0113.751] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\16_9-frame-highlight.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babygirl\\16_9-frame-highlight.png"), fInfoLevelId=0x0, lpFileInformation=0x12d810 | out: lpFileInformation=0x12d810*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72858c15, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x72858c15, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x49f4d6d7, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x8a3)) returned 1 [0113.753] SetErrorMode (uMode=0x0) returned 0x1 [0113.753] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\16_9-frame-highlight.png", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\16_9-frame-highlight.png", lpFilePart=0x0) returned 0x4d [0113.753] SetErrorMode (uMode=0x1) returned 0x0 [0113.753] SetErrorMode (uMode=0x0) returned 0x1 [0113.753] GetFileType (hFile=0x31c) returned 0x1 [0113.753] GetFileSize (in: hFile=0x31c, lpFileSizeHigh=0x12d8c8 | out: lpFileSizeHigh=0x12d8c8*=0x0) returned 0x8a3 [0113.753] ReadFile (in: hFile=0x31c, lpBuffer=0x2800ec8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12d7a8, lpOverlapped=0x0 | out: lpBuffer=0x2800ec8*, lpNumberOfBytesRead=0x12d7a8*=0x8a3, lpOverlapped=0x0) returned 1 [0113.823] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\16_9-frame-highlight.png", nBufferLength=0x105, lpBuffer=0x12d270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\16_9-frame-highlight.png", lpFilePart=0x0) returned 0x4d [0113.824] SetErrorMode (uMode=0x1) returned 0x0 [0113.827] SetErrorMode (uMode=0x0) returned 0x1 [0113.829] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\16_9-frame-image-mask.png", nBufferLength=0x105, lpBuffer=0x12d5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\16_9-frame-image-mask.png", lpFilePart=0x0) returned 0x4e [0113.829] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\16_9-frame-image-mask.png", nBufferLength=0x105, lpBuffer=0x12d590, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\16_9-frame-image-mask.png", lpFilePart=0x0) returned 0x4e [0113.829] SetErrorMode (uMode=0x1) returned 0x0 [0113.830] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\16_9-frame-image-mask.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babygirl\\16_9-frame-image-mask.png"), fInfoLevelId=0x0, lpFileInformation=0x12d810 | out: lpFileInformation=0x12d810*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7287ed72, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x7287ed72, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x49fbfaf1, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x60f)) returned 1 [0113.830] SetErrorMode (uMode=0x0) returned 0x1 [0113.830] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\16_9-frame-image-mask.png", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\16_9-frame-image-mask.png", lpFilePart=0x0) returned 0x4e [0113.831] SetErrorMode (uMode=0x1) returned 0x0 [0113.831] SetErrorMode (uMode=0x0) returned 0x1 [0113.831] GetFileType (hFile=0x31c) returned 0x1 [0113.831] GetFileSize (in: hFile=0x31c, lpFileSizeHigh=0x12d8c8 | out: lpFileSizeHigh=0x12d8c8*=0x0) returned 0x60f [0113.831] ReadFile (in: hFile=0x31c, lpBuffer=0x26e2360, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12d7a8, lpOverlapped=0x0 | out: lpBuffer=0x26e2360*, lpNumberOfBytesRead=0x12d7a8*=0x60f, lpOverlapped=0x0) returned 1 [0113.922] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\16_9-frame-image-mask.png", nBufferLength=0x105, lpBuffer=0x12d270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\16_9-frame-image-mask.png", lpFilePart=0x0) returned 0x4e [0113.922] SetErrorMode (uMode=0x1) returned 0x0 [0113.924] SetErrorMode (uMode=0x0) returned 0x1 [0113.926] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\babypink.png", nBufferLength=0x105, lpBuffer=0x12d5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\babypink.png", lpFilePart=0x0) returned 0x41 [0113.926] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\babypink.png", nBufferLength=0x105, lpBuffer=0x12d590, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\babypink.png", lpFilePart=0x0) returned 0x41 [0113.926] SetErrorMode (uMode=0x1) returned 0x0 [0113.926] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\babypink.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babygirl\\babypink.png"), fInfoLevelId=0x0, lpFileInformation=0x12d810 | out: lpFileInformation=0x12d810*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72832ab8, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x72832ab8, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x49fbfaf1, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x4c15)) returned 1 [0113.927] SetErrorMode (uMode=0x0) returned 0x1 [0113.927] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\babypink.png", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\babypink.png", lpFilePart=0x0) returned 0x41 [0113.927] SetErrorMode (uMode=0x1) returned 0x0 [0113.927] SetErrorMode (uMode=0x0) returned 0x1 [0113.927] GetFileType (hFile=0x31c) returned 0x1 [0113.927] GetFileSize (in: hFile=0x31c, lpFileSizeHigh=0x12d8c8 | out: lpFileSizeHigh=0x12d8c8*=0x0) returned 0x4c15 [0113.927] ReadFile (in: hFile=0x31c, lpBuffer=0x27c6838, nNumberOfBytesToRead=0x4c15, lpNumberOfBytesRead=0x12d7a8, lpOverlapped=0x0 | out: lpBuffer=0x27c6838*, lpNumberOfBytesRead=0x12d7a8*=0x4c15, lpOverlapped=0x0) returned 1 [0114.089] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\babypink.png", nBufferLength=0x105, lpBuffer=0x12d270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\babypink.png", lpFilePart=0x0) returned 0x41 [0114.089] SetErrorMode (uMode=0x1) returned 0x0 [0114.091] SetErrorMode (uMode=0x0) returned 0x1 [0114.093] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\background.png", nBufferLength=0x105, lpBuffer=0x12d5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\background.png", lpFilePart=0x0) returned 0x43 [0114.093] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\background.png", nBufferLength=0x105, lpBuffer=0x12d590, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\background.png", lpFilePart=0x0) returned 0x43 [0114.099] SetErrorMode (uMode=0x1) returned 0x0 [0114.099] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\background.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babygirl\\background.png"), fInfoLevelId=0x0, lpFileInformation=0x12d810 | out: lpFileInformation=0x12d810*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x728a4ecf, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x728a4ecf, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x49fbfaf1, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xcc1b)) returned 1 [0114.099] SetErrorMode (uMode=0x0) returned 0x1 [0114.099] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\background.png", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\background.png", lpFilePart=0x0) returned 0x43 [0114.099] SetErrorMode (uMode=0x1) returned 0x0 [0114.099] SetErrorMode (uMode=0x0) returned 0x1 [0114.100] GetFileType (hFile=0x31c) returned 0x1 [0114.100] GetFileSize (in: hFile=0x31c, lpFileSizeHigh=0x12d8c8 | out: lpFileSizeHigh=0x12d8c8*=0x0) returned 0xcc1b [0114.100] ReadFile (in: hFile=0x31c, lpBuffer=0x26c5618, nNumberOfBytesToRead=0xcc1b, lpNumberOfBytesRead=0x12d7a8, lpOverlapped=0x0 | out: lpBuffer=0x26c5618*, lpNumberOfBytesRead=0x12d7a8*=0xcc1b, lpOverlapped=0x0) returned 1 [0114.164] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\background.png", nBufferLength=0x105, lpBuffer=0x12d270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\background.png", lpFilePart=0x0) returned 0x43 [0114.164] SetErrorMode (uMode=0x1) returned 0x0 [0114.166] SetErrorMode (uMode=0x0) returned 0x1 [0114.168] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\bear_formatted_matte2.wmv", nBufferLength=0x105, lpBuffer=0x12d5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\bear_formatted_matte2.wmv", lpFilePart=0x0) returned 0x4e [0114.168] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\bear_formatted_matte2.wmv", nBufferLength=0x105, lpBuffer=0x12d590, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\bear_formatted_matte2.wmv", lpFilePart=0x0) returned 0x4e [0114.168] SetErrorMode (uMode=0x1) returned 0x0 [0114.168] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\bear_formatted_matte2.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babygirl\\bear_formatted_matte2.wmv"), fInfoLevelId=0x0, lpFileInformation=0x12d810 | out: lpFileInformation=0x12d810*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x728cb02c, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x728cb02c, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x49fe5c4f, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x2c432)) returned 1 [0114.219] SetErrorMode (uMode=0x0) returned 0x1 [0114.219] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\bear_formatted_matte2.wmv", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\bear_formatted_matte2.wmv", lpFilePart=0x0) returned 0x4e [0114.219] SetErrorMode (uMode=0x1) returned 0x0 [0114.219] SetErrorMode (uMode=0x0) returned 0x1 [0114.219] GetFileType (hFile=0x31c) returned 0x1 [0114.219] GetFileSize (in: hFile=0x31c, lpFileSizeHigh=0x12d8c8 | out: lpFileSizeHigh=0x12d8c8*=0x0) returned 0x2c432 [0114.220] ReadFile (in: hFile=0x31c, lpBuffer=0x12751d40, nNumberOfBytesToRead=0x2c432, lpNumberOfBytesRead=0x12d7a8, lpOverlapped=0x0 | out: lpBuffer=0x12751d40*, lpNumberOfBytesRead=0x12d7a8*=0x2c432, lpOverlapped=0x0) returned 1 [0114.306] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\bear_formatted_matte2.wmv", nBufferLength=0x105, lpBuffer=0x12d270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\bear_formatted_matte2.wmv", lpFilePart=0x0) returned 0x4e [0114.306] SetErrorMode (uMode=0x1) returned 0x0 [0114.308] SetErrorMode (uMode=0x0) returned 0x1 [0114.309] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\Bear_Formatted_MATTE2_PAL.wmv", nBufferLength=0x105, lpBuffer=0x12d5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\Bear_Formatted_MATTE2_PAL.wmv", lpFilePart=0x0) returned 0x52 [0114.309] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\Bear_Formatted_MATTE2_PAL.wmv", nBufferLength=0x105, lpBuffer=0x12d590, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\Bear_Formatted_MATTE2_PAL.wmv", lpFilePart=0x0) returned 0x52 [0114.309] SetErrorMode (uMode=0x1) returned 0x0 [0114.309] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\Bear_Formatted_MATTE2_PAL.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babygirl\\bear_formatted_matte2_pal.wmv"), fInfoLevelId=0x0, lpFileInformation=0x12d810 | out: lpFileInformation=0x12d810*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x728f1189, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x728f1189, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4a058069, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x2c44a)) returned 1 [0114.309] SetErrorMode (uMode=0x0) returned 0x1 [0114.310] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\Bear_Formatted_MATTE2_PAL.wmv", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\Bear_Formatted_MATTE2_PAL.wmv", lpFilePart=0x0) returned 0x52 [0114.310] SetErrorMode (uMode=0x1) returned 0x0 [0114.310] SetErrorMode (uMode=0x0) returned 0x1 [0114.310] GetFileType (hFile=0x31c) returned 0x1 [0114.310] GetFileSize (in: hFile=0x31c, lpFileSizeHigh=0x12d8c8 | out: lpFileSizeHigh=0x12d8c8*=0x0) returned 0x2c44a [0114.311] ReadFile (in: hFile=0x31c, lpBuffer=0x1285b768, nNumberOfBytesToRead=0x2c44a, lpNumberOfBytesRead=0x12d7a8, lpOverlapped=0x0 | out: lpBuffer=0x1285b768*, lpNumberOfBytesRead=0x12d7a8*=0x2c44a, lpOverlapped=0x0) returned 1 [0114.392] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\Bear_Formatted_MATTE2_PAL.wmv", nBufferLength=0x105, lpBuffer=0x12d270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\Bear_Formatted_MATTE2_PAL.wmv", lpFilePart=0x0) returned 0x52 [0114.392] SetErrorMode (uMode=0x1) returned 0x0 [0114.394] SetErrorMode (uMode=0x0) returned 0x1 [0114.395] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\bear_formatted_rgb6.wmv", nBufferLength=0x105, lpBuffer=0x12d5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\bear_formatted_rgb6.wmv", lpFilePart=0x0) returned 0x4c [0114.396] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\bear_formatted_rgb6.wmv", nBufferLength=0x105, lpBuffer=0x12d590, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\bear_formatted_rgb6.wmv", lpFilePart=0x0) returned 0x4c [0114.396] SetErrorMode (uMode=0x1) returned 0x0 [0114.396] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\bear_formatted_rgb6.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babygirl\\bear_formatted_rgb6.wmv"), fInfoLevelId=0x0, lpFileInformation=0x12d810 | out: lpFileInformation=0x12d810*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x729172e6, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x729172e6, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4a351bc1, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x39ef2)) returned 1 [0114.396] SetErrorMode (uMode=0x0) returned 0x1 [0114.396] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\bear_formatted_rgb6.wmv", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\bear_formatted_rgb6.wmv", lpFilePart=0x0) returned 0x4c [0114.396] SetErrorMode (uMode=0x1) returned 0x0 [0114.396] SetErrorMode (uMode=0x0) returned 0x1 [0114.397] GetFileType (hFile=0x31c) returned 0x1 [0114.397] GetFileSize (in: hFile=0x31c, lpFileSizeHigh=0x12d8c8 | out: lpFileSizeHigh=0x12d8c8*=0x0) returned 0x39ef2 [0114.397] ReadFile (in: hFile=0x31c, lpBuffer=0x129651f8, nNumberOfBytesToRead=0x39ef2, lpNumberOfBytesRead=0x12d7a8, lpOverlapped=0x0 | out: lpBuffer=0x129651f8*, lpNumberOfBytesRead=0x12d7a8*=0x39ef2, lpOverlapped=0x0) returned 1 [0114.525] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\bear_formatted_rgb6.wmv", nBufferLength=0x105, lpBuffer=0x12d270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\bear_formatted_rgb6.wmv", lpFilePart=0x0) returned 0x4c [0114.526] SetErrorMode (uMode=0x1) returned 0x0 [0114.528] SetErrorMode (uMode=0x0) returned 0x1 [0114.529] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\Bear_Formatted_RGB6_PAL.wmv", nBufferLength=0x105, lpBuffer=0x12d5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\Bear_Formatted_RGB6_PAL.wmv", lpFilePart=0x0) returned 0x50 [0114.529] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\Bear_Formatted_RGB6_PAL.wmv", nBufferLength=0x105, lpBuffer=0x12d590, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\Bear_Formatted_RGB6_PAL.wmv", lpFilePart=0x0) returned 0x50 [0114.529] SetErrorMode (uMode=0x1) returned 0x0 [0114.529] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\Bear_Formatted_RGB6_PAL.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babygirl\\bear_formatted_rgb6_pal.wmv"), fInfoLevelId=0x0, lpFileInformation=0x12d810 | out: lpFileInformation=0x12d810*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x729635a0, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x729635a0, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4a377d1f, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x41c0a)) returned 1 [0114.530] SetErrorMode (uMode=0x0) returned 0x1 [0114.530] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\Bear_Formatted_RGB6_PAL.wmv", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\Bear_Formatted_RGB6_PAL.wmv", lpFilePart=0x0) returned 0x50 [0114.530] SetErrorMode (uMode=0x1) returned 0x0 [0114.530] SetErrorMode (uMode=0x0) returned 0x1 [0114.530] GetFileType (hFile=0x31c) returned 0x1 [0114.530] GetFileSize (in: hFile=0x31c, lpFileSizeHigh=0x12d8c8 | out: lpFileSizeHigh=0x12d8c8*=0x0) returned 0x41c0a [0114.611] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\Bear_Formatted_RGB6_PAL.wmv", nBufferLength=0x105, lpBuffer=0x12d270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\Bear_Formatted_RGB6_PAL.wmv", lpFilePart=0x0) returned 0x50 [0114.611] SetErrorMode (uMode=0x1) returned 0x0 [0114.613] SetErrorMode (uMode=0x0) returned 0x1 [0114.614] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\btn-back-static.png", nBufferLength=0x105, lpBuffer=0x12d5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\btn-back-static.png", lpFilePart=0x0) returned 0x48 [0114.615] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\btn-back-static.png", nBufferLength=0x105, lpBuffer=0x12d590, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\btn-back-static.png", lpFilePart=0x0) returned 0x48 [0114.615] SetErrorMode (uMode=0x1) returned 0x0 [0114.615] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\btn-back-static.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babygirl\\btn-back-static.png"), fInfoLevelId=0x0, lpFileInformation=0x12d810 | out: lpFileInformation=0x12d810*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x729af85a, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x729af85a, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4a377d1f, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xdc5)) returned 1 [0114.702] SetErrorMode (uMode=0x0) returned 0x1 [0114.702] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\btn-back-static.png", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\btn-back-static.png", lpFilePart=0x0) returned 0x48 [0114.702] SetErrorMode (uMode=0x1) returned 0x0 [0114.703] SetErrorMode (uMode=0x0) returned 0x1 [0114.703] GetFileType (hFile=0x31c) returned 0x1 [0114.703] GetFileSize (in: hFile=0x31c, lpFileSizeHigh=0x12d8c8 | out: lpFileSizeHigh=0x12d8c8*=0x0) returned 0xdc5 [0114.703] ReadFile (in: hFile=0x31c, lpBuffer=0x27a6a38, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12d7a8, lpOverlapped=0x0 | out: lpBuffer=0x27a6a38*, lpNumberOfBytesRead=0x12d7a8*=0xdc5, lpOverlapped=0x0) returned 1 [0114.725] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\btn-back-static.png", nBufferLength=0x105, lpBuffer=0x12d270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\btn-back-static.png", lpFilePart=0x0) returned 0x48 [0114.725] SetErrorMode (uMode=0x1) returned 0x0 [0114.727] SetErrorMode (uMode=0x0) returned 0x1 [0114.728] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\btn-next-static.png", nBufferLength=0x105, lpBuffer=0x12d5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\btn-next-static.png", lpFilePart=0x0) returned 0x48 [0114.729] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\btn-next-static.png", nBufferLength=0x105, lpBuffer=0x12d590, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\btn-next-static.png", lpFilePart=0x0) returned 0x48 [0114.729] SetErrorMode (uMode=0x1) returned 0x0 [0114.729] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\btn-next-static.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babygirl\\btn-next-static.png"), fInfoLevelId=0x0, lpFileInformation=0x12d810 | out: lpFileInformation=0x12d810*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x729af85a, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x729af85a, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4a377d1f, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xdfc)) returned 1 [0114.729] SetErrorMode (uMode=0x0) returned 0x1 [0114.729] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\btn-next-static.png", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\btn-next-static.png", lpFilePart=0x0) returned 0x48 [0114.729] SetErrorMode (uMode=0x1) returned 0x0 [0114.730] SetErrorMode (uMode=0x0) returned 0x1 [0114.730] GetFileType (hFile=0x31c) returned 0x1 [0114.730] GetFileSize (in: hFile=0x31c, lpFileSizeHigh=0x12d8c8 | out: lpFileSizeHigh=0x12d8c8*=0x0) returned 0xdfc [0114.730] ReadFile (in: hFile=0x31c, lpBuffer=0x288e0e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12d7a8, lpOverlapped=0x0 | out: lpBuffer=0x288e0e0*, lpNumberOfBytesRead=0x12d7a8*=0xdfc, lpOverlapped=0x0) returned 1 [0114.758] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\btn-next-static.png", nBufferLength=0x105, lpBuffer=0x12d270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\btn-next-static.png", lpFilePart=0x0) returned 0x48 [0114.758] SetErrorMode (uMode=0x1) returned 0x0 [0114.760] SetErrorMode (uMode=0x0) returned 0x1 [0114.762] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\btn-previous-static.png", nBufferLength=0x105, lpBuffer=0x12d5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\btn-previous-static.png", lpFilePart=0x0) returned 0x4c [0114.762] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\btn-previous-static.png", nBufferLength=0x105, lpBuffer=0x12d590, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\btn-previous-static.png", lpFilePart=0x0) returned 0x4c [0114.762] SetErrorMode (uMode=0x1) returned 0x0 [0114.762] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\btn-previous-static.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babygirl\\btn-previous-static.png"), fInfoLevelId=0x0, lpFileInformation=0x12d810 | out: lpFileInformation=0x12d810*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x729d59b7, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x729d59b7, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4a377d1f, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xe0b)) returned 1 [0114.762] SetErrorMode (uMode=0x0) returned 0x1 [0114.762] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\btn-previous-static.png", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\btn-previous-static.png", lpFilePart=0x0) returned 0x4c [0114.763] SetErrorMode (uMode=0x1) returned 0x0 [0114.763] SetErrorMode (uMode=0x0) returned 0x1 [0114.763] GetFileType (hFile=0x31c) returned 0x1 [0114.763] GetFileSize (in: hFile=0x31c, lpFileSizeHigh=0x12d8c8 | out: lpFileSizeHigh=0x12d8c8*=0x0) returned 0xe0b [0114.763] ReadFile (in: hFile=0x31c, lpBuffer=0x2777298, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12d7a8, lpOverlapped=0x0 | out: lpBuffer=0x2777298*, lpNumberOfBytesRead=0x12d7a8*=0xe0b, lpOverlapped=0x0) returned 1 [0114.831] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\btn-previous-static.png", nBufferLength=0x105, lpBuffer=0x12d270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\btn-previous-static.png", lpFilePart=0x0) returned 0x4c [0114.831] SetErrorMode (uMode=0x1) returned 0x0 [0114.833] SetErrorMode (uMode=0x0) returned 0x1 [0114.834] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\button-highlight.png", nBufferLength=0x105, lpBuffer=0x12d5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\button-highlight.png", lpFilePart=0x0) returned 0x49 [0114.834] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\button-highlight.png", nBufferLength=0x105, lpBuffer=0x12d590, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\button-highlight.png", lpFilePart=0x0) returned 0x49 [0114.834] SetErrorMode (uMode=0x1) returned 0x0 [0114.835] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\button-highlight.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babygirl\\button-highlight.png"), fInfoLevelId=0x0, lpFileInformation=0x12d810 | out: lpFileInformation=0x12d810*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x729d59b7, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x729d59b7, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4a39de7d, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x75d)) returned 1 [0114.835] SetErrorMode (uMode=0x0) returned 0x1 [0114.835] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\button-highlight.png", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\button-highlight.png", lpFilePart=0x0) returned 0x49 [0114.835] SetErrorMode (uMode=0x1) returned 0x0 [0114.835] SetErrorMode (uMode=0x0) returned 0x1 [0114.835] GetFileType (hFile=0x31c) returned 0x1 [0114.835] GetFileSize (in: hFile=0x31c, lpFileSizeHigh=0x12d8c8 | out: lpFileSizeHigh=0x12d8c8*=0x0) returned 0x75d [0114.836] ReadFile (in: hFile=0x31c, lpBuffer=0x285e728, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12d7a8, lpOverlapped=0x0 | out: lpBuffer=0x285e728*, lpNumberOfBytesRead=0x12d7a8*=0x75d, lpOverlapped=0x0) returned 1 [0114.864] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\button-highlight.png", nBufferLength=0x105, lpBuffer=0x12d270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\button-highlight.png", lpFilePart=0x0) returned 0x49 [0114.865] SetErrorMode (uMode=0x1) returned 0x0 [0114.867] SetErrorMode (uMode=0x0) returned 0x1 [0114.868] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\chapters-static.png", nBufferLength=0x105, lpBuffer=0x12d5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\chapters-static.png", lpFilePart=0x0) returned 0x48 [0114.868] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\chapters-static.png", nBufferLength=0x105, lpBuffer=0x12d590, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\chapters-static.png", lpFilePart=0x0) returned 0x48 [0114.868] SetErrorMode (uMode=0x1) returned 0x0 [0114.868] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\chapters-static.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babygirl\\chapters-static.png"), fInfoLevelId=0x0, lpFileInformation=0x12d810 | out: lpFileInformation=0x12d810*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x729d59b7, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x729d59b7, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4a39de7d, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x55f)) returned 1 [0114.934] SetErrorMode (uMode=0x0) returned 0x1 [0114.935] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\chapters-static.png", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\chapters-static.png", lpFilePart=0x0) returned 0x48 [0114.935] SetErrorMode (uMode=0x1) returned 0x0 [0114.935] SetErrorMode (uMode=0x0) returned 0x1 [0114.935] GetFileType (hFile=0x31c) returned 0x1 [0114.935] GetFileSize (in: hFile=0x31c, lpFileSizeHigh=0x12d8c8 | out: lpFileSizeHigh=0x12d8c8*=0x0) returned 0x55f [0114.935] ReadFile (in: hFile=0x31c, lpBuffer=0x2742228, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12d7a8, lpOverlapped=0x0 | out: lpBuffer=0x2742228*, lpNumberOfBytesRead=0x12d7a8*=0x55f, lpOverlapped=0x0) returned 1 [0114.957] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\chapters-static.png", nBufferLength=0x105, lpBuffer=0x12d270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\chapters-static.png", lpFilePart=0x0) returned 0x48 [0114.957] SetErrorMode (uMode=0x1) returned 0x0 [0114.960] SetErrorMode (uMode=0x0) returned 0x1 [0114.961] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\content-background.png", nBufferLength=0x105, lpBuffer=0x12d5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\content-background.png", lpFilePart=0x0) returned 0x4b [0114.961] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\content-background.png", nBufferLength=0x105, lpBuffer=0x12d590, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\content-background.png", lpFilePart=0x0) returned 0x4b [0114.961] SetErrorMode (uMode=0x1) returned 0x0 [0114.962] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\content-background.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babygirl\\content-background.png"), fInfoLevelId=0x0, lpFileInformation=0x12d810 | out: lpFileInformation=0x12d810*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x729fbb14, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x729fbb14, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4aba6851, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x8df12)) returned 1 [0114.962] SetErrorMode (uMode=0x0) returned 0x1 [0114.962] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\content-background.png", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\content-background.png", lpFilePart=0x0) returned 0x4b [0114.962] SetErrorMode (uMode=0x1) returned 0x0 [0114.962] SetErrorMode (uMode=0x0) returned 0x1 [0114.962] GetFileType (hFile=0x31c) returned 0x1 [0114.963] GetFileSize (in: hFile=0x31c, lpFileSizeHigh=0x12d8c8 | out: lpFileSizeHigh=0x12d8c8*=0x0) returned 0x8df12 [0114.965] ReadFile (in: hFile=0x31c, lpBuffer=0x1299f108, nNumberOfBytesToRead=0x8df12, lpNumberOfBytesRead=0x12d7a8, lpOverlapped=0x0 | out: lpBuffer=0x1299f108*, lpNumberOfBytesRead=0x12d7a8*=0x8df12, lpOverlapped=0x0) returned 1 [0115.065] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\content-background.png", nBufferLength=0x105, lpBuffer=0x12d270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\content-background.png", lpFilePart=0x0) returned 0x4b [0115.065] SetErrorMode (uMode=0x1) returned 0x0 [0115.067] SetErrorMode (uMode=0x0) returned 0x1 [0115.068] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\content-foreground.png", nBufferLength=0x105, lpBuffer=0x12d5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\content-foreground.png", lpFilePart=0x0) returned 0x4b [0115.068] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\content-foreground.png", nBufferLength=0x105, lpBuffer=0x12d590, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\content-foreground.png", lpFilePart=0x0) returned 0x4b [0115.068] SetErrorMode (uMode=0x1) returned 0x0 [0115.068] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\content-foreground.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babygirl\\content-foreground.png"), fInfoLevelId=0x0, lpFileInformation=0x12d810 | out: lpFileInformation=0x12d810*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72a47dce, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x72a47dce, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4b362f69, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc2f0)) returned 1 [0115.069] SetErrorMode (uMode=0x0) returned 0x1 [0115.069] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\content-foreground.png", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\content-foreground.png", lpFilePart=0x0) returned 0x4b [0115.069] SetErrorMode (uMode=0x1) returned 0x0 [0115.069] SetErrorMode (uMode=0x0) returned 0x1 [0115.069] GetFileType (hFile=0x31c) returned 0x1 [0115.069] GetFileSize (in: hFile=0x31c, lpFileSizeHigh=0x12d8c8 | out: lpFileSizeHigh=0x12d8c8*=0x0) returned 0xc2f0 [0115.069] ReadFile (in: hFile=0x31c, lpBuffer=0x2706fa0, nNumberOfBytesToRead=0xc2f0, lpNumberOfBytesRead=0x12d7a8, lpOverlapped=0x0 | out: lpBuffer=0x2706fa0*, lpNumberOfBytesRead=0x12d7a8*=0xc2f0, lpOverlapped=0x0) returned 1 [0115.092] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\content-foreground.png", nBufferLength=0x105, lpBuffer=0x12d270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\content-foreground.png", lpFilePart=0x0) returned 0x4b [0115.092] SetErrorMode (uMode=0x1) returned 0x0 [0115.094] SetErrorMode (uMode=0x0) returned 0x1 [0115.095] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\curtains.png", nBufferLength=0x105, lpBuffer=0x12d5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\curtains.png", lpFilePart=0x0) returned 0x41 [0115.095] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\curtains.png", nBufferLength=0x105, lpBuffer=0x12d590, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\curtains.png", lpFilePart=0x0) returned 0x41 [0115.095] SetErrorMode (uMode=0x1) returned 0x0 [0115.096] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\curtains.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babygirl\\curtains.png"), fInfoLevelId=0x0, lpFileInformation=0x12d810 | out: lpFileInformation=0x12d810*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72a6df2b, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x72a6df2b, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4b362f69, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xb8c4)) returned 1 [0115.096] SetErrorMode (uMode=0x0) returned 0x1 [0115.096] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\curtains.png", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\curtains.png", lpFilePart=0x0) returned 0x41 [0115.096] SetErrorMode (uMode=0x1) returned 0x0 [0115.096] SetErrorMode (uMode=0x0) returned 0x1 [0115.096] GetFileType (hFile=0x31c) returned 0x1 [0115.096] GetFileSize (in: hFile=0x31c, lpFileSizeHigh=0x12d8c8 | out: lpFileSizeHigh=0x12d8c8*=0x0) returned 0xb8c4 [0115.096] ReadFile (in: hFile=0x31c, lpBuffer=0x2819200, nNumberOfBytesToRead=0xb8c4, lpNumberOfBytesRead=0x12d7a8, lpOverlapped=0x0 | out: lpBuffer=0x2819200*, lpNumberOfBytesRead=0x12d7a8*=0xb8c4, lpOverlapped=0x0) returned 1 [0115.122] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\curtains.png", nBufferLength=0x105, lpBuffer=0x12d270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\curtains.png", lpFilePart=0x0) returned 0x41 [0115.122] SetErrorMode (uMode=0x1) returned 0x0 [0115.124] SetErrorMode (uMode=0x0) returned 0x1 [0115.125] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\flower_precomp_matte.wmv", nBufferLength=0x105, lpBuffer=0x12d5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\flower_precomp_matte.wmv", lpFilePart=0x0) returned 0x4d [0115.125] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\flower_precomp_matte.wmv", nBufferLength=0x105, lpBuffer=0x12d590, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\flower_precomp_matte.wmv", lpFilePart=0x0) returned 0x4d [0115.125] SetErrorMode (uMode=0x1) returned 0x0 [0115.125] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\flower_precomp_matte.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babygirl\\flower_precomp_matte.wmv"), fInfoLevelId=0x0, lpFileInformation=0x12d810 | out: lpFileInformation=0x12d810*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72b52759, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x72b52759, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4b3fb4e1, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x12d98)) returned 1 [0115.126] SetErrorMode (uMode=0x0) returned 0x1 [0115.126] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\flower_precomp_matte.wmv", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\flower_precomp_matte.wmv", lpFilePart=0x0) returned 0x4d [0115.126] SetErrorMode (uMode=0x1) returned 0x0 [0115.127] SetErrorMode (uMode=0x0) returned 0x1 [0115.127] GetFileType (hFile=0x31c) returned 0x1 [0115.127] GetFileSize (in: hFile=0x31c, lpFileSizeHigh=0x12d8c8 | out: lpFileSizeHigh=0x12d8c8*=0x0) returned 0x12d98 [0115.127] ReadFile (in: hFile=0x31c, lpBuffer=0x2734ca8, nNumberOfBytesToRead=0x12d98, lpNumberOfBytesRead=0x12d7a8, lpOverlapped=0x0 | out: lpBuffer=0x2734ca8*, lpNumberOfBytesRead=0x12d7a8*=0x12d98, lpOverlapped=0x0) returned 1 [0115.145] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\flower_precomp_matte.wmv", nBufferLength=0x105, lpBuffer=0x12d270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\flower_precomp_matte.wmv", lpFilePart=0x0) returned 0x4d [0115.145] SetErrorMode (uMode=0x1) returned 0x0 [0115.148] SetErrorMode (uMode=0x0) returned 0x1 [0115.149] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\flower_PreComp_MATTE_PAL.wmv", nBufferLength=0x105, lpBuffer=0x12d5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\flower_PreComp_MATTE_PAL.wmv", lpFilePart=0x0) returned 0x51 [0115.149] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\flower_PreComp_MATTE_PAL.wmv", nBufferLength=0x105, lpBuffer=0x12d590, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\flower_PreComp_MATTE_PAL.wmv", lpFilePart=0x0) returned 0x51 [0115.149] SetErrorMode (uMode=0x1) returned 0x0 [0115.150] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\flower_PreComp_MATTE_PAL.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babygirl\\flower_precomp_matte_pal.wmv"), fInfoLevelId=0x0, lpFileInformation=0x12d810 | out: lpFileInformation=0x12d810*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72b52759, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x72b52759, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4b3fb4e1, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x14cd8)) returned 1 [0115.150] SetErrorMode (uMode=0x0) returned 0x1 [0115.150] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\flower_PreComp_MATTE_PAL.wmv", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\flower_PreComp_MATTE_PAL.wmv", lpFilePart=0x0) returned 0x51 [0115.150] SetErrorMode (uMode=0x1) returned 0x0 [0115.150] SetErrorMode (uMode=0x0) returned 0x1 [0115.151] GetFileType (hFile=0x31c) returned 0x1 [0115.151] GetFileSize (in: hFile=0x31c, lpFileSizeHigh=0x12d8c8 | out: lpFileSizeHigh=0x12d8c8*=0x0) returned 0x14cd8 [0115.175] ReadFile (in: hFile=0x31c, lpBuffer=0x12680ba0, nNumberOfBytesToRead=0x14cd8, lpNumberOfBytesRead=0x12d7a8, lpOverlapped=0x0 | out: lpBuffer=0x12680ba0*, lpNumberOfBytesRead=0x12d7a8*=0x14cd8, lpOverlapped=0x0) returned 1 [0115.209] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\flower_PreComp_MATTE_PAL.wmv", nBufferLength=0x105, lpBuffer=0x12d270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\flower_PreComp_MATTE_PAL.wmv", lpFilePart=0x0) returned 0x51 [0115.209] SetErrorMode (uMode=0x1) returned 0x0 [0115.212] SetErrorMode (uMode=0x0) returned 0x1 [0115.213] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\flower_trans_matte.wmv", nBufferLength=0x105, lpBuffer=0x12d5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\flower_trans_matte.wmv", lpFilePart=0x0) returned 0x4b [0115.213] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\flower_trans_matte.wmv", nBufferLength=0x105, lpBuffer=0x12d590, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\flower_trans_matte.wmv", lpFilePart=0x0) returned 0x4b [0115.214] SetErrorMode (uMode=0x1) returned 0x0 [0115.214] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\flower_trans_matte.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babygirl\\flower_trans_matte.wmv"), fInfoLevelId=0x0, lpFileInformation=0x12d810 | out: lpFileInformation=0x12d810*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72b788b6, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x72b788b6, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4b42163f, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x26618)) returned 1 [0115.214] SetErrorMode (uMode=0x0) returned 0x1 [0115.214] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\flower_trans_matte.wmv", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\flower_trans_matte.wmv", lpFilePart=0x0) returned 0x4b [0115.214] SetErrorMode (uMode=0x1) returned 0x0 [0115.215] SetErrorMode (uMode=0x0) returned 0x1 [0115.215] GetFileType (hFile=0x31c) returned 0x1 [0115.215] GetFileSize (in: hFile=0x31c, lpFileSizeHigh=0x12d8c8 | out: lpFileSizeHigh=0x12d8c8*=0x0) returned 0x26618 [0115.216] ReadFile (in: hFile=0x31c, lpBuffer=0x126fd988, nNumberOfBytesToRead=0x26618, lpNumberOfBytesRead=0x12d7a8, lpOverlapped=0x0 | out: lpBuffer=0x126fd988*, lpNumberOfBytesRead=0x12d7a8*=0x26618, lpOverlapped=0x0) returned 1 [0115.261] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\flower_trans_matte.wmv", nBufferLength=0x105, lpBuffer=0x12d270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\flower_trans_matte.wmv", lpFilePart=0x0) returned 0x4b [0115.261] SetErrorMode (uMode=0x1) returned 0x0 [0115.264] SetErrorMode (uMode=0x0) returned 0x1 [0115.265] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\flower_trans_MATTE_PAL.wmv", nBufferLength=0x105, lpBuffer=0x12d5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\flower_trans_MATTE_PAL.wmv", lpFilePart=0x0) returned 0x4f [0115.266] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\flower_trans_MATTE_PAL.wmv", nBufferLength=0x105, lpBuffer=0x12d590, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\flower_trans_MATTE_PAL.wmv", lpFilePart=0x0) returned 0x4f [0115.266] SetErrorMode (uMode=0x1) returned 0x0 [0115.266] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\flower_trans_MATTE_PAL.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babygirl\\flower_trans_matte_pal.wmv"), fInfoLevelId=0x0, lpFileInformation=0x12d810 | out: lpFileInformation=0x12d810*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72b9ea13, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x72b9ea13, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4b42163f, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x28558)) returned 1 [0115.266] SetErrorMode (uMode=0x0) returned 0x1 [0115.266] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\flower_trans_MATTE_PAL.wmv", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\flower_trans_MATTE_PAL.wmv", lpFilePart=0x0) returned 0x4f [0115.267] SetErrorMode (uMode=0x1) returned 0x0 [0115.267] SetErrorMode (uMode=0x0) returned 0x1 [0115.267] GetFileType (hFile=0x31c) returned 0x1 [0115.267] GetFileSize (in: hFile=0x31c, lpFileSizeHigh=0x12d8c8 | out: lpFileSizeHigh=0x12d8c8*=0x0) returned 0x28558 [0115.268] ReadFile (in: hFile=0x31c, lpBuffer=0x127e3ef0, nNumberOfBytesToRead=0x28558, lpNumberOfBytesRead=0x12d7a8, lpOverlapped=0x0 | out: lpBuffer=0x127e3ef0*, lpNumberOfBytesRead=0x12d7a8*=0x28558, lpOverlapped=0x0) returned 1 [0115.322] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\flower_trans_MATTE_PAL.wmv", nBufferLength=0x105, lpBuffer=0x12d270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\flower_trans_MATTE_PAL.wmv", lpFilePart=0x0) returned 0x4f [0115.323] SetErrorMode (uMode=0x1) returned 0x0 [0115.327] SetErrorMode (uMode=0x0) returned 0x1 [0115.330] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\flower_trans_rgb.wmv", nBufferLength=0x105, lpBuffer=0x12d5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\flower_trans_rgb.wmv", lpFilePart=0x0) returned 0x49 [0115.330] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\flower_trans_rgb.wmv", nBufferLength=0x105, lpBuffer=0x12d590, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\flower_trans_rgb.wmv", lpFilePart=0x0) returned 0x49 [0115.330] SetErrorMode (uMode=0x1) returned 0x0 [0115.331] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\flower_trans_rgb.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babygirl\\flower_trans_rgb.wmv"), fInfoLevelId=0x0, lpFileInformation=0x12d810 | out: lpFileInformation=0x12d810*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72b0649f, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x72b0649f, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4b44779d, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x2e31e)) returned 1 [0115.332] SetErrorMode (uMode=0x0) returned 0x1 [0115.332] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\flower_trans_rgb.wmv", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\flower_trans_rgb.wmv", lpFilePart=0x0) returned 0x49 [0115.332] SetErrorMode (uMode=0x1) returned 0x0 [0115.332] SetErrorMode (uMode=0x0) returned 0x1 [0115.333] GetFileType (hFile=0x31c) returned 0x1 [0115.333] GetFileSize (in: hFile=0x31c, lpFileSizeHigh=0x12d8c8 | out: lpFileSizeHigh=0x12d8c8*=0x0) returned 0x2e31e [0115.334] ReadFile (in: hFile=0x31c, lpBuffer=0x128d5fd8, nNumberOfBytesToRead=0x2e31e, lpNumberOfBytesRead=0x12d7a8, lpOverlapped=0x0 | out: lpBuffer=0x128d5fd8*, lpNumberOfBytesRead=0x12d7a8*=0x2e31e, lpOverlapped=0x0) returned 1 [0115.394] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\flower_trans_rgb.wmv", nBufferLength=0x105, lpBuffer=0x12d270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\flower_trans_rgb.wmv", lpFilePart=0x0) returned 0x49 [0115.394] SetErrorMode (uMode=0x1) returned 0x0 [0115.396] SetErrorMode (uMode=0x0) returned 0x1 [0115.398] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\flower_trans_RGB_PAL.wmv", nBufferLength=0x105, lpBuffer=0x12d5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\flower_trans_RGB_PAL.wmv", lpFilePart=0x0) returned 0x4d [0115.398] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\flower_trans_RGB_PAL.wmv", nBufferLength=0x105, lpBuffer=0x12d590, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\flower_trans_RGB_PAL.wmv", lpFilePart=0x0) returned 0x4d [0115.398] SetErrorMode (uMode=0x1) returned 0x0 [0115.398] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\flower_trans_RGB_PAL.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babygirl\\flower_trans_rgb_pal.wmv"), fInfoLevelId=0x0, lpFileInformation=0x12d810 | out: lpFileInformation=0x12d810*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72b2c5fc, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x72b2c5fc, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4b5c4549, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x39e98)) returned 1 [0115.398] SetErrorMode (uMode=0x0) returned 0x1 [0115.399] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\flower_trans_RGB_PAL.wmv", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\flower_trans_RGB_PAL.wmv", lpFilePart=0x0) returned 0x4d [0115.399] SetErrorMode (uMode=0x1) returned 0x0 [0115.399] SetErrorMode (uMode=0x0) returned 0x1 [0115.399] GetFileType (hFile=0x31c) returned 0x1 [0115.399] GetFileSize (in: hFile=0x31c, lpFileSizeHigh=0x12d8c8 | out: lpFileSizeHigh=0x12d8c8*=0x0) returned 0x39e98 [0115.402] ReadFile (in: hFile=0x31c, lpBuffer=0x126aeef0, nNumberOfBytesToRead=0x39e98, lpNumberOfBytesRead=0x12d7a8, lpOverlapped=0x0 | out: lpBuffer=0x126aeef0*, lpNumberOfBytesRead=0x12d7a8*=0x39e98, lpOverlapped=0x0) returned 1 [0115.444] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\flower_trans_RGB_PAL.wmv", nBufferLength=0x105, lpBuffer=0x12d270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\flower_trans_RGB_PAL.wmv", lpFilePart=0x0) returned 0x4d [0115.444] SetErrorMode (uMode=0x1) returned 0x0 [0115.446] SetErrorMode (uMode=0x0) returned 0x1 [0115.448] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\highlight.png", nBufferLength=0x105, lpBuffer=0x12d5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\highlight.png", lpFilePart=0x0) returned 0x42 [0115.448] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\highlight.png", nBufferLength=0x105, lpBuffer=0x12d590, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\highlight.png", lpFilePart=0x0) returned 0x42 [0115.448] SetErrorMode (uMode=0x1) returned 0x0 [0115.448] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\highlight.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babygirl\\highlight.png"), fInfoLevelId=0x0, lpFileInformation=0x12d810 | out: lpFileInformation=0x12d810*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72a94088, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x72a94088, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4b5c4549, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x609)) returned 1 [0115.449] SetErrorMode (uMode=0x0) returned 0x1 [0115.449] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\highlight.png", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\highlight.png", lpFilePart=0x0) returned 0x42 [0115.449] SetErrorMode (uMode=0x1) returned 0x0 [0115.449] SetErrorMode (uMode=0x0) returned 0x1 [0115.449] GetFileType (hFile=0x31c) returned 0x1 [0115.449] GetFileSize (in: hFile=0x31c, lpFileSizeHigh=0x12d8c8 | out: lpFileSizeHigh=0x12d8c8*=0x0) returned 0x609 [0115.449] ReadFile (in: hFile=0x31c, lpBuffer=0x27a5d40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12d7a8, lpOverlapped=0x0 | out: lpBuffer=0x27a5d40*, lpNumberOfBytesRead=0x12d7a8*=0x609, lpOverlapped=0x0) returned 1 [0115.473] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\highlight.png", nBufferLength=0x105, lpBuffer=0x12d270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\highlight.png", lpFilePart=0x0) returned 0x42 [0115.473] SetErrorMode (uMode=0x1) returned 0x0 [0115.475] SetErrorMode (uMode=0x0) returned 0x1 [0115.477] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\mainimage-mask.png", nBufferLength=0x105, lpBuffer=0x12d5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\mainimage-mask.png", lpFilePart=0x0) returned 0x47 [0115.477] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\mainimage-mask.png", nBufferLength=0x105, lpBuffer=0x12d590, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\mainimage-mask.png", lpFilePart=0x0) returned 0x47 [0115.477] SetErrorMode (uMode=0x1) returned 0x0 [0115.477] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\mainimage-mask.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babygirl\\mainimage-mask.png"), fInfoLevelId=0x0, lpFileInformation=0x12d810 | out: lpFileInformation=0x12d810*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72aba1e5, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x72aba1e5, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4b5ea6a7, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x239b)) returned 1 [0115.478] SetErrorMode (uMode=0x0) returned 0x1 [0115.478] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\mainimage-mask.png", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\mainimage-mask.png", lpFilePart=0x0) returned 0x47 [0115.478] SetErrorMode (uMode=0x1) returned 0x0 [0115.478] SetErrorMode (uMode=0x0) returned 0x1 [0115.478] GetFileType (hFile=0x31c) returned 0x1 [0115.478] GetFileSize (in: hFile=0x31c, lpFileSizeHigh=0x12d8c8 | out: lpFileSizeHigh=0x12d8c8*=0x0) returned 0x239b [0115.478] ReadFile (in: hFile=0x31c, lpBuffer=0x2889eb0, nNumberOfBytesToRead=0x239b, lpNumberOfBytesRead=0x12d7a8, lpOverlapped=0x0 | out: lpBuffer=0x2889eb0*, lpNumberOfBytesRead=0x12d7a8*=0x239b, lpOverlapped=0x0) returned 1 [0115.507] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\mainimage-mask.png", nBufferLength=0x105, lpBuffer=0x12d270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\mainimage-mask.png", lpFilePart=0x0) returned 0x47 [0115.507] SetErrorMode (uMode=0x1) returned 0x0 [0115.509] SetErrorMode (uMode=0x0) returned 0x1 [0115.511] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\notes-static.png", nBufferLength=0x105, lpBuffer=0x12d5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\notes-static.png", lpFilePart=0x0) returned 0x45 [0115.511] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\notes-static.png", nBufferLength=0x105, lpBuffer=0x12d590, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\notes-static.png", lpFilePart=0x0) returned 0x45 [0115.511] SetErrorMode (uMode=0x1) returned 0x0 [0115.511] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\notes-static.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babygirl\\notes-static.png"), fInfoLevelId=0x0, lpFileInformation=0x12d810 | out: lpFileInformation=0x12d810*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72ae0342, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x72ae0342, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4b5ea6a7, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x559)) returned 1 [0115.512] SetErrorMode (uMode=0x0) returned 0x1 [0115.512] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\notes-static.png", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\notes-static.png", lpFilePart=0x0) returned 0x45 [0115.513] SetErrorMode (uMode=0x1) returned 0x0 [0115.513] SetErrorMode (uMode=0x0) returned 0x1 [0115.513] GetFileType (hFile=0x31c) returned 0x1 [0115.513] GetFileSize (in: hFile=0x31c, lpFileSizeHigh=0x12d8c8 | out: lpFileSizeHigh=0x12d8c8*=0x0) returned 0x559 [0115.513] ReadFile (in: hFile=0x31c, lpBuffer=0x277bcd0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12d7a8, lpOverlapped=0x0 | out: lpBuffer=0x277bcd0*, lpNumberOfBytesRead=0x12d7a8*=0x559, lpOverlapped=0x0) returned 1 [0115.537] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\notes-static.png", nBufferLength=0x105, lpBuffer=0x12d270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\notes-static.png", lpFilePart=0x0) returned 0x45 [0115.537] SetErrorMode (uMode=0x1) returned 0x0 [0115.539] SetErrorMode (uMode=0x0) returned 0x1 [0115.540] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\play-static.png", nBufferLength=0x105, lpBuffer=0x12d5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\play-static.png", lpFilePart=0x0) returned 0x44 [0115.541] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\play-static.png", nBufferLength=0x105, lpBuffer=0x12d590, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\play-static.png", lpFilePart=0x0) returned 0x44 [0115.541] SetErrorMode (uMode=0x1) returned 0x0 [0115.541] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\play-static.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babygirl\\play-static.png"), fInfoLevelId=0x0, lpFileInformation=0x12d810 | out: lpFileInformation=0x12d810*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72ae0342, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x72ae0342, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4b5ea6a7, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x505)) returned 1 [0115.541] SetErrorMode (uMode=0x0) returned 0x1 [0115.541] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\play-static.png", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\play-static.png", lpFilePart=0x0) returned 0x44 [0115.541] SetErrorMode (uMode=0x1) returned 0x0 [0115.542] SetErrorMode (uMode=0x0) returned 0x1 [0115.542] GetFileType (hFile=0x31c) returned 0x1 [0115.542] GetFileSize (in: hFile=0x31c, lpFileSizeHigh=0x12d8c8 | out: lpFileSizeHigh=0x12d8c8*=0x0) returned 0x505 [0115.542] ReadFile (in: hFile=0x31c, lpBuffer=0x2860318, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12d7a8, lpOverlapped=0x0 | out: lpBuffer=0x2860318*, lpNumberOfBytesRead=0x12d7a8*=0x505, lpOverlapped=0x0) returned 1 [0115.571] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\play-static.png", nBufferLength=0x105, lpBuffer=0x12d270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\play-static.png", lpFilePart=0x0) returned 0x44 [0115.571] SetErrorMode (uMode=0x1) returned 0x0 [0115.573] SetErrorMode (uMode=0x0) returned 0x1 [0115.574] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\Decrypt Instructions.txt", nBufferLength=0x105, lpBuffer=0x12d240, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\Decrypt Instructions.txt", lpFilePart=0x0) returned 0x4d [0115.574] SetErrorMode (uMode=0x1) returned 0x0 [0115.575] SetErrorMode (uMode=0x0) returned 0x1 [0115.575] GetFileType (hFile=0x31c) returned 0x1 [0115.576] WriteFile (in: hFile=0x31c, lpBuffer=0x27446f8*, nNumberOfBytesToWrite=0x773, lpNumberOfBytesWritten=0x12d7a8, lpOverlapped=0x0 | out: lpBuffer=0x27446f8*, lpNumberOfBytesWritten=0x12d7a8*=0x773, lpOverlapped=0x0) returned 1 [0115.577] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl", nBufferLength=0x105, lpBuffer=0x12d430, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl", lpFilePart=0x0) returned 0x34 [0115.578] SetErrorMode (uMode=0x1) returned 0x0 [0115.578] FindFirstFileW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\*", lpFindFileData=0x12d5d0 | out: lpFindFileData=0x12d5d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa12338ef, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x64f34c70, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x64f34c70, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x26bc80 [0115.578] FindClose (in: hFindFile=0x26bc80 | out: hFindFile=0x26bc80) returned 1 [0115.578] SetErrorMode (uMode=0x0) returned 0x1 [0115.578] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\FlipPage", nBufferLength=0x105, lpBuffer=0x12d390, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\FlipPage", lpFilePart=0x0) returned 0x34 [0115.578] SetErrorMode (uMode=0x1) returned 0x0 [0115.578] FindFirstFileW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\FlipPage\\*", lpFindFileData=0x12d530 | out: lpFindFileData=0x12d530*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9f43efc8, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa7fa6b2, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9f465237, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x26bc80 [0115.581] FindClose (in: hFindFile=0x26bc80 | out: hFindFile=0x26bc80) returned 1 [0115.582] SetErrorMode (uMode=0x0) returned 0x1 [0115.582] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\FlipPage\\1047x576black.png", nBufferLength=0x105, lpBuffer=0x12d5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\FlipPage\\1047x576black.png", lpFilePart=0x0) returned 0x46 [0115.583] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\FlipPage\\1047x576black.png", nBufferLength=0x105, lpBuffer=0x12d590, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\FlipPage\\1047x576black.png", lpFilePart=0x0) returned 0x46 [0115.583] SetErrorMode (uMode=0x1) returned 0x0 [0115.583] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\FlipPage\\1047x576black.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\flippage\\1047x576black.png"), fInfoLevelId=0x0, lpFileInformation=0x12d810 | out: lpFileInformation=0x12d810*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fe188e9, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6fe188e9, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d019747, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x11da)) returned 1 [0115.585] SetErrorMode (uMode=0x0) returned 0x1 [0115.585] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\FlipPage\\1047x576black.png", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\FlipPage\\1047x576black.png", lpFilePart=0x0) returned 0x46 [0115.585] SetErrorMode (uMode=0x1) returned 0x0 [0115.585] SetErrorMode (uMode=0x0) returned 0x1 [0115.585] GetFileType (hFile=0x31c) returned 0x1 [0115.586] GetFileSize (in: hFile=0x31c, lpFileSizeHigh=0x12d8c8 | out: lpFileSizeHigh=0x12d8c8*=0x0) returned 0x11da [0115.586] ReadFile (in: hFile=0x31c, lpBuffer=0x2749028, nNumberOfBytesToRead=0x11da, lpNumberOfBytesRead=0x12d7a8, lpOverlapped=0x0 | out: lpBuffer=0x2749028*, lpNumberOfBytesRead=0x12d7a8*=0x11da, lpOverlapped=0x0) returned 1 [0115.609] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\FlipPage\\1047x576black.png", nBufferLength=0x105, lpBuffer=0x12d270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\FlipPage\\1047x576black.png", lpFilePart=0x0) returned 0x46 [0115.609] SetErrorMode (uMode=0x1) returned 0x0 [0115.611] SetErrorMode (uMode=0x0) returned 0x1 [0115.613] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\FlipPage\\203x8subpicture.png", nBufferLength=0x105, lpBuffer=0x12d5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\FlipPage\\203x8subpicture.png", lpFilePart=0x0) returned 0x48 [0115.613] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\FlipPage\\203x8subpicture.png", nBufferLength=0x105, lpBuffer=0x12d590, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\FlipPage\\203x8subpicture.png", lpFilePart=0x0) returned 0x48 [0115.613] SetErrorMode (uMode=0x1) returned 0x0 [0115.613] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\FlipPage\\203x8subpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\flippage\\203x8subpicture.png"), fInfoLevelId=0x0, lpFileInformation=0x12d810 | out: lpFileInformation=0x12d810*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fe3ea46, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6fe3ea46, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d019747, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xb04)) returned 1 [0115.614] SetErrorMode (uMode=0x0) returned 0x1 [0115.614] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\FlipPage\\203x8subpicture.png", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\FlipPage\\203x8subpicture.png", lpFilePart=0x0) returned 0x48 [0115.615] SetErrorMode (uMode=0x1) returned 0x0 [0115.615] SetErrorMode (uMode=0x0) returned 0x1 [0115.615] GetFileType (hFile=0x31c) returned 0x1 [0115.615] GetFileSize (in: hFile=0x31c, lpFileSizeHigh=0x12d8c8 | out: lpFileSizeHigh=0x12d8c8*=0x0) returned 0xb04 [0115.615] ReadFile (in: hFile=0x31c, lpBuffer=0x2831d00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12d7a8, lpOverlapped=0x0 | out: lpBuffer=0x2831d00*, lpNumberOfBytesRead=0x12d7a8*=0xb04, lpOverlapped=0x0) returned 1 [0115.724] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\FlipPage\\203x8subpicture.png", nBufferLength=0x105, lpBuffer=0x12d270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\FlipPage\\203x8subpicture.png", lpFilePart=0x0) returned 0x48 [0115.725] SetErrorMode (uMode=0x1) returned 0x0 [0115.726] SetErrorMode (uMode=0x0) returned 0x1 [0115.728] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\FlipPage\\NavigationLeft_ButtonGraphic.png", nBufferLength=0x105, lpBuffer=0x12d5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\FlipPage\\NavigationLeft_ButtonGraphic.png", lpFilePart=0x0) returned 0x55 [0115.728] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\FlipPage\\NavigationLeft_ButtonGraphic.png", nBufferLength=0x105, lpBuffer=0x12d590, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\FlipPage\\NavigationLeft_ButtonGraphic.png", lpFilePart=0x0) returned 0x55 [0115.728] SetErrorMode (uMode=0x1) returned 0x0 [0115.728] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\FlipPage\\NavigationLeft_ButtonGraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\flippage\\navigationleft_buttongraphic.png"), fInfoLevelId=0x0, lpFileInformation=0x12d810 | out: lpFileInformation=0x12d810*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fed6fba, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6fed6fba, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d019747, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13e0)) returned 1 [0115.728] SetErrorMode (uMode=0x0) returned 0x1 [0115.729] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\FlipPage\\NavigationLeft_ButtonGraphic.png", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\FlipPage\\NavigationLeft_ButtonGraphic.png", lpFilePart=0x0) returned 0x55 [0115.729] SetErrorMode (uMode=0x1) returned 0x0 [0115.729] SetErrorMode (uMode=0x0) returned 0x1 [0115.729] GetFileType (hFile=0x31c) returned 0x1 [0115.729] GetFileSize (in: hFile=0x31c, lpFileSizeHigh=0x12d8c8 | out: lpFileSizeHigh=0x12d8c8*=0x0) returned 0x13e0 [0115.729] ReadFile (in: hFile=0x31c, lpBuffer=0x271a768, nNumberOfBytesToRead=0x13e0, lpNumberOfBytesRead=0x12d7a8, lpOverlapped=0x0 | out: lpBuffer=0x271a768*, lpNumberOfBytesRead=0x12d7a8*=0x13e0, lpOverlapped=0x0) returned 1 [0115.759] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\FlipPage\\NavigationLeft_ButtonGraphic.png", nBufferLength=0x105, lpBuffer=0x12d270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\FlipPage\\NavigationLeft_ButtonGraphic.png", lpFilePart=0x0) returned 0x55 [0115.759] SetErrorMode (uMode=0x1) returned 0x0 [0115.761] SetErrorMode (uMode=0x0) returned 0x1 [0115.762] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\FlipPage\\NavigationLeft_SelectionSubpicture.png", nBufferLength=0x105, lpBuffer=0x12d5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\FlipPage\\NavigationLeft_SelectionSubpicture.png", lpFilePart=0x0) returned 0x5b [0115.763] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\FlipPage\\NavigationLeft_SelectionSubpicture.png", nBufferLength=0x105, lpBuffer=0x12d590, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\FlipPage\\NavigationLeft_SelectionSubpicture.png", lpFilePart=0x0) returned 0x5b [0115.763] SetErrorMode (uMode=0x1) returned 0x0 [0115.763] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\FlipPage\\NavigationLeft_SelectionSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\flippage\\navigationleft_selectionsubpicture.png"), fInfoLevelId=0x0, lpFileInformation=0x12d810 | out: lpFileInformation=0x12d810*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6feb0e5d, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6feb0e5d, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d019747, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc3a)) returned 1 [0115.763] SetErrorMode (uMode=0x0) returned 0x1 [0115.763] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\FlipPage\\NavigationLeft_SelectionSubpicture.png", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\FlipPage\\NavigationLeft_SelectionSubpicture.png", lpFilePart=0x0) returned 0x5b [0115.764] SetErrorMode (uMode=0x1) returned 0x0 [0115.764] SetErrorMode (uMode=0x0) returned 0x1 [0115.764] GetFileType (hFile=0x31c) returned 0x1 [0115.764] GetFileSize (in: hFile=0x31c, lpFileSizeHigh=0x12d8c8 | out: lpFileSizeHigh=0x12d8c8*=0x0) returned 0xc3a [0115.764] ReadFile (in: hFile=0x31c, lpBuffer=0x2804318, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12d7a8, lpOverlapped=0x0 | out: lpBuffer=0x2804318*, lpNumberOfBytesRead=0x12d7a8*=0xc3a, lpOverlapped=0x0) returned 1 [0115.794] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\FlipPage\\NavigationLeft_SelectionSubpicture.png", nBufferLength=0x105, lpBuffer=0x12d270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\FlipPage\\NavigationLeft_SelectionSubpicture.png", lpFilePart=0x0) returned 0x5b [0115.794] SetErrorMode (uMode=0x1) returned 0x0 [0115.796] SetErrorMode (uMode=0x0) returned 0x1 [0115.797] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\FlipPage\\NavigationRight_ButtonGraphic.png", nBufferLength=0x105, lpBuffer=0x12d5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\FlipPage\\NavigationRight_ButtonGraphic.png", lpFilePart=0x0) returned 0x56 [0115.797] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\FlipPage\\NavigationRight_ButtonGraphic.png", nBufferLength=0x105, lpBuffer=0x12d590, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\FlipPage\\NavigationRight_ButtonGraphic.png", lpFilePart=0x0) returned 0x56 [0115.798] SetErrorMode (uMode=0x1) returned 0x0 [0115.798] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\FlipPage\\NavigationRight_ButtonGraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\flippage\\navigationright_buttongraphic.png"), fInfoLevelId=0x0, lpFileInformation=0x12d810 | out: lpFileInformation=0x12d810*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6feb0e5d, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6feb0e5d, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d03f8a5, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13a1)) returned 1 [0115.798] SetErrorMode (uMode=0x0) returned 0x1 [0115.798] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\FlipPage\\NavigationRight_ButtonGraphic.png", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\FlipPage\\NavigationRight_ButtonGraphic.png", lpFilePart=0x0) returned 0x56 [0115.798] SetErrorMode (uMode=0x1) returned 0x0 [0115.799] SetErrorMode (uMode=0x0) returned 0x1 [0115.799] GetFileType (hFile=0x31c) returned 0x1 [0115.799] GetFileSize (in: hFile=0x31c, lpFileSizeHigh=0x12d8c8 | out: lpFileSizeHigh=0x12d8c8*=0x0) returned 0x13a1 [0115.799] ReadFile (in: hFile=0x31c, lpBuffer=0x26e7160, nNumberOfBytesToRead=0x13a1, lpNumberOfBytesRead=0x12d7a8, lpOverlapped=0x0 | out: lpBuffer=0x26e7160*, lpNumberOfBytesRead=0x12d7a8*=0x13a1, lpOverlapped=0x0) returned 1 [0115.823] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\FlipPage\\NavigationRight_ButtonGraphic.png", nBufferLength=0x105, lpBuffer=0x12d270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\FlipPage\\NavigationRight_ButtonGraphic.png", lpFilePart=0x0) returned 0x56 [0115.823] SetErrorMode (uMode=0x1) returned 0x0 [0115.826] SetErrorMode (uMode=0x0) returned 0x1 [0115.827] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\FlipPage\\NavigationRight_SelectionSubpicture.png", nBufferLength=0x105, lpBuffer=0x12d5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\FlipPage\\NavigationRight_SelectionSubpicture.png", lpFilePart=0x0) returned 0x5c [0115.828] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\FlipPage\\NavigationRight_SelectionSubpicture.png", nBufferLength=0x105, lpBuffer=0x12d590, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\FlipPage\\NavigationRight_SelectionSubpicture.png", lpFilePart=0x0) returned 0x5c [0115.828] SetErrorMode (uMode=0x1) returned 0x0 [0115.828] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\FlipPage\\NavigationRight_SelectionSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\flippage\\navigationright_selectionsubpicture.png"), fInfoLevelId=0x0, lpFileInformation=0x12d810 | out: lpFileInformation=0x12d810*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fe64ba3, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6fe64ba3, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d03f8a5, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc2e)) returned 1 [0115.829] SetErrorMode (uMode=0x0) returned 0x1 [0115.830] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\FlipPage\\NavigationRight_SelectionSubpicture.png", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\FlipPage\\NavigationRight_SelectionSubpicture.png", lpFilePart=0x0) returned 0x5c [0115.830] SetErrorMode (uMode=0x1) returned 0x0 [0115.830] SetErrorMode (uMode=0x0) returned 0x1 [0115.830] GetFileType (hFile=0x31c) returned 0x1 [0115.830] GetFileSize (in: hFile=0x31c, lpFileSizeHigh=0x12d8c8 | out: lpFileSizeHigh=0x12d8c8*=0x0) returned 0xc2e [0115.830] ReadFile (in: hFile=0x31c, lpBuffer=0x27d0ba8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12d7a8, lpOverlapped=0x0 | out: lpBuffer=0x27d0ba8*, lpNumberOfBytesRead=0x12d7a8*=0xc2e, lpOverlapped=0x0) returned 1 [0115.885] CloseHandle (hObject=0x31c) returned 1 [0115.901] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\FlipPage\\NavigationRight_SelectionSubpicture.png", nBufferLength=0x105, lpBuffer=0x12d270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\FlipPage\\NavigationRight_SelectionSubpicture.png", lpFilePart=0x0) returned 0x5c [0115.901] SetErrorMode (uMode=0x1) returned 0x0 [0115.902] SetErrorMode (uMode=0x0) returned 0x1 [0115.904] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\FlipPage\\NavigationUp_ButtonGraphic.png", nBufferLength=0x105, lpBuffer=0x12d5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\FlipPage\\NavigationUp_ButtonGraphic.png", lpFilePart=0x0) returned 0x53 [0115.904] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\FlipPage\\NavigationUp_ButtonGraphic.png", nBufferLength=0x105, lpBuffer=0x12d590, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\FlipPage\\NavigationUp_ButtonGraphic.png", lpFilePart=0x0) returned 0x53 [0115.904] SetErrorMode (uMode=0x1) returned 0x0 [0115.904] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\FlipPage\\NavigationUp_ButtonGraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\flippage\\navigationup_buttongraphic.png"), fInfoLevelId=0x0, lpFileInformation=0x12d810 | out: lpFileInformation=0x12d810*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fe64ba3, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6fe64ba3, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d03f8a5, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x135b)) returned 1 [0115.905] SetErrorMode (uMode=0x0) returned 0x1 [0115.905] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\FlipPage\\NavigationUp_ButtonGraphic.png", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\FlipPage\\NavigationUp_ButtonGraphic.png", lpFilePart=0x0) returned 0x53 [0115.905] SetErrorMode (uMode=0x1) returned 0x0 [0115.905] SetErrorMode (uMode=0x0) returned 0x1 [0115.905] GetFileType (hFile=0x31c) returned 0x1 [0115.905] GetFileSize (in: hFile=0x31c, lpFileSizeHigh=0x12d8c8 | out: lpFileSizeHigh=0x12d8c8*=0x0) returned 0x135b [0115.905] ReadFile (in: hFile=0x31c, lpBuffer=0x28b6d38, nNumberOfBytesToRead=0x135b, lpNumberOfBytesRead=0x12d7a8, lpOverlapped=0x0 | out: lpBuffer=0x28b6d38*, lpNumberOfBytesRead=0x12d7a8*=0x135b, lpOverlapped=0x0) returned 1 [0115.907] CloseHandle (hObject=0x31c) returned 1 [0115.927] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\FlipPage\\NavigationUp_ButtonGraphic.png", nBufferLength=0x105, lpBuffer=0x12d270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\FlipPage\\NavigationUp_ButtonGraphic.png", lpFilePart=0x0) returned 0x53 [0115.927] SetErrorMode (uMode=0x1) returned 0x0 [0115.929] SetErrorMode (uMode=0x0) returned 0x1 [0115.930] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\FlipPage\\NavigationUp_SelectionSubpicture.png", nBufferLength=0x105, lpBuffer=0x12d5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\FlipPage\\NavigationUp_SelectionSubpicture.png", lpFilePart=0x0) returned 0x59 [0115.930] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\FlipPage\\NavigationUp_SelectionSubpicture.png", nBufferLength=0x105, lpBuffer=0x12d590, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\FlipPage\\NavigationUp_SelectionSubpicture.png", lpFilePart=0x0) returned 0x59 [0115.930] SetErrorMode (uMode=0x1) returned 0x0 [0115.930] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\FlipPage\\NavigationUp_SelectionSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\flippage\\navigationup_selectionsubpicture.png"), fInfoLevelId=0x0, lpFileInformation=0x12d810 | out: lpFileInformation=0x12d810*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fe8ad00, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6fe8ad00, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d03f8a5, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc09)) returned 1 [0115.931] SetErrorMode (uMode=0x0) returned 0x1 [0115.931] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\FlipPage\\NavigationUp_SelectionSubpicture.png", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\FlipPage\\NavigationUp_SelectionSubpicture.png", lpFilePart=0x0) returned 0x59 [0115.931] SetErrorMode (uMode=0x1) returned 0x0 [0115.931] SetErrorMode (uMode=0x0) returned 0x1 [0115.931] GetFileType (hFile=0x31c) returned 0x1 [0115.931] GetFileSize (in: hFile=0x31c, lpFileSizeHigh=0x12d8c8 | out: lpFileSizeHigh=0x12d8c8*=0x0) returned 0xc09 [0115.931] ReadFile (in: hFile=0x31c, lpBuffer=0x27a3b50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12d7a8, lpOverlapped=0x0 | out: lpBuffer=0x27a3b50*, lpNumberOfBytesRead=0x12d7a8*=0xc09, lpOverlapped=0x0) returned 1 [0115.956] CloseHandle (hObject=0x31c) returned 1 [0115.974] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\FlipPage\\NavigationUp_SelectionSubpicture.png", nBufferLength=0x105, lpBuffer=0x12d270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\FlipPage\\NavigationUp_SelectionSubpicture.png", lpFilePart=0x0) returned 0x59 [0115.974] SetErrorMode (uMode=0x1) returned 0x0 [0115.976] SetErrorMode (uMode=0x0) returned 0x1 [0115.977] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\FlipPage\\pagecurl.png", nBufferLength=0x105, lpBuffer=0x12d5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\FlipPage\\pagecurl.png", lpFilePart=0x0) returned 0x41 [0115.977] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\FlipPage\\pagecurl.png", nBufferLength=0x105, lpBuffer=0x12d590, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\FlipPage\\pagecurl.png", lpFilePart=0x0) returned 0x41 [0115.977] SetErrorMode (uMode=0x1) returned 0x0 [0115.977] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\FlipPage\\pagecurl.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\flippage\\pagecurl.png"), fInfoLevelId=0x0, lpFileInformation=0x12d810 | out: lpFileInformation=0x12d810*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fdf278c, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6fdf278c, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d03f8a5, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x5fc8)) returned 1 [0115.977] SetErrorMode (uMode=0x0) returned 0x1 [0115.977] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\FlipPage\\pagecurl.png", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\FlipPage\\pagecurl.png", lpFilePart=0x0) returned 0x41 [0115.978] SetErrorMode (uMode=0x1) returned 0x0 [0115.978] SetErrorMode (uMode=0x0) returned 0x1 [0115.978] GetFileType (hFile=0x31c) returned 0x1 [0115.978] GetFileSize (in: hFile=0x31c, lpFileSizeHigh=0x12d8c8 | out: lpFileSizeHigh=0x12d8c8*=0x0) returned 0x5fc8 [0115.978] ReadFile (in: hFile=0x31c, lpBuffer=0x2889e98, nNumberOfBytesToRead=0x5fc8, lpNumberOfBytesRead=0x12d7a8, lpOverlapped=0x0 | out: lpBuffer=0x2889e98*, lpNumberOfBytesRead=0x12d7a8*=0x5fc8, lpOverlapped=0x0) returned 1 [0115.984] CloseHandle (hObject=0x31c) returned 1 [0116.079] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\FlipPage\\pagecurl.png", nBufferLength=0x105, lpBuffer=0x12d270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\FlipPage\\pagecurl.png", lpFilePart=0x0) returned 0x41 [0116.079] SetErrorMode (uMode=0x1) returned 0x0 [0116.081] SetErrorMode (uMode=0x0) returned 0x1 [0116.082] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\FlipPage\\Decrypt Instructions.txt", nBufferLength=0x105, lpBuffer=0x12d240, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\FlipPage\\Decrypt Instructions.txt", lpFilePart=0x0) returned 0x4d [0116.082] SetErrorMode (uMode=0x1) returned 0x0 [0116.083] SetErrorMode (uMode=0x0) returned 0x1 [0116.083] GetFileType (hFile=0x31c) returned 0x1 [0116.083] WriteFile (in: hFile=0x31c, lpBuffer=0x2793878*, nNumberOfBytesToWrite=0x773, lpNumberOfBytesWritten=0x12d7a8, lpOverlapped=0x0 | out: lpBuffer=0x2793878*, lpNumberOfBytesWritten=0x12d7a8*=0x773, lpOverlapped=0x0) returned 1 [0116.084] CloseHandle (hObject=0x31c) returned 1 [0116.085] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\FlipPage", nBufferLength=0x105, lpBuffer=0x12d430, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\FlipPage", lpFilePart=0x0) returned 0x34 [0116.085] SetErrorMode (uMode=0x1) returned 0x0 [0116.085] FindFirstFileW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\FlipPage\\*", lpFindFileData=0x12d5d0 | out: lpFindFileData=0x12d5d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9f43efc8, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x6541d9d0, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x6541d9d0, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x26bc80 [0116.085] FindClose (in: hFindFile=0x26bc80 | out: hFindFile=0x26bc80) returned 1 [0116.086] SetErrorMode (uMode=0x0) returned 0x1 [0116.086] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Full", nBufferLength=0x105, lpBuffer=0x12d390, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Full", lpFilePart=0x0) returned 0x30 [0116.086] SetErrorMode (uMode=0x1) returned 0x0 [0116.086] FindFirstFileW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Full\\*", lpFindFileData=0x12d530 | out: lpFindFileData=0x12d530*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa1a3fc59, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa63097e, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa1a65ec8, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x26bc80 [0116.090] FindClose (in: hFindFile=0x26bc80 | out: hFindFile=0x26bc80) returned 1 [0116.091] SetErrorMode (uMode=0x0) returned 0x1 [0116.091] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Full\\1047x576black.png", nBufferLength=0x105, lpBuffer=0x12d5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Full\\1047x576black.png", lpFilePart=0x0) returned 0x42 [0116.091] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Full\\1047x576black.png", nBufferLength=0x105, lpBuffer=0x12d590, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Full\\1047x576black.png", lpFilePart=0x0) returned 0x42 [0116.091] SetErrorMode (uMode=0x1) returned 0x0 [0116.091] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Full\\1047x576black.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\full\\1047x576black.png"), fInfoLevelId=0x0, lpFileInformation=0x12d810 | out: lpFileInformation=0x12d810*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f12724e, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f12724e, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d03f8a5, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x11da)) returned 1 [0116.093] SetErrorMode (uMode=0x0) returned 0x1 [0116.093] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Full\\1047x576black.png", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Full\\1047x576black.png", lpFilePart=0x0) returned 0x42 [0116.093] SetErrorMode (uMode=0x1) returned 0x0 [0116.093] SetErrorMode (uMode=0x0) returned 0x1 [0116.094] GetFileType (hFile=0x31c) returned 0x1 [0116.094] GetFileSize (in: hFile=0x31c, lpFileSizeHigh=0x12d8c8 | out: lpFileSizeHigh=0x12d8c8*=0x0) returned 0x11da [0116.094] ReadFile (in: hFile=0x31c, lpBuffer=0x27980c8, nNumberOfBytesToRead=0x11da, lpNumberOfBytesRead=0x12d7a8, lpOverlapped=0x0 | out: lpBuffer=0x27980c8*, lpNumberOfBytesRead=0x12d7a8*=0x11da, lpOverlapped=0x0) returned 1 [0116.098] CloseHandle (hObject=0x31c) returned 1 [0116.113] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Full\\1047x576black.png", nBufferLength=0x105, lpBuffer=0x12d270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Full\\1047x576black.png", lpFilePart=0x0) returned 0x42 [0116.113] SetErrorMode (uMode=0x1) returned 0x0 [0116.114] SetErrorMode (uMode=0x0) returned 0x1 [0116.116] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Full\\15x15dot.png", nBufferLength=0x105, lpBuffer=0x12d5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Full\\15x15dot.png", lpFilePart=0x0) returned 0x3d [0116.116] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Full\\15x15dot.png", nBufferLength=0x105, lpBuffer=0x12d590, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Full\\15x15dot.png", lpFilePart=0x0) returned 0x3d [0116.116] SetErrorMode (uMode=0x1) returned 0x0 [0116.116] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Full\\15x15dot.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\full\\15x15dot.png"), fInfoLevelId=0x0, lpFileInformation=0x12d810 | out: lpFileInformation=0x12d810*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f173508, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f173508, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d03f8a5, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xb05)) returned 1 [0116.117] SetErrorMode (uMode=0x0) returned 0x1 [0116.118] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Full\\15x15dot.png", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Full\\15x15dot.png", lpFilePart=0x0) returned 0x3d [0116.118] SetErrorMode (uMode=0x1) returned 0x0 [0116.118] SetErrorMode (uMode=0x0) returned 0x1 [0116.118] GetFileType (hFile=0x31c) returned 0x1 [0116.118] GetFileSize (in: hFile=0x31c, lpFileSizeHigh=0x12d8c8 | out: lpFileSizeHigh=0x12d8c8*=0x0) returned 0xb05 [0116.118] ReadFile (in: hFile=0x31c, lpBuffer=0x2880d28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12d7a8, lpOverlapped=0x0 | out: lpBuffer=0x2880d28*, lpNumberOfBytesRead=0x12d7a8*=0xb05, lpOverlapped=0x0) returned 1 [0116.120] CloseHandle (hObject=0x31c) returned 1 [0116.141] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Full\\15x15dot.png", nBufferLength=0x105, lpBuffer=0x12d270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Full\\15x15dot.png", lpFilePart=0x0) returned 0x3d [0116.141] SetErrorMode (uMode=0x1) returned 0x0 [0116.143] SetErrorMode (uMode=0x0) returned 0x1 [0116.145] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Full\\dotsdarkoverlay.png", nBufferLength=0x105, lpBuffer=0x12d5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Full\\dotsdarkoverlay.png", lpFilePart=0x0) returned 0x44 [0116.145] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Full\\dotsdarkoverlay.png", nBufferLength=0x105, lpBuffer=0x12d590, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Full\\dotsdarkoverlay.png", lpFilePart=0x0) returned 0x44 [0116.145] SetErrorMode (uMode=0x1) returned 0x0 [0116.145] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Full\\dotsdarkoverlay.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\full\\dotsdarkoverlay.png"), fInfoLevelId=0x0, lpFileInformation=0x12d810 | out: lpFileInformation=0x12d810*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f20ba7c, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f20ba7c, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d065a03, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x11d3)) returned 1 [0116.146] SetErrorMode (uMode=0x0) returned 0x1 [0116.146] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Full\\dotsdarkoverlay.png", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Full\\dotsdarkoverlay.png", lpFilePart=0x0) returned 0x44 [0116.146] SetErrorMode (uMode=0x1) returned 0x0 [0116.147] SetErrorMode (uMode=0x0) returned 0x1 [0116.147] GetFileType (hFile=0x31c) returned 0x1 [0116.147] GetFileSize (in: hFile=0x31c, lpFileSizeHigh=0x12d8c8 | out: lpFileSizeHigh=0x12d8c8*=0x0) returned 0x11d3 [0116.147] ReadFile (in: hFile=0x31c, lpBuffer=0x2774d90, nNumberOfBytesToRead=0x11d3, lpNumberOfBytesRead=0x12d7a8, lpOverlapped=0x0 | out: lpBuffer=0x2774d90*, lpNumberOfBytesRead=0x12d7a8*=0x11d3, lpOverlapped=0x0) returned 1 [0116.161] CloseHandle (hObject=0x31c) returned 1 [0116.177] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Full\\dotsdarkoverlay.png", nBufferLength=0x105, lpBuffer=0x12d270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Full\\dotsdarkoverlay.png", lpFilePart=0x0) returned 0x44 [0116.177] SetErrorMode (uMode=0x1) returned 0x0 [0116.179] SetErrorMode (uMode=0x0) returned 0x1 [0116.180] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Full\\dotslightoverlay.png", nBufferLength=0x105, lpBuffer=0x12d5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Full\\dotslightoverlay.png", lpFilePart=0x0) returned 0x45 [0116.180] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Full\\dotslightoverlay.png", nBufferLength=0x105, lpBuffer=0x12d590, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Full\\dotslightoverlay.png", lpFilePart=0x0) returned 0x45 [0116.180] SetErrorMode (uMode=0x1) returned 0x0 [0116.180] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Full\\dotslightoverlay.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\full\\dotslightoverlay.png"), fInfoLevelId=0x0, lpFileInformation=0x12d810 | out: lpFileInformation=0x12d810*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f20ba7c, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f20ba7c, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d065a03, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x123d)) returned 1 [0116.181] SetErrorMode (uMode=0x0) returned 0x1 [0116.181] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Full\\dotslightoverlay.png", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Full\\dotslightoverlay.png", lpFilePart=0x0) returned 0x45 [0116.181] SetErrorMode (uMode=0x1) returned 0x0 [0116.181] SetErrorMode (uMode=0x0) returned 0x1 [0116.181] GetFileType (hFile=0x31c) returned 0x1 [0116.181] GetFileSize (in: hFile=0x31c, lpFileSizeHigh=0x12d8c8 | out: lpFileSizeHigh=0x12d8c8*=0x0) returned 0x123d [0116.181] ReadFile (in: hFile=0x31c, lpBuffer=0x285cf38, nNumberOfBytesToRead=0x123d, lpNumberOfBytesRead=0x12d7a8, lpOverlapped=0x0 | out: lpBuffer=0x285cf38*, lpNumberOfBytesRead=0x12d7a8*=0x123d, lpOverlapped=0x0) returned 1 [0116.194] CloseHandle (hObject=0x31c) returned 1 [0116.214] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Full\\dotslightoverlay.png", nBufferLength=0x105, lpBuffer=0x12d270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Full\\dotslightoverlay.png", lpFilePart=0x0) returned 0x45 [0116.214] SetErrorMode (uMode=0x1) returned 0x0 [0116.216] SetErrorMode (uMode=0x0) returned 0x1 [0116.217] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Full\\full.png", nBufferLength=0x105, lpBuffer=0x12d5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Full\\full.png", lpFilePart=0x0) returned 0x39 [0116.217] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Full\\full.png", nBufferLength=0x105, lpBuffer=0x12d590, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Full\\full.png", lpFilePart=0x0) returned 0x39 [0116.217] SetErrorMode (uMode=0x1) returned 0x0 [0116.217] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Full\\full.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\full\\full.png"), fInfoLevelId=0x0, lpFileInformation=0x12d810 | out: lpFileInformation=0x12d810*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f12724e, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f12724e, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d065a03, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x6794)) returned 1 [0116.219] SetErrorMode (uMode=0x0) returned 0x1 [0116.219] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Full\\full.png", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Full\\full.png", lpFilePart=0x0) returned 0x39 [0116.219] SetErrorMode (uMode=0x1) returned 0x0 [0116.219] SetErrorMode (uMode=0x0) returned 0x1 [0116.220] GetFileType (hFile=0x31c) returned 0x1 [0116.220] GetFileSize (in: hFile=0x31c, lpFileSizeHigh=0x12d8c8 | out: lpFileSizeHigh=0x12d8c8*=0x0) returned 0x6794 [0116.220] ReadFile (in: hFile=0x31c, lpBuffer=0x2731d38, nNumberOfBytesToRead=0x6794, lpNumberOfBytesRead=0x12d7a8, lpOverlapped=0x0 | out: lpBuffer=0x2731d38*, lpNumberOfBytesRead=0x12d7a8*=0x6794, lpOverlapped=0x0) returned 1 [0116.233] CloseHandle (hObject=0x31c) returned 1 [0116.249] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Full\\full.png", nBufferLength=0x105, lpBuffer=0x12d270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Full\\full.png", lpFilePart=0x0) returned 0x39 [0116.249] SetErrorMode (uMode=0x1) returned 0x0 [0116.250] SetErrorMode (uMode=0x0) returned 0x1 [0116.252] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Full\\NavigationLeft_ButtonGraphic.png", nBufferLength=0x105, lpBuffer=0x12d5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Full\\NavigationLeft_ButtonGraphic.png", lpFilePart=0x0) returned 0x51 [0116.252] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Full\\NavigationLeft_ButtonGraphic.png", nBufferLength=0x105, lpBuffer=0x12d590, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Full\\NavigationLeft_ButtonGraphic.png", lpFilePart=0x0) returned 0x51 [0116.252] SetErrorMode (uMode=0x1) returned 0x0 [0116.252] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Full\\NavigationLeft_ButtonGraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\full\\navigationleft_buttongraphic.png"), fInfoLevelId=0x0, lpFileInformation=0x12d810 | out: lpFileInformation=0x12d810*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f1bf7c2, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f1bf7c2, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d065a03, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13e0)) returned 1 [0116.253] SetErrorMode (uMode=0x0) returned 0x1 [0116.253] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Full\\NavigationLeft_ButtonGraphic.png", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Full\\NavigationLeft_ButtonGraphic.png", lpFilePart=0x0) returned 0x51 [0116.253] SetErrorMode (uMode=0x1) returned 0x0 [0116.253] SetErrorMode (uMode=0x0) returned 0x1 [0116.253] GetFileType (hFile=0x31c) returned 0x1 [0116.253] GetFileSize (in: hFile=0x31c, lpFileSizeHigh=0x12d8c8 | out: lpFileSizeHigh=0x12d8c8*=0x0) returned 0x13e0 [0116.253] ReadFile (in: hFile=0x31c, lpBuffer=0x283a1a0, nNumberOfBytesToRead=0x13e0, lpNumberOfBytesRead=0x12d7a8, lpOverlapped=0x0 | out: lpBuffer=0x283a1a0*, lpNumberOfBytesRead=0x12d7a8*=0x13e0, lpOverlapped=0x0) returned 1 [0116.257] CloseHandle (hObject=0x31c) returned 1 [0116.274] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Full\\NavigationLeft_ButtonGraphic.png", nBufferLength=0x105, lpBuffer=0x12d270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Full\\NavigationLeft_ButtonGraphic.png", lpFilePart=0x0) returned 0x51 [0116.274] SetErrorMode (uMode=0x1) returned 0x0 [0116.276] SetErrorMode (uMode=0x0) returned 0x1 [0116.277] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Full\\NavigationLeft_SelectionSubpicture.png", nBufferLength=0x105, lpBuffer=0x12d5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Full\\NavigationLeft_SelectionSubpicture.png", lpFilePart=0x0) returned 0x57 [0116.277] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Full\\NavigationLeft_SelectionSubpicture.png", nBufferLength=0x105, lpBuffer=0x12d590, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Full\\NavigationLeft_SelectionSubpicture.png", lpFilePart=0x0) returned 0x57 [0116.278] SetErrorMode (uMode=0x1) returned 0x0 [0116.278] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Full\\NavigationLeft_SelectionSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\full\\navigationleft_selectionsubpicture.png"), fInfoLevelId=0x0, lpFileInformation=0x12d810 | out: lpFileInformation=0x12d810*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f1bf7c2, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f1bf7c2, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d065a03, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc3a)) returned 1 [0116.279] SetErrorMode (uMode=0x0) returned 0x1 [0116.279] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Full\\NavigationLeft_SelectionSubpicture.png", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Full\\NavigationLeft_SelectionSubpicture.png", lpFilePart=0x0) returned 0x57 [0116.279] SetErrorMode (uMode=0x1) returned 0x0 [0116.279] SetErrorMode (uMode=0x0) returned 0x1 [0116.279] GetFileType (hFile=0x31c) returned 0x1 [0116.279] GetFileSize (in: hFile=0x31c, lpFileSizeHigh=0x12d8c8 | out: lpFileSizeHigh=0x12d8c8*=0x0) returned 0xc3a [0116.279] ReadFile (in: hFile=0x31c, lpBuffer=0x2727d50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12d7a8, lpOverlapped=0x0 | out: lpBuffer=0x2727d50*, lpNumberOfBytesRead=0x12d7a8*=0xc3a, lpOverlapped=0x0) returned 1 [0116.285] CloseHandle (hObject=0x31c) returned 1 [0116.299] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Full\\NavigationLeft_SelectionSubpicture.png", nBufferLength=0x105, lpBuffer=0x12d270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Full\\NavigationLeft_SelectionSubpicture.png", lpFilePart=0x0) returned 0x57 [0116.299] SetErrorMode (uMode=0x1) returned 0x0 [0116.301] SetErrorMode (uMode=0x0) returned 0x1 [0116.302] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Full\\NavigationRight_ButtonGraphic.png", nBufferLength=0x105, lpBuffer=0x12d5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Full\\NavigationRight_ButtonGraphic.png", lpFilePart=0x0) returned 0x52 [0116.302] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Full\\NavigationRight_ButtonGraphic.png", nBufferLength=0x105, lpBuffer=0x12d590, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Full\\NavigationRight_ButtonGraphic.png", lpFilePart=0x0) returned 0x52 [0116.302] SetErrorMode (uMode=0x1) returned 0x0 [0116.302] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Full\\NavigationRight_ButtonGraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\full\\navigationright_buttongraphic.png"), fInfoLevelId=0x0, lpFileInformation=0x12d810 | out: lpFileInformation=0x12d810*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f1e591f, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f1e591f, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d065a03, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13a1)) returned 1 [0116.303] SetErrorMode (uMode=0x0) returned 0x1 [0116.304] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Full\\NavigationRight_ButtonGraphic.png", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Full\\NavigationRight_ButtonGraphic.png", lpFilePart=0x0) returned 0x52 [0116.304] SetErrorMode (uMode=0x1) returned 0x0 [0116.304] SetErrorMode (uMode=0x0) returned 0x1 [0116.304] GetFileType (hFile=0x31c) returned 0x1 [0116.304] GetFileSize (in: hFile=0x31c, lpFileSizeHigh=0x12d8c8 | out: lpFileSizeHigh=0x12d8c8*=0x0) returned 0x13a1 [0116.304] ReadFile (in: hFile=0x31c, lpBuffer=0x280e220, nNumberOfBytesToRead=0x13a1, lpNumberOfBytesRead=0x12d7a8, lpOverlapped=0x0 | out: lpBuffer=0x280e220*, lpNumberOfBytesRead=0x12d7a8*=0x13a1, lpOverlapped=0x0) returned 1 [0116.306] CloseHandle (hObject=0x31c) returned 1 [0116.329] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Full\\NavigationRight_ButtonGraphic.png", nBufferLength=0x105, lpBuffer=0x12d270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Full\\NavigationRight_ButtonGraphic.png", lpFilePart=0x0) returned 0x52 [0116.329] SetErrorMode (uMode=0x1) returned 0x0 [0116.331] SetErrorMode (uMode=0x0) returned 0x1 [0116.332] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Full\\NavigationRight_SelectionSubpicture.png", nBufferLength=0x105, lpBuffer=0x12d5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Full\\NavigationRight_SelectionSubpicture.png", lpFilePart=0x0) returned 0x58 [0116.332] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Full\\NavigationRight_SelectionSubpicture.png", nBufferLength=0x105, lpBuffer=0x12d590, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Full\\NavigationRight_SelectionSubpicture.png", lpFilePart=0x0) returned 0x58 [0116.333] SetErrorMode (uMode=0x1) returned 0x0 [0116.333] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Full\\NavigationRight_SelectionSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\full\\navigationright_selectionsubpicture.png"), fInfoLevelId=0x0, lpFileInformation=0x12d810 | out: lpFileInformation=0x12d810*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f1e591f, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f1e591f, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d08bb61, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc2e)) returned 1 [0116.334] SetErrorMode (uMode=0x0) returned 0x1 [0116.334] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Full\\NavigationRight_SelectionSubpicture.png", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Full\\NavigationRight_SelectionSubpicture.png", lpFilePart=0x0) returned 0x58 [0116.334] SetErrorMode (uMode=0x1) returned 0x0 [0116.334] SetErrorMode (uMode=0x0) returned 0x1 [0116.334] GetFileType (hFile=0x31c) returned 0x1 [0116.334] GetFileSize (in: hFile=0x31c, lpFileSizeHigh=0x12d8c8 | out: lpFileSizeHigh=0x12d8c8*=0x0) returned 0xc2e [0116.334] ReadFile (in: hFile=0x31c, lpBuffer=0x26f3770, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12d7a8, lpOverlapped=0x0 | out: lpBuffer=0x26f3770*, lpNumberOfBytesRead=0x12d7a8*=0xc2e, lpOverlapped=0x0) returned 1 [0116.336] CloseHandle (hObject=0x31c) returned 1 [0116.352] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Full\\NavigationRight_SelectionSubpicture.png", nBufferLength=0x105, lpBuffer=0x12d270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Full\\NavigationRight_SelectionSubpicture.png", lpFilePart=0x0) returned 0x58 [0116.352] SetErrorMode (uMode=0x1) returned 0x0 [0116.354] SetErrorMode (uMode=0x0) returned 0x1 [0116.355] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Full\\NavigationUp_ButtonGraphic.png", nBufferLength=0x105, lpBuffer=0x12d5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Full\\NavigationUp_ButtonGraphic.png", lpFilePart=0x0) returned 0x4f [0116.355] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Full\\NavigationUp_ButtonGraphic.png", nBufferLength=0x105, lpBuffer=0x12d590, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Full\\NavigationUp_ButtonGraphic.png", lpFilePart=0x0) returned 0x4f [0116.356] SetErrorMode (uMode=0x1) returned 0x0 [0116.356] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Full\\NavigationUp_ButtonGraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\full\\navigationup_buttongraphic.png"), fInfoLevelId=0x0, lpFileInformation=0x12d810 | out: lpFileInformation=0x12d810*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f173508, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f173508, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d08bb61, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x135b)) returned 1 [0116.357] SetErrorMode (uMode=0x0) returned 0x1 [0116.357] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Full\\NavigationUp_ButtonGraphic.png", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Full\\NavigationUp_ButtonGraphic.png", lpFilePart=0x0) returned 0x4f [0116.357] SetErrorMode (uMode=0x1) returned 0x0 [0116.357] SetErrorMode (uMode=0x0) returned 0x1 [0116.357] GetFileType (hFile=0x31c) returned 0x1 [0116.357] GetFileSize (in: hFile=0x31c, lpFileSizeHigh=0x12d8c8 | out: lpFileSizeHigh=0x12d8c8*=0x0) returned 0x135b [0116.357] ReadFile (in: hFile=0x31c, lpBuffer=0x27d9be0, nNumberOfBytesToRead=0x135b, lpNumberOfBytesRead=0x12d7a8, lpOverlapped=0x0 | out: lpBuffer=0x27d9be0*, lpNumberOfBytesRead=0x12d7a8*=0x135b, lpOverlapped=0x0) returned 1 [0116.359] CloseHandle (hObject=0x31c) returned 1 [0116.373] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Full\\NavigationUp_ButtonGraphic.png", nBufferLength=0x105, lpBuffer=0x12d270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Full\\NavigationUp_ButtonGraphic.png", lpFilePart=0x0) returned 0x4f [0116.373] SetErrorMode (uMode=0x1) returned 0x0 [0116.375] SetErrorMode (uMode=0x0) returned 0x1 [0116.376] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Full\\NavigationUp_SelectionSubpicture.png", nBufferLength=0x105, lpBuffer=0x12d5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Full\\NavigationUp_SelectionSubpicture.png", lpFilePart=0x0) returned 0x55 [0116.376] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Full\\NavigationUp_SelectionSubpicture.png", nBufferLength=0x105, lpBuffer=0x12d590, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Full\\NavigationUp_SelectionSubpicture.png", lpFilePart=0x0) returned 0x55 [0116.376] SetErrorMode (uMode=0x1) returned 0x0 [0116.376] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Full\\NavigationUp_SelectionSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\full\\navigationup_selectionsubpicture.png"), fInfoLevelId=0x0, lpFileInformation=0x12d810 | out: lpFileInformation=0x12d810*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f199665, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f199665, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d08bb61, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc09)) returned 1 [0116.377] SetErrorMode (uMode=0x0) returned 0x1 [0116.378] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Full\\NavigationUp_SelectionSubpicture.png", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Full\\NavigationUp_SelectionSubpicture.png", lpFilePart=0x0) returned 0x55 [0116.378] SetErrorMode (uMode=0x1) returned 0x0 [0116.378] SetErrorMode (uMode=0x0) returned 0x1 [0116.378] GetFileType (hFile=0x31c) returned 0x1 [0116.378] GetFileSize (in: hFile=0x31c, lpFileSizeHigh=0x12d8c8 | out: lpFileSizeHigh=0x12d8c8*=0x0) returned 0xc09 [0116.378] ReadFile (in: hFile=0x31c, lpBuffer=0x28c3098, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12d7a8, lpOverlapped=0x0 | out: lpBuffer=0x28c3098*, lpNumberOfBytesRead=0x12d7a8*=0xc09, lpOverlapped=0x0) returned 1 [0116.380] CloseHandle (hObject=0x31c) returned 1 [0116.400] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Full\\NavigationUp_SelectionSubpicture.png", nBufferLength=0x105, lpBuffer=0x12d270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Full\\NavigationUp_SelectionSubpicture.png", lpFilePart=0x0) returned 0x55 [0116.400] SetErrorMode (uMode=0x1) returned 0x0 [0116.402] SetErrorMode (uMode=0x0) returned 0x1 [0116.403] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Full\\pushplaysubpicture.png", nBufferLength=0x105, lpBuffer=0x12d5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Full\\pushplaysubpicture.png", lpFilePart=0x0) returned 0x47 [0116.403] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Full\\pushplaysubpicture.png", nBufferLength=0x105, lpBuffer=0x12d590, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Full\\pushplaysubpicture.png", lpFilePart=0x0) returned 0x47 [0116.403] SetErrorMode (uMode=0x1) returned 0x0 [0116.403] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Full\\pushplaysubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\full\\pushplaysubpicture.png"), fInfoLevelId=0x0, lpFileInformation=0x12d810 | out: lpFileInformation=0x12d810*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f231bd9, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f231bd9, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d08bb61, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xb92)) returned 1 [0116.403] SetErrorMode (uMode=0x0) returned 0x1 [0116.404] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Full\\pushplaysubpicture.png", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Full\\pushplaysubpicture.png", lpFilePart=0x0) returned 0x47 [0116.404] SetErrorMode (uMode=0x1) returned 0x0 [0116.404] SetErrorMode (uMode=0x0) returned 0x1 [0116.404] GetFileType (hFile=0x31c) returned 0x1 [0116.404] GetFileSize (in: hFile=0x31c, lpFileSizeHigh=0x12d8c8 | out: lpFileSizeHigh=0x12d8c8*=0x0) returned 0xb92 [0116.404] ReadFile (in: hFile=0x31c, lpBuffer=0x27ac980, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12d7a8, lpOverlapped=0x0 | out: lpBuffer=0x27ac980*, lpNumberOfBytesRead=0x12d7a8*=0xb92, lpOverlapped=0x0) returned 1 [0116.406] CloseHandle (hObject=0x31c) returned 1 [0116.424] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Full\\pushplaysubpicture.png", nBufferLength=0x105, lpBuffer=0x12d270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Full\\pushplaysubpicture.png", lpFilePart=0x0) returned 0x47 [0116.424] SetErrorMode (uMode=0x1) returned 0x0 [0116.426] SetErrorMode (uMode=0x0) returned 0x1 [0116.427] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Full\\Decrypt Instructions.txt", nBufferLength=0x105, lpBuffer=0x12d240, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Full\\Decrypt Instructions.txt", lpFilePart=0x0) returned 0x49 [0116.427] SetErrorMode (uMode=0x1) returned 0x0 [0116.428] SetErrorMode (uMode=0x0) returned 0x1 [0116.428] GetFileType (hFile=0x31c) returned 0x1 [0116.428] WriteFile (in: hFile=0x31c, lpBuffer=0x28957f8*, nNumberOfBytesToWrite=0x773, lpNumberOfBytesWritten=0x12d7a8, lpOverlapped=0x0 | out: lpBuffer=0x28957f8*, lpNumberOfBytesWritten=0x12d7a8*=0x773, lpOverlapped=0x0) returned 1 [0116.429] CloseHandle (hObject=0x31c) returned 1 [0116.430] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Full", nBufferLength=0x105, lpBuffer=0x12d430, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Full", lpFilePart=0x0) returned 0x30 [0116.430] SetErrorMode (uMode=0x1) returned 0x0 [0116.430] FindFirstFileW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Full\\*", lpFindFileData=0x12d5d0 | out: lpFindFileData=0x12d5d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa1a3fc59, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x65763810, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x65763810, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x26bc80 [0116.430] FindClose (in: hFindFile=0x26bc80 | out: hFindFile=0x26bc80) returned 1 [0116.430] SetErrorMode (uMode=0x0) returned 0x1 [0116.431] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\HueCycle", nBufferLength=0x105, lpBuffer=0x12d390, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\HueCycle", lpFilePart=0x0) returned 0x34 [0116.431] SetErrorMode (uMode=0x1) returned 0x0 [0116.431] FindFirstFileW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\HueCycle\\*", lpFindFileData=0x12d530 | out: lpFindFileData=0x12d530*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa0fd11ff, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa787f65, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa108fe2a, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x26bc80 [0116.434] FindClose (in: hFindFile=0x26bc80 | out: hFindFile=0x26bc80) returned 1 [0116.435] SetErrorMode (uMode=0x0) returned 0x1 [0116.435] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\HueCycle\\1047x576black.png", nBufferLength=0x105, lpBuffer=0x12d5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\HueCycle\\1047x576black.png", lpFilePart=0x0) returned 0x46 [0116.435] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\HueCycle\\1047x576black.png", nBufferLength=0x105, lpBuffer=0x12d590, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\HueCycle\\1047x576black.png", lpFilePart=0x0) returned 0x46 [0116.435] SetErrorMode (uMode=0x1) returned 0x0 [0116.435] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\HueCycle\\1047x576black.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\huecycle\\1047x576black.png"), fInfoLevelId=0x0, lpFileInformation=0x12d810 | out: lpFileInformation=0x12d810*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6faf8c48, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6faf8c48, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d1240d9, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x11da)) returned 1 [0116.436] SetErrorMode (uMode=0x0) returned 0x1 [0116.436] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\HueCycle\\1047x576black.png", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\HueCycle\\1047x576black.png", lpFilePart=0x0) returned 0x46 [0116.436] SetErrorMode (uMode=0x1) returned 0x0 [0116.436] SetErrorMode (uMode=0x0) returned 0x1 [0116.436] GetFileType (hFile=0x31c) returned 0x1 [0116.437] GetFileSize (in: hFile=0x31c, lpFileSizeHigh=0x12d8c8 | out: lpFileSizeHigh=0x12d8c8*=0x0) returned 0x11da [0116.437] ReadFile (in: hFile=0x31c, lpBuffer=0x289a060, nNumberOfBytesToRead=0x11da, lpNumberOfBytesRead=0x12d7a8, lpOverlapped=0x0 | out: lpBuffer=0x289a060*, lpNumberOfBytesRead=0x12d7a8*=0x11da, lpOverlapped=0x0) returned 1 [0116.439] CloseHandle (hObject=0x31c) returned 1 [0116.460] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\HueCycle\\1047x576black.png", nBufferLength=0x105, lpBuffer=0x12d270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\HueCycle\\1047x576black.png", lpFilePart=0x0) returned 0x46 [0116.460] SetErrorMode (uMode=0x1) returned 0x0 [0116.462] SetErrorMode (uMode=0x0) returned 0x1 [0116.463] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\HueCycle\\15x15dot.png", nBufferLength=0x105, lpBuffer=0x12d5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\HueCycle\\15x15dot.png", lpFilePart=0x0) returned 0x41 [0116.463] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\HueCycle\\15x15dot.png", nBufferLength=0x105, lpBuffer=0x12d590, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\HueCycle\\15x15dot.png", lpFilePart=0x0) returned 0x41 [0116.463] SetErrorMode (uMode=0x1) returned 0x0 [0116.463] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\HueCycle\\15x15dot.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\huecycle\\15x15dot.png"), fInfoLevelId=0x0, lpFileInformation=0x12d810 | out: lpFileInformation=0x12d810*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fb1eda5, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6fb1eda5, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d1240d9, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xb05)) returned 1 [0116.464] SetErrorMode (uMode=0x0) returned 0x1 [0116.464] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\HueCycle\\15x15dot.png", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\HueCycle\\15x15dot.png", lpFilePart=0x0) returned 0x41 [0116.465] SetErrorMode (uMode=0x1) returned 0x0 [0116.465] SetErrorMode (uMode=0x0) returned 0x1 [0116.465] GetFileType (hFile=0x31c) returned 0x1 [0116.465] GetFileSize (in: hFile=0x31c, lpFileSizeHigh=0x12d8c8 | out: lpFileSizeHigh=0x12d8c8*=0x0) returned 0xb05 [0116.465] ReadFile (in: hFile=0x31c, lpBuffer=0x277ea68, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12d7a8, lpOverlapped=0x0 | out: lpBuffer=0x277ea68*, lpNumberOfBytesRead=0x12d7a8*=0xb05, lpOverlapped=0x0) returned 1 [0116.467] CloseHandle (hObject=0x31c) returned 1 [0116.479] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\HueCycle\\15x15dot.png", nBufferLength=0x105, lpBuffer=0x12d270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\HueCycle\\15x15dot.png", lpFilePart=0x0) returned 0x41 [0116.480] SetErrorMode (uMode=0x1) returned 0x0 [0116.481] SetErrorMode (uMode=0x0) returned 0x1 [0116.483] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\HueCycle\\colorcycle.png", nBufferLength=0x105, lpBuffer=0x12d5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\HueCycle\\colorcycle.png", lpFilePart=0x0) returned 0x43 [0116.483] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\HueCycle\\colorcycle.png", nBufferLength=0x105, lpBuffer=0x12d590, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\HueCycle\\colorcycle.png", lpFilePart=0x0) returned 0x43 [0116.483] SetErrorMode (uMode=0x1) returned 0x0 [0116.483] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\HueCycle\\colorcycle.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\huecycle\\colorcycle.png"), fInfoLevelId=0x0, lpFileInformation=0x12d810 | out: lpFileInformation=0x12d810*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fad2aeb, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6fad2aeb, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d14a237, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x43e2)) returned 1 [0116.484] SetErrorMode (uMode=0x0) returned 0x1 [0116.484] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\HueCycle\\colorcycle.png", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\HueCycle\\colorcycle.png", lpFilePart=0x0) returned 0x43 [0116.484] SetErrorMode (uMode=0x1) returned 0x0 [0116.484] SetErrorMode (uMode=0x0) returned 0x1 [0116.484] GetFileType (hFile=0x31c) returned 0x1 [0116.484] GetFileSize (in: hFile=0x31c, lpFileSizeHigh=0x12d8c8 | out: lpFileSizeHigh=0x12d8c8*=0x0) returned 0x43e2 [0116.484] ReadFile (in: hFile=0x31c, lpBuffer=0x28647d0, nNumberOfBytesToRead=0x43e2, lpNumberOfBytesRead=0x12d7a8, lpOverlapped=0x0 | out: lpBuffer=0x28647d0*, lpNumberOfBytesRead=0x12d7a8*=0x43e2, lpOverlapped=0x0) returned 1 [0116.486] CloseHandle (hObject=0x31c) returned 1 [0116.509] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\HueCycle\\colorcycle.png", nBufferLength=0x105, lpBuffer=0x12d270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\HueCycle\\colorcycle.png", lpFilePart=0x0) returned 0x43 [0116.509] SetErrorMode (uMode=0x1) returned 0x0 [0116.511] SetErrorMode (uMode=0x0) returned 0x1 [0116.513] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\HueCycle\\huemainsubpicture2.png", nBufferLength=0x105, lpBuffer=0x12d5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\HueCycle\\huemainsubpicture2.png", lpFilePart=0x0) returned 0x4b [0116.513] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\HueCycle\\huemainsubpicture2.png", nBufferLength=0x105, lpBuffer=0x12d590, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\HueCycle\\huemainsubpicture2.png", lpFilePart=0x0) returned 0x4b [0116.513] SetErrorMode (uMode=0x1) returned 0x0 [0116.513] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\HueCycle\\huemainsubpicture2.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\huecycle\\huemainsubpicture2.png"), fInfoLevelId=0x0, lpFileInformation=0x12d810 | out: lpFileInformation=0x12d810*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fb44f02, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6fb44f02, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d14a237, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xb57)) returned 1 [0116.514] SetErrorMode (uMode=0x0) returned 0x1 [0116.514] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\HueCycle\\huemainsubpicture2.png", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\HueCycle\\huemainsubpicture2.png", lpFilePart=0x0) returned 0x4b [0116.514] SetErrorMode (uMode=0x1) returned 0x0 [0116.514] SetErrorMode (uMode=0x0) returned 0x1 [0116.514] GetFileType (hFile=0x31c) returned 0x1 [0116.514] GetFileSize (in: hFile=0x31c, lpFileSizeHigh=0x12d8c8 | out: lpFileSizeHigh=0x12d8c8*=0x0) returned 0xb57 [0116.514] ReadFile (in: hFile=0x31c, lpBuffer=0x27670d0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12d7a8, lpOverlapped=0x0 | out: lpBuffer=0x27670d0*, lpNumberOfBytesRead=0x12d7a8*=0xb57, lpOverlapped=0x0) returned 1 [0116.535] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\HueCycle\\huemainsubpicture2.png", nBufferLength=0x105, lpBuffer=0x12d270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\HueCycle\\huemainsubpicture2.png", lpFilePart=0x0) returned 0x4b [0116.535] SetErrorMode (uMode=0x1) returned 0x0 [0116.537] SetErrorMode (uMode=0x0) returned 0x1 [0116.538] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\HueCycle\\NavigationLeft_ButtonGraphic.png", nBufferLength=0x105, lpBuffer=0x12d5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\HueCycle\\NavigationLeft_ButtonGraphic.png", lpFilePart=0x0) returned 0x55 [0116.538] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\HueCycle\\NavigationLeft_ButtonGraphic.png", nBufferLength=0x105, lpBuffer=0x12d590, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\HueCycle\\NavigationLeft_ButtonGraphic.png", lpFilePart=0x0) returned 0x55 [0116.539] SetErrorMode (uMode=0x1) returned 0x0 [0116.539] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\HueCycle\\NavigationLeft_ButtonGraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\huecycle\\navigationleft_buttongraphic.png"), fInfoLevelId=0x0, lpFileInformation=0x12d810 | out: lpFileInformation=0x12d810*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fc29730, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6fc29730, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d14a237, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13e0)) returned 1 [0116.539] SetErrorMode (uMode=0x0) returned 0x1 [0116.539] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\HueCycle\\NavigationLeft_ButtonGraphic.png", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\HueCycle\\NavigationLeft_ButtonGraphic.png", lpFilePart=0x0) returned 0x55 [0116.539] SetErrorMode (uMode=0x1) returned 0x0 [0116.539] SetErrorMode (uMode=0x0) returned 0x1 [0116.540] GetFileType (hFile=0x31c) returned 0x1 [0116.540] GetFileSize (in: hFile=0x31c, lpFileSizeHigh=0x12d8c8 | out: lpFileSizeHigh=0x12d8c8*=0x0) returned 0x13e0 [0116.540] ReadFile (in: hFile=0x31c, lpBuffer=0x284d0e0, nNumberOfBytesToRead=0x13e0, lpNumberOfBytesRead=0x12d7a8, lpOverlapped=0x0 | out: lpBuffer=0x284d0e0*, lpNumberOfBytesRead=0x12d7a8*=0x13e0, lpOverlapped=0x0) returned 1 [0116.567] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\HueCycle\\NavigationLeft_ButtonGraphic.png", nBufferLength=0x105, lpBuffer=0x12d270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\HueCycle\\NavigationLeft_ButtonGraphic.png", lpFilePart=0x0) returned 0x55 [0116.568] SetErrorMode (uMode=0x1) returned 0x0 [0116.569] SetErrorMode (uMode=0x0) returned 0x1 [0116.571] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\HueCycle\\NavigationLeft_SelectionSubpicture.png", nBufferLength=0x105, lpBuffer=0x12d5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\HueCycle\\NavigationLeft_SelectionSubpicture.png", lpFilePart=0x0) returned 0x5b [0116.571] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\HueCycle\\NavigationLeft_SelectionSubpicture.png", nBufferLength=0x105, lpBuffer=0x12d590, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\HueCycle\\NavigationLeft_SelectionSubpicture.png", lpFilePart=0x0) returned 0x5b [0116.571] SetErrorMode (uMode=0x1) returned 0x0 [0116.572] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\HueCycle\\NavigationLeft_SelectionSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\huecycle\\navigationleft_selectionsubpicture.png"), fInfoLevelId=0x0, lpFileInformation=0x12d810 | out: lpFileInformation=0x12d810*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fbdd476, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6fbdd476, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d14a237, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc3a)) returned 1 [0116.573] SetErrorMode (uMode=0x0) returned 0x1 [0116.573] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\HueCycle\\NavigationLeft_SelectionSubpicture.png", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\HueCycle\\NavigationLeft_SelectionSubpicture.png", lpFilePart=0x0) returned 0x5b [0116.573] SetErrorMode (uMode=0x1) returned 0x0 [0116.573] SetErrorMode (uMode=0x0) returned 0x1 [0116.573] GetFileType (hFile=0x31c) returned 0x1 [0116.573] GetFileSize (in: hFile=0x31c, lpFileSizeHigh=0x12d8c8 | out: lpFileSizeHigh=0x12d8c8*=0x0) returned 0xc3a [0116.573] ReadFile (in: hFile=0x31c, lpBuffer=0x272f928, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12d7a8, lpOverlapped=0x0 | out: lpBuffer=0x272f928*, lpNumberOfBytesRead=0x12d7a8*=0xc3a, lpOverlapped=0x0) returned 1 [0116.594] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\HueCycle\\NavigationLeft_SelectionSubpicture.png", nBufferLength=0x105, lpBuffer=0x12d270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\HueCycle\\NavigationLeft_SelectionSubpicture.png", lpFilePart=0x0) returned 0x5b [0116.595] SetErrorMode (uMode=0x1) returned 0x0 [0116.596] SetErrorMode (uMode=0x0) returned 0x1 [0116.598] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\HueCycle\\NavigationRight_ButtonGraphic.png", nBufferLength=0x105, lpBuffer=0x12d5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\HueCycle\\NavigationRight_ButtonGraphic.png", lpFilePart=0x0) returned 0x56 [0116.598] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\HueCycle\\NavigationRight_ButtonGraphic.png", nBufferLength=0x105, lpBuffer=0x12d590, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\HueCycle\\NavigationRight_ButtonGraphic.png", lpFilePart=0x0) returned 0x56 [0116.598] SetErrorMode (uMode=0x1) returned 0x0 [0116.598] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\HueCycle\\NavigationRight_ButtonGraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\huecycle\\navigationright_buttongraphic.png"), fInfoLevelId=0x0, lpFileInformation=0x12d810 | out: lpFileInformation=0x12d810*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fbdd476, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6fbdd476, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d14a237, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13a1)) returned 1 [0116.599] SetErrorMode (uMode=0x0) returned 0x1 [0116.599] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\HueCycle\\NavigationRight_ButtonGraphic.png", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\HueCycle\\NavigationRight_ButtonGraphic.png", lpFilePart=0x0) returned 0x56 [0116.599] SetErrorMode (uMode=0x1) returned 0x0 [0116.599] SetErrorMode (uMode=0x0) returned 0x1 [0116.599] GetFileType (hFile=0x31c) returned 0x1 [0116.599] GetFileSize (in: hFile=0x31c, lpFileSizeHigh=0x12d8c8 | out: lpFileSizeHigh=0x12d8c8*=0x0) returned 0x13a1 [0116.599] ReadFile (in: hFile=0x31c, lpBuffer=0x2815e30, nNumberOfBytesToRead=0x13a1, lpNumberOfBytesRead=0x12d7a8, lpOverlapped=0x0 | out: lpBuffer=0x2815e30*, lpNumberOfBytesRead=0x12d7a8*=0x13a1, lpOverlapped=0x0) returned 1 [0116.640] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\HueCycle\\NavigationRight_ButtonGraphic.png", nBufferLength=0x105, lpBuffer=0x12d270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\HueCycle\\NavigationRight_ButtonGraphic.png", lpFilePart=0x0) returned 0x56 [0116.640] SetErrorMode (uMode=0x1) returned 0x0 [0116.642] SetErrorMode (uMode=0x0) returned 0x1 [0116.643] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\HueCycle\\NavigationRight_SelectionSubpicture.png", nBufferLength=0x105, lpBuffer=0x12d5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\HueCycle\\NavigationRight_SelectionSubpicture.png", lpFilePart=0x0) returned 0x5c [0116.643] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\HueCycle\\NavigationRight_SelectionSubpicture.png", nBufferLength=0x105, lpBuffer=0x12d590, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\HueCycle\\NavigationRight_SelectionSubpicture.png", lpFilePart=0x0) returned 0x5c [0116.644] SetErrorMode (uMode=0x1) returned 0x0 [0116.644] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\HueCycle\\NavigationRight_SelectionSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\huecycle\\navigationright_selectionsubpicture.png"), fInfoLevelId=0x0, lpFileInformation=0x12d810 | out: lpFileInformation=0x12d810*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fb911bc, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6fb911bc, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d170395, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc2e)) returned 1 [0116.644] SetErrorMode (uMode=0x0) returned 0x1 [0116.644] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\HueCycle\\NavigationRight_SelectionSubpicture.png", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\HueCycle\\NavigationRight_SelectionSubpicture.png", lpFilePart=0x0) returned 0x5c [0116.644] SetErrorMode (uMode=0x1) returned 0x0 [0116.645] SetErrorMode (uMode=0x0) returned 0x1 [0116.645] GetFileType (hFile=0x31c) returned 0x1 [0116.645] GetFileSize (in: hFile=0x31c, lpFileSizeHigh=0x12d8c8 | out: lpFileSizeHigh=0x12d8c8*=0x0) returned 0xc2e [0116.645] ReadFile (in: hFile=0x31c, lpBuffer=0x2703cb8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12d7a8, lpOverlapped=0x0 | out: lpBuffer=0x2703cb8*, lpNumberOfBytesRead=0x12d7a8*=0xc2e, lpOverlapped=0x0) returned 1 [0116.667] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\HueCycle\\NavigationRight_SelectionSubpicture.png", nBufferLength=0x105, lpBuffer=0x12d270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\HueCycle\\NavigationRight_SelectionSubpicture.png", lpFilePart=0x0) returned 0x5c [0116.667] SetErrorMode (uMode=0x1) returned 0x0 [0116.669] SetErrorMode (uMode=0x0) returned 0x1 [0116.671] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\HueCycle\\NavigationUp_ButtonGraphic.png", nBufferLength=0x105, lpBuffer=0x12d5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\HueCycle\\NavigationUp_ButtonGraphic.png", lpFilePart=0x0) returned 0x53 [0116.671] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\HueCycle\\NavigationUp_ButtonGraphic.png", nBufferLength=0x105, lpBuffer=0x12d590, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\HueCycle\\NavigationUp_ButtonGraphic.png", lpFilePart=0x0) returned 0x53 [0116.671] SetErrorMode (uMode=0x1) returned 0x0 [0116.671] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\HueCycle\\NavigationUp_ButtonGraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\huecycle\\navigationup_buttongraphic.png"), fInfoLevelId=0x0, lpFileInformation=0x12d810 | out: lpFileInformation=0x12d810*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fb911bc, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6fb911bc, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d170395, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x135b)) returned 1 [0116.672] SetErrorMode (uMode=0x0) returned 0x1 [0116.672] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\HueCycle\\NavigationUp_ButtonGraphic.png", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\HueCycle\\NavigationUp_ButtonGraphic.png", lpFilePart=0x0) returned 0x53 [0116.672] SetErrorMode (uMode=0x1) returned 0x0 [0116.673] SetErrorMode (uMode=0x0) returned 0x1 [0116.673] GetFileType (hFile=0x31c) returned 0x1 [0116.673] GetFileSize (in: hFile=0x31c, lpFileSizeHigh=0x12d8c8 | out: lpFileSizeHigh=0x12d8c8*=0x0) returned 0x135b [0116.673] ReadFile (in: hFile=0x31c, lpBuffer=0x27ea160, nNumberOfBytesToRead=0x135b, lpNumberOfBytesRead=0x12d7a8, lpOverlapped=0x0 | out: lpBuffer=0x27ea160*, lpNumberOfBytesRead=0x12d7a8*=0x135b, lpOverlapped=0x0) returned 1 [0116.710] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\HueCycle\\NavigationUp_ButtonGraphic.png", nBufferLength=0x105, lpBuffer=0x12d270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\HueCycle\\NavigationUp_ButtonGraphic.png", lpFilePart=0x0) returned 0x53 [0116.710] SetErrorMode (uMode=0x1) returned 0x0 [0116.712] SetErrorMode (uMode=0x0) returned 0x1 [0116.714] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\HueCycle\\NavigationUp_SelectionSubpicture.png", nBufferLength=0x105, lpBuffer=0x12d5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\HueCycle\\NavigationUp_SelectionSubpicture.png", lpFilePart=0x0) returned 0x59 [0116.714] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\HueCycle\\NavigationUp_SelectionSubpicture.png", nBufferLength=0x105, lpBuffer=0x12d590, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\HueCycle\\NavigationUp_SelectionSubpicture.png", lpFilePart=0x0) returned 0x59 [0116.714] SetErrorMode (uMode=0x1) returned 0x0 [0116.714] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\HueCycle\\NavigationUp_SelectionSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\huecycle\\navigationup_selectionsubpicture.png"), fInfoLevelId=0x0, lpFileInformation=0x12d810 | out: lpFileInformation=0x12d810*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fbb7319, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6fbb7319, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d170395, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc09)) returned 1 [0116.715] SetErrorMode (uMode=0x0) returned 0x1 [0116.715] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\HueCycle\\NavigationUp_SelectionSubpicture.png", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\HueCycle\\NavigationUp_SelectionSubpicture.png", lpFilePart=0x0) returned 0x59 [0116.715] SetErrorMode (uMode=0x1) returned 0x0 [0116.716] SetErrorMode (uMode=0x0) returned 0x1 [0116.716] GetFileType (hFile=0x31c) returned 0x1 [0116.716] GetFileSize (in: hFile=0x31c, lpFileSizeHigh=0x12d8c8 | out: lpFileSizeHigh=0x12d8c8*=0x0) returned 0xc09 [0116.716] ReadFile (in: hFile=0x31c, lpBuffer=0x26d7cf0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12d7a8, lpOverlapped=0x0 | out: lpBuffer=0x26d7cf0*, lpNumberOfBytesRead=0x12d7a8*=0xc09, lpOverlapped=0x0) returned 1 [0116.773] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\HueCycle\\NavigationUp_SelectionSubpicture.png", nBufferLength=0x105, lpBuffer=0x12d270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\HueCycle\\NavigationUp_SelectionSubpicture.png", lpFilePart=0x0) returned 0x59 [0116.773] SetErrorMode (uMode=0x1) returned 0x0 [0116.775] SetErrorMode (uMode=0x0) returned 0x1 [0116.777] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\HueCycle\\title_stripe.png", nBufferLength=0x105, lpBuffer=0x12d5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\HueCycle\\title_stripe.png", lpFilePart=0x0) returned 0x45 [0116.778] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\HueCycle\\title_stripe.png", nBufferLength=0x105, lpBuffer=0x12d590, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\HueCycle\\title_stripe.png", lpFilePart=0x0) returned 0x45 [0116.778] SetErrorMode (uMode=0x1) returned 0x0 [0116.778] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\HueCycle\\title_stripe.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\huecycle\\title_stripe.png"), fInfoLevelId=0x0, lpFileInformation=0x12d810 | out: lpFileInformation=0x12d810*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fb6b05f, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6fb6b05f, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d170395, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xf2f)) returned 1 [0116.778] SetErrorMode (uMode=0x0) returned 0x1 [0116.778] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\HueCycle\\title_stripe.png", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\HueCycle\\title_stripe.png", lpFilePart=0x0) returned 0x45 [0116.778] SetErrorMode (uMode=0x1) returned 0x0 [0116.779] SetErrorMode (uMode=0x0) returned 0x1 [0116.779] GetFileType (hFile=0x31c) returned 0x1 [0116.779] GetFileSize (in: hFile=0x31c, lpFileSizeHigh=0x12d8c8 | out: lpFileSizeHigh=0x12d8c8*=0x0) returned 0xf2f [0116.779] ReadFile (in: hFile=0x31c, lpBuffer=0x27befa8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12d7a8, lpOverlapped=0x0 | out: lpBuffer=0x27befa8*, lpNumberOfBytesRead=0x12d7a8*=0xf2f, lpOverlapped=0x0) returned 1 [0116.800] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\HueCycle\\title_stripe.png", nBufferLength=0x105, lpBuffer=0x12d270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\HueCycle\\title_stripe.png", lpFilePart=0x0) returned 0x45 [0116.800] SetErrorMode (uMode=0x1) returned 0x0 [0116.802] SetErrorMode (uMode=0x0) returned 0x1 [0116.804] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\HueCycle\\Decrypt Instructions.txt", nBufferLength=0x105, lpBuffer=0x12d240, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\HueCycle\\Decrypt Instructions.txt", lpFilePart=0x0) returned 0x4d [0116.804] SetErrorMode (uMode=0x1) returned 0x0 [0116.805] SetErrorMode (uMode=0x0) returned 0x1 [0116.805] GetFileType (hFile=0x31c) returned 0x1 [0116.805] WriteFile (in: hFile=0x31c, lpBuffer=0x28a8cd0*, nNumberOfBytesToWrite=0x773, lpNumberOfBytesWritten=0x12d7a8, lpOverlapped=0x0 | out: lpBuffer=0x28a8cd0*, lpNumberOfBytesWritten=0x12d7a8*=0x773, lpOverlapped=0x0) returned 1 [0116.807] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\HueCycle", nBufferLength=0x105, lpBuffer=0x12d430, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\HueCycle", lpFilePart=0x0) returned 0x34 [0116.807] SetErrorMode (uMode=0x1) returned 0x0 [0116.807] FindFirstFileW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\HueCycle\\*", lpFindFileData=0x12d5d0 | out: lpFindFileData=0x12d5d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa0fd11ff, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x65af5910, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x65af5910, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x26bc80 [0116.808] FindClose (in: hFindFile=0x26bc80 | out: hFindFile=0x26bc80) returned 1 [0116.808] SetErrorMode (uMode=0x0) returned 0x1 [0116.808] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\LayeredTitles", nBufferLength=0x105, lpBuffer=0x12d390, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\LayeredTitles", lpFilePart=0x0) returned 0x39 [0116.808] SetErrorMode (uMode=0x1) returned 0x0 [0116.808] FindFirstFileW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\LayeredTitles\\*", lpFindFileData=0x12d530 | out: lpFindFileData=0x12d530*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa19a729d, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa7fa6b2, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa1a3fc59, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x26bc80 [0116.811] FindClose (in: hFindFile=0x26bc80 | out: hFindFile=0x26bc80) returned 1 [0116.812] SetErrorMode (uMode=0x0) returned 0x1 [0116.812] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\LayeredTitles\\1047x576black.png", nBufferLength=0x105, lpBuffer=0x12d5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\LayeredTitles\\1047x576black.png", lpFilePart=0x0) returned 0x4b [0116.812] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\LayeredTitles\\1047x576black.png", nBufferLength=0x105, lpBuffer=0x12d590, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\LayeredTitles\\1047x576black.png", lpFilePart=0x0) returned 0x4b [0116.813] SetErrorMode (uMode=0x1) returned 0x0 [0116.813] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\LayeredTitles\\1047x576black.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\layeredtitles\\1047x576black.png"), fInfoLevelId=0x0, lpFileInformation=0x12d810 | out: lpFileInformation=0x12d810*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70bee7b2, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70bee7b2, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d170395, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x11da)) returned 1 [0116.815] SetErrorMode (uMode=0x0) returned 0x1 [0116.815] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\LayeredTitles\\1047x576black.png", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\LayeredTitles\\1047x576black.png", lpFilePart=0x0) returned 0x4b [0116.815] SetErrorMode (uMode=0x1) returned 0x0 [0116.815] SetErrorMode (uMode=0x0) returned 0x1 [0116.815] GetFileType (hFile=0x31c) returned 0x1 [0116.815] GetFileSize (in: hFile=0x31c, lpFileSizeHigh=0x12d8c8 | out: lpFileSizeHigh=0x12d8c8*=0x0) returned 0x11da [0116.816] ReadFile (in: hFile=0x31c, lpBuffer=0x28ad398, nNumberOfBytesToRead=0x11da, lpNumberOfBytesRead=0x12d7a8, lpOverlapped=0x0 | out: lpBuffer=0x28ad398*, lpNumberOfBytesRead=0x12d7a8*=0x11da, lpOverlapped=0x0) returned 1 [0116.846] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\LayeredTitles\\1047x576black.png", nBufferLength=0x105, lpBuffer=0x12d270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\LayeredTitles\\1047x576black.png", lpFilePart=0x0) returned 0x4b [0116.846] SetErrorMode (uMode=0x1) returned 0x0 [0116.848] SetErrorMode (uMode=0x0) returned 0x1 [0116.850] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\LayeredTitles\\203x8subpicture.png", nBufferLength=0x105, lpBuffer=0x12d5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\LayeredTitles\\203x8subpicture.png", lpFilePart=0x0) returned 0x4d [0116.850] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\LayeredTitles\\203x8subpicture.png", nBufferLength=0x105, lpBuffer=0x12d590, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\LayeredTitles\\203x8subpicture.png", lpFilePart=0x0) returned 0x4d [0116.850] SetErrorMode (uMode=0x1) returned 0x0 [0116.850] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\LayeredTitles\\203x8subpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\layeredtitles\\203x8subpicture.png"), fInfoLevelId=0x0, lpFileInformation=0x12d810 | out: lpFileInformation=0x12d810*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70c60bc9, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70c60bc9, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d170395, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xb04)) returned 1 [0116.851] SetErrorMode (uMode=0x0) returned 0x1 [0116.851] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\LayeredTitles\\203x8subpicture.png", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\LayeredTitles\\203x8subpicture.png", lpFilePart=0x0) returned 0x4d [0116.851] SetErrorMode (uMode=0x1) returned 0x0 [0116.852] SetErrorMode (uMode=0x0) returned 0x1 [0116.852] GetFileType (hFile=0x31c) returned 0x1 [0116.852] GetFileSize (in: hFile=0x31c, lpFileSizeHigh=0x12d8c8 | out: lpFileSizeHigh=0x12d8c8*=0x0) returned 0xb04 [0116.852] ReadFile (in: hFile=0x31c, lpBuffer=0x279b2d0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12d7a8, lpOverlapped=0x0 | out: lpBuffer=0x279b2d0*, lpNumberOfBytesRead=0x12d7a8*=0xb04, lpOverlapped=0x0) returned 1 [0116.885] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\LayeredTitles\\203x8subpicture.png", nBufferLength=0x105, lpBuffer=0x12d270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\LayeredTitles\\203x8subpicture.png", lpFilePart=0x0) returned 0x4d [0116.885] SetErrorMode (uMode=0x1) returned 0x0 [0116.887] SetErrorMode (uMode=0x0) returned 0x1 [0116.889] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\LayeredTitles\\blackbars60.png", nBufferLength=0x105, lpBuffer=0x12d5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\LayeredTitles\\blackbars60.png", lpFilePart=0x0) returned 0x49 [0116.889] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\LayeredTitles\\blackbars60.png", nBufferLength=0x105, lpBuffer=0x12d590, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\LayeredTitles\\blackbars60.png", lpFilePart=0x0) returned 0x49 [0116.889] SetErrorMode (uMode=0x1) returned 0x0 [0116.889] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\LayeredTitles\\blackbars60.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\layeredtitles\\blackbars60.png"), fInfoLevelId=0x0, lpFileInformation=0x12d810 | out: lpFileInformation=0x12d810*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70c1490f, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70c1490f, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d1964f3, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x191f)) returned 1 [0116.890] SetErrorMode (uMode=0x0) returned 0x1 [0116.890] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\LayeredTitles\\blackbars60.png", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\LayeredTitles\\blackbars60.png", lpFilePart=0x0) returned 0x49 [0116.890] SetErrorMode (uMode=0x1) returned 0x0 [0116.890] SetErrorMode (uMode=0x0) returned 0x1 [0116.890] GetFileType (hFile=0x31c) returned 0x1 [0116.890] GetFileSize (in: hFile=0x31c, lpFileSizeHigh=0x12d8c8 | out: lpFileSizeHigh=0x12d8c8*=0x0) returned 0x191f [0116.891] ReadFile (in: hFile=0x31c, lpBuffer=0x28810c8, nNumberOfBytesToRead=0x191f, lpNumberOfBytesRead=0x12d7a8, lpOverlapped=0x0 | out: lpBuffer=0x28810c8*, lpNumberOfBytesRead=0x12d7a8*=0x191f, lpOverlapped=0x0) returned 1 [0116.930] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\LayeredTitles\\blackbars60.png", nBufferLength=0x105, lpBuffer=0x12d270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\LayeredTitles\\blackbars60.png", lpFilePart=0x0) returned 0x49 [0116.930] SetErrorMode (uMode=0x1) returned 0x0 [0116.932] SetErrorMode (uMode=0x0) returned 0x1 [0116.934] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\LayeredTitles\\layers.png", nBufferLength=0x105, lpBuffer=0x12d5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\LayeredTitles\\layers.png", lpFilePart=0x0) returned 0x44 [0116.934] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\LayeredTitles\\layers.png", nBufferLength=0x105, lpBuffer=0x12d590, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\LayeredTitles\\layers.png", lpFilePart=0x0) returned 0x44 [0116.934] SetErrorMode (uMode=0x1) returned 0x0 [0116.934] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\LayeredTitles\\layers.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\layeredtitles\\layers.png"), fInfoLevelId=0x0, lpFileInformation=0x12d810 | out: lpFileInformation=0x12d810*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70abdcca, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70abdcca, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d1964f3, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x5fed)) returned 1 [0116.935] SetErrorMode (uMode=0x0) returned 0x1 [0116.935] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\LayeredTitles\\layers.png", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\LayeredTitles\\layers.png", lpFilePart=0x0) returned 0x44 [0116.935] SetErrorMode (uMode=0x1) returned 0x0 [0116.935] SetErrorMode (uMode=0x0) returned 0x1 [0116.935] GetFileType (hFile=0x31c) returned 0x1 [0116.935] GetFileSize (in: hFile=0x31c, lpFileSizeHigh=0x12d8c8 | out: lpFileSizeHigh=0x12d8c8*=0x0) returned 0x5fed [0116.935] ReadFile (in: hFile=0x31c, lpBuffer=0x27702d8, nNumberOfBytesToRead=0x5fed, lpNumberOfBytesRead=0x12d7a8, lpOverlapped=0x0 | out: lpBuffer=0x27702d8*, lpNumberOfBytesRead=0x12d7a8*=0x5fed, lpOverlapped=0x0) returned 1 [0116.958] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\LayeredTitles\\layers.png", nBufferLength=0x105, lpBuffer=0x12d270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\LayeredTitles\\layers.png", lpFilePart=0x0) returned 0x44 [0116.959] SetErrorMode (uMode=0x1) returned 0x0 [0116.961] SetErrorMode (uMode=0x0) returned 0x1 [0116.963] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\LayeredTitles\\NavigationLeft_ButtonGraphic.png", nBufferLength=0x105, lpBuffer=0x12d5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\LayeredTitles\\NavigationLeft_ButtonGraphic.png", lpFilePart=0x0) returned 0x5a [0116.963] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\LayeredTitles\\NavigationLeft_ButtonGraphic.png", nBufferLength=0x105, lpBuffer=0x12d590, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\LayeredTitles\\NavigationLeft_ButtonGraphic.png", lpFilePart=0x0) returned 0x5a [0116.963] SetErrorMode (uMode=0x1) returned 0x0 [0116.963] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\LayeredTitles\\NavigationLeft_ButtonGraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\layeredtitles\\navigationleft_buttongraphic.png"), fInfoLevelId=0x0, lpFileInformation=0x12d810 | out: lpFileInformation=0x12d810*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70ba24f8, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70ba24f8, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d1964f3, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13e0)) returned 1 [0116.965] SetErrorMode (uMode=0x0) returned 0x1 [0116.965] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\LayeredTitles\\NavigationLeft_ButtonGraphic.png", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\LayeredTitles\\NavigationLeft_ButtonGraphic.png", lpFilePart=0x0) returned 0x5a [0116.965] SetErrorMode (uMode=0x1) returned 0x0 [0116.965] SetErrorMode (uMode=0x0) returned 0x1 [0116.965] GetFileType (hFile=0x31c) returned 0x1 [0116.966] GetFileSize (in: hFile=0x31c, lpFileSizeHigh=0x12d8c8 | out: lpFileSizeHigh=0x12d8c8*=0x0) returned 0x13e0 [0116.966] ReadFile (in: hFile=0x31c, lpBuffer=0x2875978, nNumberOfBytesToRead=0x13e0, lpNumberOfBytesRead=0x12d7a8, lpOverlapped=0x0 | out: lpBuffer=0x2875978*, lpNumberOfBytesRead=0x12d7a8*=0x13e0, lpOverlapped=0x0) returned 1 [0116.995] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\LayeredTitles\\NavigationLeft_ButtonGraphic.png", nBufferLength=0x105, lpBuffer=0x12d270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\LayeredTitles\\NavigationLeft_ButtonGraphic.png", lpFilePart=0x0) returned 0x5a [0116.995] SetErrorMode (uMode=0x1) returned 0x0 [0116.997] SetErrorMode (uMode=0x0) returned 0x1 [0116.998] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\LayeredTitles\\NavigationLeft_SelectionSubpicture.png", nBufferLength=0x105, lpBuffer=0x12d5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\LayeredTitles\\NavigationLeft_SelectionSubpicture.png", lpFilePart=0x0) returned 0x60 [0116.999] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\LayeredTitles\\NavigationLeft_SelectionSubpicture.png", nBufferLength=0x105, lpBuffer=0x12d590, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\LayeredTitles\\NavigationLeft_SelectionSubpicture.png", lpFilePart=0x0) returned 0x60 [0116.999] SetErrorMode (uMode=0x1) returned 0x0 [0116.999] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\LayeredTitles\\NavigationLeft_SelectionSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\layeredtitles\\navigationleft_selectionsubpicture.png"), fInfoLevelId=0x0, lpFileInformation=0x12d810 | out: lpFileInformation=0x12d810*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70b5623e, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70b5623e, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d1964f3, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc3a)) returned 1 [0117.003] SetErrorMode (uMode=0x0) returned 0x1 [0117.003] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\LayeredTitles\\NavigationLeft_SelectionSubpicture.png", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\LayeredTitles\\NavigationLeft_SelectionSubpicture.png", lpFilePart=0x0) returned 0x60 [0117.003] SetErrorMode (uMode=0x1) returned 0x0 [0117.003] SetErrorMode (uMode=0x0) returned 0x1 [0117.003] GetFileType (hFile=0x31c) returned 0x1 [0117.003] GetFileSize (in: hFile=0x31c, lpFileSizeHigh=0x12d8c8 | out: lpFileSizeHigh=0x12d8c8*=0x0) returned 0xc3a [0117.003] ReadFile (in: hFile=0x31c, lpBuffer=0x27643b0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12d7a8, lpOverlapped=0x0 | out: lpBuffer=0x27643b0*, lpNumberOfBytesRead=0x12d7a8*=0xc3a, lpOverlapped=0x0) returned 1 [0117.027] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\LayeredTitles\\NavigationLeft_SelectionSubpicture.png", nBufferLength=0x105, lpBuffer=0x12d270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\LayeredTitles\\NavigationLeft_SelectionSubpicture.png", lpFilePart=0x0) returned 0x60 [0117.027] SetErrorMode (uMode=0x1) returned 0x0 [0117.029] SetErrorMode (uMode=0x0) returned 0x1 [0117.031] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\LayeredTitles\\NavigationRight_ButtonGraphic.png", nBufferLength=0x105, lpBuffer=0x12d5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\LayeredTitles\\NavigationRight_ButtonGraphic.png", lpFilePart=0x0) returned 0x5b [0117.031] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\LayeredTitles\\NavigationRight_ButtonGraphic.png", nBufferLength=0x105, lpBuffer=0x12d590, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\LayeredTitles\\NavigationRight_ButtonGraphic.png", lpFilePart=0x0) returned 0x5b [0117.031] SetErrorMode (uMode=0x1) returned 0x0 [0117.031] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\LayeredTitles\\NavigationRight_ButtonGraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\layeredtitles\\navigationright_buttongraphic.png"), fInfoLevelId=0x0, lpFileInformation=0x12d810 | out: lpFileInformation=0x12d810*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70ba24f8, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70ba24f8, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d1964f3, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13a1)) returned 1 [0117.033] SetErrorMode (uMode=0x0) returned 0x1 [0117.033] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\LayeredTitles\\NavigationRight_ButtonGraphic.png", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\LayeredTitles\\NavigationRight_ButtonGraphic.png", lpFilePart=0x0) returned 0x5b [0117.034] SetErrorMode (uMode=0x1) returned 0x0 [0117.034] SetErrorMode (uMode=0x0) returned 0x1 [0117.034] GetFileType (hFile=0x31c) returned 0x1 [0117.034] GetFileSize (in: hFile=0x31c, lpFileSizeHigh=0x12d8c8 | out: lpFileSizeHigh=0x12d8c8*=0x0) returned 0x13a1 [0117.034] ReadFile (in: hFile=0x31c, lpBuffer=0x284a908, nNumberOfBytesToRead=0x13a1, lpNumberOfBytesRead=0x12d7a8, lpOverlapped=0x0 | out: lpBuffer=0x284a908*, lpNumberOfBytesRead=0x12d7a8*=0x13a1, lpOverlapped=0x0) returned 1 [0117.062] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\LayeredTitles\\NavigationRight_ButtonGraphic.png", nBufferLength=0x105, lpBuffer=0x12d270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\LayeredTitles\\NavigationRight_ButtonGraphic.png", lpFilePart=0x0) returned 0x5b [0117.062] SetErrorMode (uMode=0x1) returned 0x0 [0117.065] SetErrorMode (uMode=0x0) returned 0x1 [0117.065] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\LayeredTitles\\NavigationRight_SelectionSubpicture.png", nBufferLength=0x105, lpBuffer=0x12d5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\LayeredTitles\\NavigationRight_SelectionSubpicture.png", lpFilePart=0x0) returned 0x61 [0117.066] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\LayeredTitles\\NavigationRight_SelectionSubpicture.png", nBufferLength=0x105, lpBuffer=0x12d590, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\LayeredTitles\\NavigationRight_SelectionSubpicture.png", lpFilePart=0x0) returned 0x61 [0117.066] SetErrorMode (uMode=0x1) returned 0x0 [0117.066] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\LayeredTitles\\NavigationRight_SelectionSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\layeredtitles\\navigationright_selectionsubpicture.png"), fInfoLevelId=0x0, lpFileInformation=0x12d810 | out: lpFileInformation=0x12d810*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70b300e1, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70b300e1, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d1964f3, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc2e)) returned 1 [0117.068] SetErrorMode (uMode=0x0) returned 0x1 [0117.068] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\LayeredTitles\\NavigationRight_SelectionSubpicture.png", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\LayeredTitles\\NavigationRight_SelectionSubpicture.png", lpFilePart=0x0) returned 0x61 [0117.068] SetErrorMode (uMode=0x1) returned 0x0 [0117.068] SetErrorMode (uMode=0x0) returned 0x1 [0117.068] GetFileType (hFile=0x31c) returned 0x1 [0117.069] GetFileSize (in: hFile=0x31c, lpFileSizeHigh=0x12d8c8 | out: lpFileSizeHigh=0x12d8c8*=0x0) returned 0xc2e [0117.069] ReadFile (in: hFile=0x31c, lpBuffer=0x27387e8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12d7a8, lpOverlapped=0x0 | out: lpBuffer=0x27387e8*, lpNumberOfBytesRead=0x12d7a8*=0xc2e, lpOverlapped=0x0) returned 1 [0117.093] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\LayeredTitles\\NavigationRight_SelectionSubpicture.png", nBufferLength=0x105, lpBuffer=0x12d270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\LayeredTitles\\NavigationRight_SelectionSubpicture.png", lpFilePart=0x0) returned 0x61 [0117.093] SetErrorMode (uMode=0x1) returned 0x0 [0117.094] SetErrorMode (uMode=0x0) returned 0x1 [0117.094] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\LayeredTitles\\NavigationUp_ButtonGraphic.png", nBufferLength=0x105, lpBuffer=0x12d5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\LayeredTitles\\NavigationUp_ButtonGraphic.png", lpFilePart=0x0) returned 0x58 [0117.094] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\LayeredTitles\\NavigationUp_ButtonGraphic.png", nBufferLength=0x105, lpBuffer=0x12d590, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\LayeredTitles\\NavigationUp_ButtonGraphic.png", lpFilePart=0x0) returned 0x58 [0117.094] SetErrorMode (uMode=0x1) returned 0x0 [0117.095] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\LayeredTitles\\NavigationUp_ButtonGraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\layeredtitles\\navigationup_buttongraphic.png"), fInfoLevelId=0x0, lpFileInformation=0x12d810 | out: lpFileInformation=0x12d810*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70ae3e27, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70ae3e27, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d1964f3, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x135b)) returned 1 [0117.096] SetErrorMode (uMode=0x0) returned 0x1 [0117.096] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\LayeredTitles\\NavigationUp_ButtonGraphic.png", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\LayeredTitles\\NavigationUp_ButtonGraphic.png", lpFilePart=0x0) returned 0x58 [0117.096] SetErrorMode (uMode=0x1) returned 0x0 [0117.096] SetErrorMode (uMode=0x0) returned 0x1 [0117.096] GetFileType (hFile=0x31c) returned 0x1 [0117.096] GetFileSize (in: hFile=0x31c, lpFileSizeHigh=0x12d8c8 | out: lpFileSizeHigh=0x12d8c8*=0x0) returned 0x135b [0117.096] ReadFile (in: hFile=0x31c, lpBuffer=0x281ece0, nNumberOfBytesToRead=0x135b, lpNumberOfBytesRead=0x12d7a8, lpOverlapped=0x0 | out: lpBuffer=0x281ece0*, lpNumberOfBytesRead=0x12d7a8*=0x135b, lpOverlapped=0x0) returned 1 [0117.125] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\LayeredTitles\\NavigationUp_ButtonGraphic.png", nBufferLength=0x105, lpBuffer=0x12d270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\LayeredTitles\\NavigationUp_ButtonGraphic.png", lpFilePart=0x0) returned 0x58 [0117.126] SetErrorMode (uMode=0x1) returned 0x0 [0117.127] SetErrorMode (uMode=0x0) returned 0x1 [0117.127] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\LayeredTitles\\NavigationUp_SelectionSubpicture.png", nBufferLength=0x105, lpBuffer=0x12d5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\LayeredTitles\\NavigationUp_SelectionSubpicture.png", lpFilePart=0x0) returned 0x5e [0117.127] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\LayeredTitles\\NavigationUp_SelectionSubpicture.png", nBufferLength=0x105, lpBuffer=0x12d590, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\LayeredTitles\\NavigationUp_SelectionSubpicture.png", lpFilePart=0x0) returned 0x5e [0117.127] SetErrorMode (uMode=0x1) returned 0x0 [0117.127] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\LayeredTitles\\NavigationUp_SelectionSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\layeredtitles\\navigationup_selectionsubpicture.png"), fInfoLevelId=0x0, lpFileInformation=0x12d810 | out: lpFileInformation=0x12d810*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70b5623e, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70b5623e, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d1964f3, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc09)) returned 1 [0117.128] SetErrorMode (uMode=0x0) returned 0x1 [0117.128] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\LayeredTitles\\NavigationUp_SelectionSubpicture.png", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\LayeredTitles\\NavigationUp_SelectionSubpicture.png", lpFilePart=0x0) returned 0x5e [0117.129] SetErrorMode (uMode=0x1) returned 0x0 [0117.129] SetErrorMode (uMode=0x0) returned 0x1 [0117.129] GetFileType (hFile=0x31c) returned 0x1 [0117.129] GetFileSize (in: hFile=0x31c, lpFileSizeHigh=0x12d8c8 | out: lpFileSizeHigh=0x12d8c8*=0x0) returned 0xc09 [0117.129] ReadFile (in: hFile=0x31c, lpBuffer=0x270c8d8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12d7a8, lpOverlapped=0x0 | out: lpBuffer=0x270c8d8*, lpNumberOfBytesRead=0x12d7a8*=0xc09, lpOverlapped=0x0) returned 1 [0117.152] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\LayeredTitles\\NavigationUp_SelectionSubpicture.png", nBufferLength=0x105, lpBuffer=0x12d270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\LayeredTitles\\NavigationUp_SelectionSubpicture.png", lpFilePart=0x0) returned 0x5e [0117.152] SetErrorMode (uMode=0x1) returned 0x0 [0117.153] SetErrorMode (uMode=0x0) returned 0x1 [0117.153] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\LayeredTitles\\Decrypt Instructions.txt", nBufferLength=0x105, lpBuffer=0x12d240, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\LayeredTitles\\Decrypt Instructions.txt", lpFilePart=0x0) returned 0x52 [0117.153] SetErrorMode (uMode=0x1) returned 0x0 [0117.154] SetErrorMode (uMode=0x0) returned 0x1 [0117.154] GetFileType (hFile=0x31c) returned 0x1 [0117.154] WriteFile (in: hFile=0x31c, lpBuffer=0x27f5a78*, nNumberOfBytesToWrite=0x773, lpNumberOfBytesWritten=0x12d7a8, lpOverlapped=0x0 | out: lpBuffer=0x27f5a78*, lpNumberOfBytesWritten=0x12d7a8*=0x773, lpOverlapped=0x0) returned 1 [0117.156] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\LayeredTitles", nBufferLength=0x105, lpBuffer=0x12d430, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\LayeredTitles", lpFilePart=0x0) returned 0x39 [0117.156] SetErrorMode (uMode=0x1) returned 0x0 [0117.156] FindFirstFileW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\LayeredTitles\\*", lpFindFileData=0x12d5d0 | out: lpFindFileData=0x12d5d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa19a729d, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x65e618b0, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x65e618b0, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x26bc80 [0117.156] FindClose (in: hFindFile=0x26bc80 | out: hFindFile=0x26bc80) returned 1 [0117.156] SetErrorMode (uMode=0x0) returned 0x1 [0117.157] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Memories", nBufferLength=0x105, lpBuffer=0x12d390, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Memories", lpFilePart=0x0) returned 0x34 [0117.157] SetErrorMode (uMode=0x1) returned 0x0 [0117.157] FindFirstFileW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Memories\\*", lpFindFileData=0x12d530 | out: lpFindFileData=0x12d530*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9fbd8be5, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaab41c3c, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9fdc8b88, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x26bc80 [0117.159] FindClose (in: hFindFile=0x26bc80 | out: hFindFile=0x26bc80) returned 1 [0117.160] SetErrorMode (uMode=0x0) returned 0x1 [0117.160] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Memories\\16_9-frame-background.png", nBufferLength=0x105, lpBuffer=0x12d5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Memories\\16_9-frame-background.png", lpFilePart=0x0) returned 0x4e [0117.160] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Memories\\16_9-frame-background.png", nBufferLength=0x105, lpBuffer=0x12d590, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Memories\\16_9-frame-background.png", lpFilePart=0x0) returned 0x4e [0117.160] SetErrorMode (uMode=0x1) returned 0x0 [0117.160] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Memories\\16_9-frame-background.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\memories\\16_9-frame-background.png"), fInfoLevelId=0x0, lpFileInformation=0x12d810 | out: lpFileInformation=0x12d810*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x710d74af, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x710d74af, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d1964f3, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xb08f)) returned 1 [0117.162] SetErrorMode (uMode=0x0) returned 0x1 [0117.162] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Memories\\16_9-frame-background.png", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Memories\\16_9-frame-background.png", lpFilePart=0x0) returned 0x4e [0117.163] SetErrorMode (uMode=0x1) returned 0x0 [0117.163] SetErrorMode (uMode=0x0) returned 0x1 [0117.163] GetFileType (hFile=0x31c) returned 0x1 [0117.163] GetFileSize (in: hFile=0x31c, lpFileSizeHigh=0x12d8c8 | out: lpFileSizeHigh=0x12d8c8*=0x0) returned 0xb08f [0117.163] ReadFile (in: hFile=0x31c, lpBuffer=0x27fa9f0, nNumberOfBytesToRead=0xb08f, lpNumberOfBytesRead=0x12d7a8, lpOverlapped=0x0 | out: lpBuffer=0x27fa9f0*, lpNumberOfBytesRead=0x12d7a8*=0xb08f, lpOverlapped=0x0) returned 1 [0117.191] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Memories\\16_9-frame-background.png", nBufferLength=0x105, lpBuffer=0x12d270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Memories\\16_9-frame-background.png", lpFilePart=0x0) returned 0x4e [0117.191] SetErrorMode (uMode=0x1) returned 0x0 [0117.192] SetErrorMode (uMode=0x0) returned 0x1 [0117.192] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Memories\\16_9-frame-highlight.png", nBufferLength=0x105, lpBuffer=0x12d5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Memories\\16_9-frame-highlight.png", lpFilePart=0x0) returned 0x4d [0117.192] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Memories\\16_9-frame-highlight.png", nBufferLength=0x105, lpBuffer=0x12d590, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Memories\\16_9-frame-highlight.png", lpFilePart=0x0) returned 0x4d [0117.192] SetErrorMode (uMode=0x1) returned 0x0 [0117.193] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Memories\\16_9-frame-highlight.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\memories\\16_9-frame-highlight.png"), fInfoLevelId=0x0, lpFileInformation=0x12d810 | out: lpFileInformation=0x12d810*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x710fd60c, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x710fd60c, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d1bc651, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc32)) returned 1 [0117.193] SetErrorMode (uMode=0x0) returned 0x1 [0117.193] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Memories\\16_9-frame-highlight.png", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Memories\\16_9-frame-highlight.png", lpFilePart=0x0) returned 0x4d [0117.193] SetErrorMode (uMode=0x1) returned 0x0 [0117.193] SetErrorMode (uMode=0x0) returned 0x1 [0117.193] GetFileType (hFile=0x31c) returned 0x1 [0117.194] GetFileSize (in: hFile=0x31c, lpFileSizeHigh=0x12d8c8 | out: lpFileSizeHigh=0x12d8c8*=0x0) returned 0xc32 [0117.194] ReadFile (in: hFile=0x31c, lpBuffer=0x27183f0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12d7a8, lpOverlapped=0x0 | out: lpBuffer=0x27183f0*, lpNumberOfBytesRead=0x12d7a8*=0xc32, lpOverlapped=0x0) returned 1 [0117.217] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Memories\\16_9-frame-highlight.png", nBufferLength=0x105, lpBuffer=0x12d270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Memories\\16_9-frame-highlight.png", lpFilePart=0x0) returned 0x4d [0117.217] SetErrorMode (uMode=0x1) returned 0x0 [0117.218] SetErrorMode (uMode=0x0) returned 0x1 [0117.219] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Memories\\16_9-frame-image-mask.png", nBufferLength=0x105, lpBuffer=0x12d5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Memories\\16_9-frame-image-mask.png", lpFilePart=0x0) returned 0x4e [0117.219] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Memories\\16_9-frame-image-mask.png", nBufferLength=0x105, lpBuffer=0x12d590, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Memories\\16_9-frame-image-mask.png", lpFilePart=0x0) returned 0x4e [0117.219] SetErrorMode (uMode=0x1) returned 0x0 [0117.219] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Memories\\16_9-frame-image-mask.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\memories\\16_9-frame-image-mask.png"), fInfoLevelId=0x0, lpFileInformation=0x12d810 | out: lpFileInformation=0x12d810*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71123769, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x71123769, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d1bc651, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x578)) returned 1 [0117.219] SetErrorMode (uMode=0x0) returned 0x1 [0117.220] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Memories\\16_9-frame-image-mask.png", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Memories\\16_9-frame-image-mask.png", lpFilePart=0x0) returned 0x4e [0117.220] SetErrorMode (uMode=0x1) returned 0x0 [0117.220] SetErrorMode (uMode=0x0) returned 0x1 [0117.220] GetFileType (hFile=0x31c) returned 0x1 [0117.220] GetFileSize (in: hFile=0x31c, lpFileSizeHigh=0x12d8c8 | out: lpFileSizeHigh=0x12d8c8*=0x0) returned 0x578 [0117.220] ReadFile (in: hFile=0x31c, lpBuffer=0x27fedc0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12d7a8, lpOverlapped=0x0 | out: lpBuffer=0x27fedc0*, lpNumberOfBytesRead=0x12d7a8*=0x578, lpOverlapped=0x0) returned 1 [0117.241] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Memories\\16_9-frame-image-mask.png", nBufferLength=0x105, lpBuffer=0x12d270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Memories\\16_9-frame-image-mask.png", lpFilePart=0x0) returned 0x4e [0117.241] SetErrorMode (uMode=0x1) returned 0x0 [0117.242] SetErrorMode (uMode=0x0) returned 0x1 [0117.242] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Memories\\16_9-frame-overlay.png", nBufferLength=0x105, lpBuffer=0x12d5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Memories\\16_9-frame-overlay.png", lpFilePart=0x0) returned 0x4b [0117.242] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Memories\\16_9-frame-overlay.png", nBufferLength=0x105, lpBuffer=0x12d590, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Memories\\16_9-frame-overlay.png", lpFilePart=0x0) returned 0x4b [0117.242] SetErrorMode (uMode=0x1) returned 0x0 [0117.242] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Memories\\16_9-frame-overlay.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\memories\\16_9-frame-overlay.png"), fInfoLevelId=0x0, lpFileInformation=0x12d810 | out: lpFileInformation=0x12d810*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x711498c6, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x711498c6, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d1bc651, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x8c12)) returned 1 [0117.243] SetErrorMode (uMode=0x0) returned 0x1 [0117.243] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Memories\\16_9-frame-overlay.png", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Memories\\16_9-frame-overlay.png", lpFilePart=0x0) returned 0x4b [0117.243] SetErrorMode (uMode=0x1) returned 0x0 [0117.243] SetErrorMode (uMode=0x0) returned 0x1 [0117.243] GetFileType (hFile=0x31c) returned 0x1 [0117.243] GetFileSize (in: hFile=0x31c, lpFileSizeHigh=0x12d8c8 | out: lpFileSizeHigh=0x12d8c8*=0x0) returned 0x8c12 [0117.244] ReadFile (in: hFile=0x31c, lpBuffer=0x28e2d00, nNumberOfBytesToRead=0x8c12, lpNumberOfBytesRead=0x12d7a8, lpOverlapped=0x0 | out: lpBuffer=0x28e2d00*, lpNumberOfBytesRead=0x12d7a8*=0x8c12, lpOverlapped=0x0) returned 1 [0117.271] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Memories\\16_9-frame-overlay.png", nBufferLength=0x105, lpBuffer=0x12d270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Memories\\16_9-frame-overlay.png", lpFilePart=0x0) returned 0x4b [0117.271] SetErrorMode (uMode=0x1) returned 0x0 [0117.272] SetErrorMode (uMode=0x0) returned 0x1 [0117.272] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Memories\\background.png", nBufferLength=0x105, lpBuffer=0x12d5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Memories\\background.png", lpFilePart=0x0) returned 0x43 [0117.272] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Memories\\background.png", nBufferLength=0x105, lpBuffer=0x12d590, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Memories\\background.png", lpFilePart=0x0) returned 0x43 [0117.272] SetErrorMode (uMode=0x1) returned 0x0 [0117.273] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Memories\\background.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\memories\\background.png"), fInfoLevelId=0x0, lpFileInformation=0x12d810 | out: lpFileInformation=0x12d810*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71254251, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x71254251, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d1bc651, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x2f993)) returned 1 [0117.274] SetErrorMode (uMode=0x0) returned 0x1 [0117.274] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Memories\\background.png", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Memories\\background.png", lpFilePart=0x0) returned 0x43 [0117.274] SetErrorMode (uMode=0x1) returned 0x0 [0117.274] SetErrorMode (uMode=0x0) returned 0x1 [0117.274] GetFileType (hFile=0x31c) returned 0x1 [0117.274] GetFileSize (in: hFile=0x31c, lpFileSizeHigh=0x12d8c8 | out: lpFileSizeHigh=0x12d8c8*=0x0) returned 0x2f993 [0117.277] ReadFile (in: hFile=0x31c, lpBuffer=0x12820888, nNumberOfBytesToRead=0x2f993, lpNumberOfBytesRead=0x12d7a8, lpOverlapped=0x0 | out: lpBuffer=0x12820888*, lpNumberOfBytesRead=0x12d7a8*=0x2f993, lpOverlapped=0x0) returned 1 [0117.316] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Memories\\background.png", nBufferLength=0x105, lpBuffer=0x12d270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Memories\\background.png", lpFilePart=0x0) returned 0x43 [0117.316] SetErrorMode (uMode=0x1) returned 0x0 [0117.316] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Memories\\background.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\memories\\background.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0117.317] SetErrorMode (uMode=0x0) returned 0x1 [0117.318] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Memories\\btn-back-static.png", nBufferLength=0x105, lpBuffer=0x12d5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Memories\\btn-back-static.png", lpFilePart=0x0) returned 0x48 [0117.318] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Memories\\btn-back-static.png", nBufferLength=0x105, lpBuffer=0x12d590, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Memories\\btn-back-static.png", lpFilePart=0x0) returned 0x48 [0117.318] SetErrorMode (uMode=0x1) returned 0x0 [0117.318] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Memories\\btn-back-static.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\memories\\btn-back-static.png"), fInfoLevelId=0x0, lpFileInformation=0x12d810 | out: lpFileInformation=0x12d810*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7116fa23, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x7116fa23, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d27ad27, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x2a88)) returned 1 [0117.318] SetErrorMode (uMode=0x0) returned 0x1 [0117.318] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Memories\\btn-back-static.png", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Memories\\btn-back-static.png", lpFilePart=0x0) returned 0x48 [0117.318] SetErrorMode (uMode=0x1) returned 0x0 [0117.319] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Memories\\btn-back-static.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\memories\\btn-back-static.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2e8 [0117.319] GetFileType (hFile=0x2e8) returned 0x1 [0117.319] SetErrorMode (uMode=0x0) returned 0x1 [0117.319] GetFileType (hFile=0x2e8) returned 0x1 [0117.319] GetFileSize (in: hFile=0x2e8, lpFileSizeHigh=0x12d8c8 | out: lpFileSizeHigh=0x12d8c8*=0x0) returned 0x2a88 [0117.319] ReadFile (in: hFile=0x2e8, lpBuffer=0x28d7bf0, nNumberOfBytesToRead=0x2a88, lpNumberOfBytesRead=0x12d7a8, lpOverlapped=0x0 | out: lpBuffer=0x28d7bf0*, lpNumberOfBytesRead=0x12d7a8*=0x2a88, lpOverlapped=0x0) returned 1 [0117.347] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Memories\\btn-back-static.png", nBufferLength=0x105, lpBuffer=0x12d270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Memories\\btn-back-static.png", lpFilePart=0x0) returned 0x48 [0117.347] SetErrorMode (uMode=0x1) returned 0x0 [0117.347] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Memories\\btn-back-static.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\memories\\btn-back-static.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0117.348] SetErrorMode (uMode=0x0) returned 0x1 [0117.349] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Memories\\btn-next-static.png", nBufferLength=0x105, lpBuffer=0x12d5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Memories\\btn-next-static.png", lpFilePart=0x0) returned 0x48 [0117.349] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Memories\\btn-next-static.png", nBufferLength=0x105, lpBuffer=0x12d590, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Memories\\btn-next-static.png", lpFilePart=0x0) returned 0x48 [0117.349] SetErrorMode (uMode=0x1) returned 0x0 [0117.349] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Memories\\btn-next-static.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\memories\\btn-next-static.png"), fInfoLevelId=0x0, lpFileInformation=0x12d810 | out: lpFileInformation=0x12d810*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7116fa23, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x7116fa23, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d27ad27, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x280e)) returned 1 [0117.349] SetErrorMode (uMode=0x0) returned 0x1 [0117.350] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Memories\\btn-next-static.png", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Memories\\btn-next-static.png", lpFilePart=0x0) returned 0x48 [0117.350] SetErrorMode (uMode=0x1) returned 0x0 [0117.350] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Memories\\btn-next-static.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\memories\\btn-next-static.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2e8 [0117.350] GetFileType (hFile=0x2e8) returned 0x1 [0117.350] SetErrorMode (uMode=0x0) returned 0x1 [0117.350] GetFileType (hFile=0x2e8) returned 0x1 [0117.350] GetFileSize (in: hFile=0x2e8, lpFileSizeHigh=0x12d8c8 | out: lpFileSizeHigh=0x12d8c8*=0x0) returned 0x280e [0117.350] ReadFile (in: hFile=0x2e8, lpBuffer=0x27c2b48, nNumberOfBytesToRead=0x280e, lpNumberOfBytesRead=0x12d7a8, lpOverlapped=0x0 | out: lpBuffer=0x27c2b48*, lpNumberOfBytesRead=0x12d7a8*=0x280e, lpOverlapped=0x0) returned 1 [0117.374] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Memories\\btn-next-static.png", nBufferLength=0x105, lpBuffer=0x12d270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Memories\\btn-next-static.png", lpFilePart=0x0) returned 0x48 [0117.375] SetErrorMode (uMode=0x1) returned 0x0 [0117.375] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Memories\\btn-next-static.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\memories\\btn-next-static.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0117.376] SetErrorMode (uMode=0x0) returned 0x1 [0117.376] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Memories\\btn-previous-static.png", nBufferLength=0x105, lpBuffer=0x12d5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Memories\\btn-previous-static.png", lpFilePart=0x0) returned 0x4c [0117.376] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Memories\\btn-previous-static.png", nBufferLength=0x105, lpBuffer=0x12d590, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Memories\\btn-previous-static.png", lpFilePart=0x0) returned 0x4c [0117.376] SetErrorMode (uMode=0x1) returned 0x0 [0117.376] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Memories\\btn-previous-static.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\memories\\btn-previous-static.png"), fInfoLevelId=0x0, lpFileInformation=0x12d810 | out: lpFileInformation=0x12d810*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x711bbcdd, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x711bbcdd, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d27ad27, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x2808)) returned 1 [0117.378] SetErrorMode (uMode=0x0) returned 0x1 [0117.378] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Memories\\btn-previous-static.png", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Memories\\btn-previous-static.png", lpFilePart=0x0) returned 0x4c [0117.378] SetErrorMode (uMode=0x1) returned 0x0 [0117.378] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Memories\\btn-previous-static.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\memories\\btn-previous-static.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2e8 [0117.378] GetFileType (hFile=0x2e8) returned 0x1 [0117.378] SetErrorMode (uMode=0x0) returned 0x1 [0117.378] GetFileType (hFile=0x2e8) returned 0x1 [0117.378] GetFileSize (in: hFile=0x2e8, lpFileSizeHigh=0x12d8c8 | out: lpFileSizeHigh=0x12d8c8*=0x0) returned 0x2808 [0117.378] ReadFile (in: hFile=0x2e8, lpBuffer=0x28b3260, nNumberOfBytesToRead=0x2808, lpNumberOfBytesRead=0x12d7a8, lpOverlapped=0x0 | out: lpBuffer=0x28b3260*, lpNumberOfBytesRead=0x12d7a8*=0x2808, lpOverlapped=0x0) returned 1 [0117.403] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Memories\\btn-previous-static.png", nBufferLength=0x105, lpBuffer=0x12d270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Memories\\btn-previous-static.png", lpFilePart=0x0) returned 0x4c [0117.403] SetErrorMode (uMode=0x1) returned 0x0 [0117.403] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Memories\\btn-previous-static.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\memories\\btn-previous-static.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0117.404] SetErrorMode (uMode=0x0) returned 0x1 [0117.404] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Memories\\button-highlight.png", nBufferLength=0x105, lpBuffer=0x12d5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Memories\\button-highlight.png", lpFilePart=0x0) returned 0x49 [0117.405] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Memories\\button-highlight.png", nBufferLength=0x105, lpBuffer=0x12d590, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Memories\\button-highlight.png", lpFilePart=0x0) returned 0x49 [0117.405] SetErrorMode (uMode=0x1) returned 0x0 [0117.405] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Memories\\button-highlight.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\memories\\button-highlight.png"), fInfoLevelId=0x0, lpFileInformation=0x12d810 | out: lpFileInformation=0x12d810*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x711bbcdd, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x711bbcdd, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d2a0e85, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x946)) returned 1 [0117.405] SetErrorMode (uMode=0x0) returned 0x1 [0117.405] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Memories\\button-highlight.png", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Memories\\button-highlight.png", lpFilePart=0x0) returned 0x49 [0117.405] SetErrorMode (uMode=0x1) returned 0x0 [0117.406] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Memories\\button-highlight.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\memories\\button-highlight.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2e8 [0117.406] GetFileType (hFile=0x2e8) returned 0x1 [0117.406] SetErrorMode (uMode=0x0) returned 0x1 [0117.406] GetFileType (hFile=0x2e8) returned 0x1 [0117.406] GetFileSize (in: hFile=0x2e8, lpFileSizeHigh=0x12d8c8 | out: lpFileSizeHigh=0x12d8c8*=0x0) returned 0x946 [0117.406] ReadFile (in: hFile=0x2e8, lpBuffer=0x27a3d88, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12d7a8, lpOverlapped=0x0 | out: lpBuffer=0x27a3d88*, lpNumberOfBytesRead=0x12d7a8*=0x946, lpOverlapped=0x0) returned 1 [0117.426] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Memories\\button-highlight.png", nBufferLength=0x105, lpBuffer=0x12d270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Memories\\button-highlight.png", lpFilePart=0x0) returned 0x49 [0117.426] SetErrorMode (uMode=0x1) returned 0x0 [0117.426] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Memories\\button-highlight.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\memories\\button-highlight.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0117.427] SetErrorMode (uMode=0x0) returned 0x1 [0117.428] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Memories\\button-overlay.png", nBufferLength=0x105, lpBuffer=0x12d5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Memories\\button-overlay.png", lpFilePart=0x0) returned 0x47 [0117.428] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Memories\\button-overlay.png", nBufferLength=0x105, lpBuffer=0x12d590, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Memories\\button-overlay.png", lpFilePart=0x0) returned 0x47 [0117.428] SetErrorMode (uMode=0x1) returned 0x0 [0117.428] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Memories\\button-overlay.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\memories\\button-overlay.png"), fInfoLevelId=0x0, lpFileInformation=0x12d810 | out: lpFileInformation=0x12d810*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x711e1e3a, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x711e1e3a, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d2a0e85, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x6bbd)) returned 1 [0117.428] SetErrorMode (uMode=0x0) returned 0x1 [0117.428] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Memories\\button-overlay.png", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Memories\\button-overlay.png", lpFilePart=0x0) returned 0x47 [0117.428] SetErrorMode (uMode=0x1) returned 0x0 [0117.429] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Memories\\button-overlay.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\memories\\button-overlay.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2e8 [0117.429] GetFileType (hFile=0x2e8) returned 0x1 [0117.429] SetErrorMode (uMode=0x0) returned 0x1 [0117.429] GetFileType (hFile=0x2e8) returned 0x1 [0117.429] GetFileSize (in: hFile=0x2e8, lpFileSizeHigh=0x12d8c8 | out: lpFileSizeHigh=0x12d8c8*=0x0) returned 0x6bbd [0117.429] ReadFile (in: hFile=0x2e8, lpBuffer=0x28892a0, nNumberOfBytesToRead=0x6bbd, lpNumberOfBytesRead=0x12d7a8, lpOverlapped=0x0 | out: lpBuffer=0x28892a0*, lpNumberOfBytesRead=0x12d7a8*=0x6bbd, lpOverlapped=0x0) returned 1 [0117.456] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Memories\\button-overlay.png", nBufferLength=0x105, lpBuffer=0x12d270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Memories\\button-overlay.png", lpFilePart=0x0) returned 0x47 [0117.456] SetErrorMode (uMode=0x1) returned 0x0 [0117.456] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Memories\\button-overlay.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\memories\\button-overlay.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0117.457] SetErrorMode (uMode=0x0) returned 0x1 [0117.458] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Memories\\Memories_buttonClear.png", nBufferLength=0x105, lpBuffer=0x12d5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Memories\\Memories_buttonClear.png", lpFilePart=0x0) returned 0x4d [0117.458] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Memories\\Memories_buttonClear.png", nBufferLength=0x105, lpBuffer=0x12d590, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Memories\\Memories_buttonClear.png", lpFilePart=0x0) returned 0x4d [0117.458] SetErrorMode (uMode=0x1) returned 0x0 [0117.458] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Memories\\Memories_buttonClear.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\memories\\memories_buttonclear.png"), fInfoLevelId=0x0, lpFileInformation=0x12d810 | out: lpFileInformation=0x12d810*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71207f97, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x71207f97, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d2a0e85, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xb53)) returned 1 [0117.458] SetErrorMode (uMode=0x0) returned 0x1 [0117.459] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Memories\\Memories_buttonClear.png", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Memories\\Memories_buttonClear.png", lpFilePart=0x0) returned 0x4d [0117.459] SetErrorMode (uMode=0x1) returned 0x0 [0117.459] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Memories\\Memories_buttonClear.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\memories\\memories_buttonclear.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2e8 [0117.459] GetFileType (hFile=0x2e8) returned 0x1 [0117.459] SetErrorMode (uMode=0x0) returned 0x1 [0117.459] GetFileType (hFile=0x2e8) returned 0x1 [0117.459] GetFileSize (in: hFile=0x2e8, lpFileSizeHigh=0x12d8c8 | out: lpFileSizeHigh=0x12d8c8*=0x0) returned 0xb53 [0117.459] ReadFile (in: hFile=0x2e8, lpBuffer=0x2797bb0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12d7a8, lpOverlapped=0x0 | out: lpBuffer=0x2797bb0*, lpNumberOfBytesRead=0x12d7a8*=0xb53, lpOverlapped=0x0) returned 1 [0117.486] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Memories\\Memories_buttonClear.png", nBufferLength=0x105, lpBuffer=0x12d270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Memories\\Memories_buttonClear.png", lpFilePart=0x0) returned 0x4d [0117.486] SetErrorMode (uMode=0x1) returned 0x0 [0117.486] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Memories\\Memories_buttonClear.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\memories\\memories_buttonclear.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0117.487] SetErrorMode (uMode=0x0) returned 0x1 [0117.487] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Memories\\Notes_btn-back-static.png", nBufferLength=0x105, lpBuffer=0x12d5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Memories\\Notes_btn-back-static.png", lpFilePart=0x0) returned 0x4e [0117.487] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Memories\\Notes_btn-back-static.png", nBufferLength=0x105, lpBuffer=0x12d590, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Memories\\Notes_btn-back-static.png", lpFilePart=0x0) returned 0x4e [0117.488] SetErrorMode (uMode=0x1) returned 0x0 [0117.488] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Memories\\Notes_btn-back-static.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\memories\\notes_btn-back-static.png"), fInfoLevelId=0x0, lpFileInformation=0x12d810 | out: lpFileInformation=0x12d810*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7122e0f4, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x7122e0f4, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d2a0e85, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x2a88)) returned 1 [0117.488] SetErrorMode (uMode=0x0) returned 0x1 [0117.488] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Memories\\Notes_btn-back-static.png", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Memories\\Notes_btn-back-static.png", lpFilePart=0x0) returned 0x4e [0117.488] SetErrorMode (uMode=0x1) returned 0x0 [0117.488] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Memories\\Notes_btn-back-static.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\memories\\notes_btn-back-static.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2e8 [0117.489] GetFileType (hFile=0x2e8) returned 0x1 [0117.489] SetErrorMode (uMode=0x0) returned 0x1 [0117.489] GetFileType (hFile=0x2e8) returned 0x1 [0117.489] GetFileSize (in: hFile=0x2e8, lpFileSizeHigh=0x12d8c8 | out: lpFileSizeHigh=0x12d8c8*=0x0) returned 0x2a88 [0117.489] ReadFile (in: hFile=0x2e8, lpBuffer=0x287db90, nNumberOfBytesToRead=0x2a88, lpNumberOfBytesRead=0x12d7a8, lpOverlapped=0x0 | out: lpBuffer=0x287db90*, lpNumberOfBytesRead=0x12d7a8*=0x2a88, lpOverlapped=0x0) returned 1 [0117.514] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Memories\\Notes_btn-back-static.png", nBufferLength=0x105, lpBuffer=0x12d270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Memories\\Notes_btn-back-static.png", lpFilePart=0x0) returned 0x4e [0117.514] SetErrorMode (uMode=0x1) returned 0x0 [0117.514] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Memories\\Notes_btn-back-static.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\memories\\notes_btn-back-static.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0117.515] SetErrorMode (uMode=0x0) returned 0x1 [0117.515] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Memories\\Notes_content-background.png", nBufferLength=0x105, lpBuffer=0x12d5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Memories\\Notes_content-background.png", lpFilePart=0x0) returned 0x51 [0117.515] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Memories\\Notes_content-background.png", nBufferLength=0x105, lpBuffer=0x12d590, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Memories\\Notes_content-background.png", lpFilePart=0x0) returned 0x51 [0117.515] SetErrorMode (uMode=0x1) returned 0x0 [0117.516] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Memories\\Notes_content-background.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\memories\\notes_content-background.png"), fInfoLevelId=0x0, lpFileInformation=0x12d810 | out: lpFileInformation=0x12d810*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7127a3ae, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x7127a3ae, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d2a0e85, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x1a7ed)) returned 1 [0117.517] SetErrorMode (uMode=0x0) returned 0x1 [0117.517] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Memories\\Notes_content-background.png", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Memories\\Notes_content-background.png", lpFilePart=0x0) returned 0x51 [0117.517] SetErrorMode (uMode=0x1) returned 0x0 [0117.517] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Memories\\Notes_content-background.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\memories\\notes_content-background.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2e8 [0117.517] GetFileType (hFile=0x2e8) returned 0x1 [0117.517] SetErrorMode (uMode=0x0) returned 0x1 [0117.517] GetFileType (hFile=0x2e8) returned 0x1 [0117.517] GetFileSize (in: hFile=0x2e8, lpFileSizeHigh=0x12d8c8 | out: lpFileSizeHigh=0x12d8c8*=0x0) returned 0x1a7ed [0117.519] ReadFile (in: hFile=0x2e8, lpBuffer=0x1293e2f0, nNumberOfBytesToRead=0x1a7ed, lpNumberOfBytesRead=0x12d7a8, lpOverlapped=0x0 | out: lpBuffer=0x1293e2f0*, lpNumberOfBytesRead=0x12d7a8*=0x1a7ed, lpOverlapped=0x0) returned 1 [0117.562] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Memories\\Notes_content-background.png", nBufferLength=0x105, lpBuffer=0x12d270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Memories\\Notes_content-background.png", lpFilePart=0x0) returned 0x51 [0117.562] SetErrorMode (uMode=0x1) returned 0x0 [0117.562] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Memories\\Notes_content-background.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\memories\\notes_content-background.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0117.563] SetErrorMode (uMode=0x0) returned 0x1 [0117.564] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Memories\\scrapbook.png", nBufferLength=0x105, lpBuffer=0x12d5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Memories\\scrapbook.png", lpFilePart=0x0) returned 0x42 [0117.564] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Memories\\scrapbook.png", nBufferLength=0x105, lpBuffer=0x12d590, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Memories\\scrapbook.png", lpFilePart=0x0) returned 0x42 [0117.564] SetErrorMode (uMode=0x1) returned 0x0 [0117.564] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Memories\\scrapbook.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\memories\\scrapbook.png"), fInfoLevelId=0x0, lpFileInformation=0x12d810 | out: lpFileInformation=0x12d810*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x710b1352, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x710b1352, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d2a0e85, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x4f7a)) returned 1 [0117.564] SetErrorMode (uMode=0x0) returned 0x1 [0117.564] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Memories\\scrapbook.png", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Memories\\scrapbook.png", lpFilePart=0x0) returned 0x42 [0117.564] SetErrorMode (uMode=0x1) returned 0x0 [0117.565] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Memories\\scrapbook.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\memories\\scrapbook.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2e8 [0117.565] GetFileType (hFile=0x2e8) returned 0x1 [0117.565] SetErrorMode (uMode=0x0) returned 0x1 [0117.565] GetFileType (hFile=0x2e8) returned 0x1 [0117.565] GetFileSize (in: hFile=0x2e8, lpFileSizeHigh=0x12d8c8 | out: lpFileSizeHigh=0x12d8c8*=0x0) returned 0x4f7a [0117.565] ReadFile (in: hFile=0x2e8, lpBuffer=0x26c3fb8, nNumberOfBytesToRead=0x4f7a, lpNumberOfBytesRead=0x12d7a8, lpOverlapped=0x0 | out: lpBuffer=0x26c3fb8*, lpNumberOfBytesRead=0x12d7a8*=0x4f7a, lpOverlapped=0x0) returned 1 [0117.582] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Memories\\scrapbook.png", nBufferLength=0x105, lpBuffer=0x12d270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Memories\\scrapbook.png", lpFilePart=0x0) returned 0x42 [0117.582] SetErrorMode (uMode=0x1) returned 0x0 [0117.582] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Memories\\scrapbook.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\memories\\scrapbook.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0117.583] SetErrorMode (uMode=0x0) returned 0x1 [0117.583] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Memories\\Title_content-background.png", nBufferLength=0x105, lpBuffer=0x12d5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Memories\\Title_content-background.png", lpFilePart=0x0) returned 0x51 [0117.584] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Memories\\Title_content-background.png", nBufferLength=0x105, lpBuffer=0x12d590, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Memories\\Title_content-background.png", lpFilePart=0x0) returned 0x51 [0117.584] SetErrorMode (uMode=0x1) returned 0x0 [0117.584] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Memories\\Title_content-background.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\memories\\title_content-background.png"), fInfoLevelId=0x0, lpFileInformation=0x12d810 | out: lpFileInformation=0x12d810*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x712c6668, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x712c6668, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d2a0e85, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x390c4)) returned 1 [0117.584] SetErrorMode (uMode=0x0) returned 0x1 [0117.584] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Memories\\Title_content-background.png", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Memories\\Title_content-background.png", lpFilePart=0x0) returned 0x51 [0117.584] SetErrorMode (uMode=0x1) returned 0x0 [0117.584] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Memories\\Title_content-background.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\memories\\title_content-background.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2e8 [0117.585] GetFileType (hFile=0x2e8) returned 0x1 [0117.585] SetErrorMode (uMode=0x0) returned 0x1 [0117.585] GetFileType (hFile=0x2e8) returned 0x1 [0117.585] GetFileSize (in: hFile=0x2e8, lpFileSizeHigh=0x12d8c8 | out: lpFileSizeHigh=0x12d8c8*=0x0) returned 0x390c4 [0117.587] ReadFile (in: hFile=0x2e8, lpBuffer=0x126d03b0, nNumberOfBytesToRead=0x390c4, lpNumberOfBytesRead=0x12d7a8, lpOverlapped=0x0 | out: lpBuffer=0x126d03b0*, lpNumberOfBytesRead=0x12d7a8*=0x390c4, lpOverlapped=0x0) returned 1 [0117.619] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Memories\\Title_content-background.png", nBufferLength=0x105, lpBuffer=0x12d270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Memories\\Title_content-background.png", lpFilePart=0x0) returned 0x51 [0117.619] SetErrorMode (uMode=0x1) returned 0x0 [0117.620] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Memories\\Title_content-background.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\memories\\title_content-background.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0117.621] SetErrorMode (uMode=0x0) returned 0x1 [0117.621] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Memories\\Title_mainImage-mask.png", nBufferLength=0x105, lpBuffer=0x12d5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Memories\\Title_mainImage-mask.png", lpFilePart=0x0) returned 0x4d [0117.621] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Memories\\Title_mainImage-mask.png", nBufferLength=0x105, lpBuffer=0x12d590, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Memories\\Title_mainImage-mask.png", lpFilePart=0x0) returned 0x4d [0117.621] SetErrorMode (uMode=0x1) returned 0x0 [0117.621] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Memories\\Title_mainImage-mask.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\memories\\title_mainimage-mask.png"), fInfoLevelId=0x0, lpFileInformation=0x12d810 | out: lpFileInformation=0x12d810*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x712ec7c5, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x712ec7c5, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d2c6fe3, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x1368)) returned 1 [0117.622] SetErrorMode (uMode=0x0) returned 0x1 [0117.622] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Memories\\Title_mainImage-mask.png", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Memories\\Title_mainImage-mask.png", lpFilePart=0x0) returned 0x4d [0117.622] SetErrorMode (uMode=0x1) returned 0x0 [0117.622] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Memories\\Title_mainImage-mask.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\memories\\title_mainimage-mask.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2e8 [0117.622] GetFileType (hFile=0x2e8) returned 0x1 [0117.622] SetErrorMode (uMode=0x0) returned 0x1 [0117.622] GetFileType (hFile=0x2e8) returned 0x1 [0117.623] GetFileSize (in: hFile=0x2e8, lpFileSizeHigh=0x12d8c8 | out: lpFileSizeHigh=0x12d8c8*=0x0) returned 0x1368 [0117.623] ReadFile (in: hFile=0x2e8, lpBuffer=0x28a4740, nNumberOfBytesToRead=0x1368, lpNumberOfBytesRead=0x12d7a8, lpOverlapped=0x0 | out: lpBuffer=0x28a4740*, lpNumberOfBytesRead=0x12d7a8*=0x1368, lpOverlapped=0x0) returned 1 [0117.657] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Memories\\Title_mainImage-mask.png", nBufferLength=0x105, lpBuffer=0x12d270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Memories\\Title_mainImage-mask.png", lpFilePart=0x0) returned 0x4d [0117.657] SetErrorMode (uMode=0x1) returned 0x0 [0117.657] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Memories\\Title_mainImage-mask.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\memories\\title_mainimage-mask.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0117.658] SetErrorMode (uMode=0x0) returned 0x1 [0117.659] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Memories\\Title_select-highlight.png", nBufferLength=0x105, lpBuffer=0x12d5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Memories\\Title_select-highlight.png", lpFilePart=0x0) returned 0x4f [0117.659] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Memories\\Title_select-highlight.png", nBufferLength=0x105, lpBuffer=0x12d590, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Memories\\Title_select-highlight.png", lpFilePart=0x0) returned 0x4f [0117.659] SetErrorMode (uMode=0x1) returned 0x0 [0117.659] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Memories\\Title_select-highlight.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\memories\\title_select-highlight.png"), fInfoLevelId=0x0, lpFileInformation=0x12d810 | out: lpFileInformation=0x12d810*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x712ec7c5, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x712ec7c5, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d2ed141, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc47)) returned 1 [0117.661] SetErrorMode (uMode=0x0) returned 0x1 [0117.661] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Memories\\Title_select-highlight.png", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Memories\\Title_select-highlight.png", lpFilePart=0x0) returned 0x4f [0117.662] SetErrorMode (uMode=0x1) returned 0x0 [0117.662] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Memories\\Title_select-highlight.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\memories\\title_select-highlight.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2e8 [0117.662] GetFileType (hFile=0x2e8) returned 0x1 [0117.662] SetErrorMode (uMode=0x0) returned 0x1 [0117.662] GetFileType (hFile=0x2e8) returned 0x1 [0117.662] GetFileSize (in: hFile=0x2e8, lpFileSizeHigh=0x12d8c8 | out: lpFileSizeHigh=0x12d8c8*=0x0) returned 0xc47 [0117.662] ReadFile (in: hFile=0x2e8, lpBuffer=0x278fbc8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12d7a8, lpOverlapped=0x0 | out: lpBuffer=0x278fbc8*, lpNumberOfBytesRead=0x12d7a8*=0xc47, lpOverlapped=0x0) returned 1 [0117.684] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Memories\\Title_select-highlight.png", nBufferLength=0x105, lpBuffer=0x12d270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Memories\\Title_select-highlight.png", lpFilePart=0x0) returned 0x4f [0117.685] SetErrorMode (uMode=0x1) returned 0x0 [0117.685] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Memories\\Title_select-highlight.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\memories\\title_select-highlight.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0117.686] SetErrorMode (uMode=0x0) returned 0x1 [0117.686] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Memories\\Decrypt Instructions.txt", nBufferLength=0x105, lpBuffer=0x12d240, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Memories\\Decrypt Instructions.txt", lpFilePart=0x0) returned 0x4d [0117.686] SetErrorMode (uMode=0x1) returned 0x0 [0117.686] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Memories\\Decrypt Instructions.txt" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\memories\\decrypt instructions.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x2e8 [0117.687] GetFileType (hFile=0x2e8) returned 0x1 [0117.687] SetErrorMode (uMode=0x0) returned 0x1 [0117.687] GetFileType (hFile=0x2e8) returned 0x1 [0117.687] WriteFile (in: hFile=0x2e8, lpBuffer=0x2878e08*, nNumberOfBytesToWrite=0x773, lpNumberOfBytesWritten=0x12d7a8, lpOverlapped=0x0 | out: lpBuffer=0x2878e08*, lpNumberOfBytesWritten=0x12d7a8*=0x773, lpOverlapped=0x0) returned 1 [0117.689] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Memories", nBufferLength=0x105, lpBuffer=0x12d430, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Memories", lpFilePart=0x0) returned 0x34 [0117.689] SetErrorMode (uMode=0x1) returned 0x0 [0117.689] FindFirstFileW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Memories\\*", lpFindFileData=0x12d5d0 | out: lpFindFileData=0x12d5d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9fbd8be5, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x66370770, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x66370770, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x26bc80 [0117.689] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9fbd8be5, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x66370770, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x66370770, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0117.689] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x710d74af, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x710d74af, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d1964f3, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xb08f, dwReserved0=0x0, dwReserved1=0x0, cFileName="16_9-frame-background.png", cAlternateFileName="")) returned 1 [0117.690] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x710fd60c, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x710fd60c, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d1bc651, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc32, dwReserved0=0x0, dwReserved1=0x0, cFileName="16_9-frame-highlight.png", cAlternateFileName="")) returned 1 [0117.690] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71123769, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x71123769, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d1bc651, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x578, dwReserved0=0x0, dwReserved1=0x0, cFileName="16_9-frame-image-mask.png", cAlternateFileName="")) returned 1 [0117.690] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x711498c6, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x711498c6, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d1bc651, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x8c12, dwReserved0=0x0, dwReserved1=0x0, cFileName="16_9-frame-overlay.png", cAlternateFileName="")) returned 1 [0117.690] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71254251, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x71254251, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d1bc651, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x2f993, dwReserved0=0x0, dwReserved1=0x0, cFileName="background.png", cAlternateFileName="")) returned 1 [0117.690] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7116fa23, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x7116fa23, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d27ad27, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x2a88, dwReserved0=0x0, dwReserved1=0x0, cFileName="btn-back-static.png", cAlternateFileName="")) returned 1 [0117.690] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7116fa23, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x7116fa23, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d27ad27, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x280e, dwReserved0=0x0, dwReserved1=0x0, cFileName="btn-next-static.png", cAlternateFileName="")) returned 1 [0117.690] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x711bbcdd, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x711bbcdd, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d27ad27, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x2808, dwReserved0=0x0, dwReserved1=0x0, cFileName="btn-previous-static.png", cAlternateFileName="")) returned 1 [0117.690] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x711bbcdd, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x711bbcdd, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d2a0e85, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x946, dwReserved0=0x0, dwReserved1=0x0, cFileName="button-highlight.png", cAlternateFileName="")) returned 1 [0117.690] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x711e1e3a, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x711e1e3a, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d2a0e85, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x6bbd, dwReserved0=0x0, dwReserved1=0x0, cFileName="button-overlay.png", cAlternateFileName="")) returned 1 [0117.690] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x66370770, ftCreationTime.dwHighDateTime=0x1d5e786, ftLastAccessTime.dwLowDateTime=0x66370770, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x66370770, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x773, dwReserved0=0x0, dwReserved1=0x0, cFileName="Decrypt Instructions.txt", cAlternateFileName="DECRYP~1.TXT")) returned 1 [0117.691] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71207f97, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x71207f97, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d2a0e85, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xb53, dwReserved0=0x0, dwReserved1=0x0, cFileName="Memories_buttonClear.png", cAlternateFileName="")) returned 1 [0117.691] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7122e0f4, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x7122e0f4, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d2a0e85, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x2a88, dwReserved0=0x0, dwReserved1=0x0, cFileName="Notes_btn-back-static.png", cAlternateFileName="")) returned 1 [0117.691] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7127a3ae, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x7127a3ae, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d2a0e85, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x1a7ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="Notes_content-background.png", cAlternateFileName="")) returned 1 [0117.691] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x710b1352, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x710b1352, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d2a0e85, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x4f7a, dwReserved0=0x0, dwReserved1=0x0, cFileName="scrapbook.png", cAlternateFileName="")) returned 1 [0117.691] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x712c6668, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x712c6668, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d2a0e85, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x390c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Title_content-background.png", cAlternateFileName="")) returned 1 [0117.691] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x712ec7c5, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x712ec7c5, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d2c6fe3, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x1368, dwReserved0=0x0, dwReserved1=0x0, cFileName="Title_mainImage-mask.png", cAlternateFileName="")) returned 1 [0117.691] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x712ec7c5, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x712ec7c5, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d2ed141, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc47, dwReserved0=0x0, dwReserved1=0x0, cFileName="Title_select-highlight.png", cAlternateFileName="")) returned 1 [0117.691] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x712ec7c5, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x712ec7c5, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d2ed141, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc47, dwReserved0=0x0, dwReserved1=0x0, cFileName="Title_select-highlight.png", cAlternateFileName="")) returned 0 [0117.691] FindClose (in: hFindFile=0x26bc80 | out: hFindFile=0x26bc80) returned 1 [0117.692] SetErrorMode (uMode=0x0) returned 0x1 [0117.692] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\OldAge", nBufferLength=0x105, lpBuffer=0x12d390, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\OldAge", lpFilePart=0x0) returned 0x32 [0117.692] SetErrorMode (uMode=0x1) returned 0x0 [0117.692] FindFirstFileW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\OldAge\\*", lpFindFileData=0x12d530 | out: lpFindFileData=0x12d530*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9f465237, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa7ae1d4, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9f48b4a6, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x26bc80 [0117.695] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9f465237, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa7ae1d4, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9f48b4a6, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0117.695] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fcc1ca4, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6fcc1ca4, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d2ed141, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x11da, dwReserved0=0x0, dwReserved1=0x0, cFileName="1047x576black.png", cAlternateFileName="")) returned 1 [0117.695] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fce7e01, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6fce7e01, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d2ed141, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xb05, dwReserved0=0x0, dwReserved1=0x0, cFileName="15x15dot.png", cAlternateFileName="")) returned 1 [0117.695] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fd0df5e, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6fd0df5e, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d2ed141, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x183b, dwReserved0=0x0, dwReserved1=0x0, cFileName="decorative_rule.png", cAlternateFileName="")) returned 1 [0117.695] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fdcc62f, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6fdcc62f, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d2ed141, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationLeft_ButtonGraphic.png", cAlternateFileName="")) returned 1 [0117.695] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fd80375, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6fd80375, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d2ed141, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc3a, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationLeft_SelectionSubpicture.png", cAlternateFileName="")) returned 1 [0117.695] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fda64d2, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6fda64d2, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d2ed141, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13a1, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationRight_ButtonGraphic.png", cAlternateFileName="")) returned 1 [0117.696] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fd340bb, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6fd340bb, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d31329f, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc2e, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationRight_SelectionSubpicture.png", cAlternateFileName="")) returned 1 [0117.696] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fd0df5e, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6fd0df5e, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d31329f, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x135b, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationUp_ButtonGraphic.png", cAlternateFileName="")) returned 1 [0117.696] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fd5a218, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6fd5a218, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d3393fd, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc09, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationUp_SelectionSubpicture.png", cAlternateFileName="")) returned 1 [0117.696] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fc9bb47, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6fc9bb47, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d3393fd, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x6c8d, dwReserved0=0x0, dwReserved1=0x0, cFileName="vintage.png", cAlternateFileName="")) returned 1 [0117.696] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fc9bb47, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6fc9bb47, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d3393fd, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x6c8d, dwReserved0=0x0, dwReserved1=0x0, cFileName="vintage.png", cAlternateFileName="")) returned 0 [0117.696] FindClose (in: hFindFile=0x26bc80 | out: hFindFile=0x26bc80) returned 1 [0117.697] SetErrorMode (uMode=0x0) returned 0x1 [0117.697] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\OldAge\\1047x576black.png", nBufferLength=0x105, lpBuffer=0x12d5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\OldAge\\1047x576black.png", lpFilePart=0x0) returned 0x44 [0117.698] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\OldAge\\1047x576black.png", nBufferLength=0x105, lpBuffer=0x12d590, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\OldAge\\1047x576black.png", lpFilePart=0x0) returned 0x44 [0117.698] SetErrorMode (uMode=0x1) returned 0x0 [0117.698] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\OldAge\\1047x576black.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\oldage\\1047x576black.png"), fInfoLevelId=0x0, lpFileInformation=0x12d810 | out: lpFileInformation=0x12d810*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fcc1ca4, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6fcc1ca4, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d2ed141, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x11da)) returned 1 [0117.699] SetErrorMode (uMode=0x0) returned 0x1 [0117.699] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\OldAge\\1047x576black.png", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\OldAge\\1047x576black.png", lpFilePart=0x0) returned 0x44 [0117.699] SetErrorMode (uMode=0x1) returned 0x0 [0117.699] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\OldAge\\1047x576black.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\oldage\\1047x576black.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2e8 [0117.700] GetFileType (hFile=0x2e8) returned 0x1 [0117.700] SetErrorMode (uMode=0x0) returned 0x1 [0117.700] GetFileType (hFile=0x2e8) returned 0x1 [0117.700] GetFileSize (in: hFile=0x2e8, lpFileSizeHigh=0x12d8c8 | out: lpFileSizeHigh=0x12d8c8*=0x0) returned 0x11da [0117.700] ReadFile (in: hFile=0x2e8, lpBuffer=0x287d510, nNumberOfBytesToRead=0x11da, lpNumberOfBytesRead=0x12d7a8, lpOverlapped=0x0 | out: lpBuffer=0x287d510*, lpNumberOfBytesRead=0x12d7a8*=0x11da, lpOverlapped=0x0) returned 1 [0117.725] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\OldAge\\1047x576black.png", nBufferLength=0x105, lpBuffer=0x12d270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\OldAge\\1047x576black.png", lpFilePart=0x0) returned 0x44 [0117.726] SetErrorMode (uMode=0x1) returned 0x0 [0117.726] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\OldAge\\1047x576black.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\oldage\\1047x576black.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0117.727] SetErrorMode (uMode=0x0) returned 0x1 [0117.727] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\OldAge\\15x15dot.png", nBufferLength=0x105, lpBuffer=0x12d5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\OldAge\\15x15dot.png", lpFilePart=0x0) returned 0x3f [0117.727] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\OldAge\\15x15dot.png", nBufferLength=0x105, lpBuffer=0x12d590, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\OldAge\\15x15dot.png", lpFilePart=0x0) returned 0x3f [0117.727] SetErrorMode (uMode=0x1) returned 0x0 [0117.728] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\OldAge\\15x15dot.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\oldage\\15x15dot.png"), fInfoLevelId=0x0, lpFileInformation=0x12d810 | out: lpFileInformation=0x12d810*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fce7e01, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6fce7e01, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d2ed141, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xb05)) returned 1 [0117.728] SetErrorMode (uMode=0x0) returned 0x1 [0117.728] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\OldAge\\15x15dot.png", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\OldAge\\15x15dot.png", lpFilePart=0x0) returned 0x3f [0117.728] SetErrorMode (uMode=0x1) returned 0x0 [0117.729] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\OldAge\\15x15dot.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\oldage\\15x15dot.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2e8 [0117.729] GetFileType (hFile=0x2e8) returned 0x1 [0117.729] SetErrorMode (uMode=0x0) returned 0x1 [0117.729] GetFileType (hFile=0x2e8) returned 0x1 [0117.729] GetFileSize (in: hFile=0x2e8, lpFileSizeHigh=0x12d8c8 | out: lpFileSizeHigh=0x12d8c8*=0x0) returned 0xb05 [0117.729] ReadFile (in: hFile=0x2e8, lpBuffer=0x276b1d8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12d7a8, lpOverlapped=0x0 | out: lpBuffer=0x276b1d8*, lpNumberOfBytesRead=0x12d7a8*=0xb05, lpOverlapped=0x0) returned 1 [0117.751] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\OldAge\\15x15dot.png", nBufferLength=0x105, lpBuffer=0x12d270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\OldAge\\15x15dot.png", lpFilePart=0x0) returned 0x3f [0117.751] SetErrorMode (uMode=0x1) returned 0x0 [0117.751] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\OldAge\\15x15dot.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\oldage\\15x15dot.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0117.752] SetErrorMode (uMode=0x0) returned 0x1 [0117.753] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\OldAge\\decorative_rule.png", nBufferLength=0x105, lpBuffer=0x12d5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\OldAge\\decorative_rule.png", lpFilePart=0x0) returned 0x46 [0117.753] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\OldAge\\decorative_rule.png", nBufferLength=0x105, lpBuffer=0x12d590, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\OldAge\\decorative_rule.png", lpFilePart=0x0) returned 0x46 [0117.753] SetErrorMode (uMode=0x1) returned 0x0 [0117.753] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\OldAge\\decorative_rule.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\oldage\\decorative_rule.png"), fInfoLevelId=0x0, lpFileInformation=0x12d810 | out: lpFileInformation=0x12d810*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fd0df5e, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6fd0df5e, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d2ed141, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x183b)) returned 1 [0117.754] SetErrorMode (uMode=0x0) returned 0x1 [0117.754] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\OldAge\\decorative_rule.png", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\OldAge\\decorative_rule.png", lpFilePart=0x0) returned 0x46 [0117.754] SetErrorMode (uMode=0x1) returned 0x0 [0117.755] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\OldAge\\decorative_rule.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\oldage\\decorative_rule.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2e8 [0117.755] GetFileType (hFile=0x2e8) returned 0x1 [0117.755] SetErrorMode (uMode=0x0) returned 0x1 [0117.755] GetFileType (hFile=0x2e8) returned 0x1 [0117.755] GetFileSize (in: hFile=0x2e8, lpFileSizeHigh=0x12d8c8 | out: lpFileSizeHigh=0x12d8c8*=0x0) returned 0x183b [0117.755] ReadFile (in: hFile=0x2e8, lpBuffer=0x2850f60, nNumberOfBytesToRead=0x183b, lpNumberOfBytesRead=0x12d7a8, lpOverlapped=0x0 | out: lpBuffer=0x2850f60*, lpNumberOfBytesRead=0x12d7a8*=0x183b, lpOverlapped=0x0) returned 1 [0117.781] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\OldAge\\decorative_rule.png", nBufferLength=0x105, lpBuffer=0x12d270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\OldAge\\decorative_rule.png", lpFilePart=0x0) returned 0x46 [0117.781] SetErrorMode (uMode=0x1) returned 0x0 [0117.781] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\OldAge\\decorative_rule.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\oldage\\decorative_rule.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0117.782] SetErrorMode (uMode=0x0) returned 0x1 [0117.782] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\OldAge\\NavigationLeft_ButtonGraphic.png", nBufferLength=0x105, lpBuffer=0x12d5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\OldAge\\NavigationLeft_ButtonGraphic.png", lpFilePart=0x0) returned 0x53 [0117.782] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\OldAge\\NavigationLeft_ButtonGraphic.png", nBufferLength=0x105, lpBuffer=0x12d590, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\OldAge\\NavigationLeft_ButtonGraphic.png", lpFilePart=0x0) returned 0x53 [0117.783] SetErrorMode (uMode=0x1) returned 0x0 [0117.783] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\OldAge\\NavigationLeft_ButtonGraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\oldage\\navigationleft_buttongraphic.png"), fInfoLevelId=0x0, lpFileInformation=0x12d810 | out: lpFileInformation=0x12d810*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fdcc62f, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6fdcc62f, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d2ed141, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13e0)) returned 1 [0117.783] SetErrorMode (uMode=0x0) returned 0x1 [0117.783] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\OldAge\\NavigationLeft_ButtonGraphic.png", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\OldAge\\NavigationLeft_ButtonGraphic.png", lpFilePart=0x0) returned 0x53 [0117.783] SetErrorMode (uMode=0x1) returned 0x0 [0117.783] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\OldAge\\NavigationLeft_ButtonGraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\oldage\\navigationleft_buttongraphic.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2e8 [0117.783] GetFileType (hFile=0x2e8) returned 0x1 [0117.784] SetErrorMode (uMode=0x0) returned 0x1 [0117.784] GetFileType (hFile=0x2e8) returned 0x1 [0117.784] GetFileSize (in: hFile=0x2e8, lpFileSizeHigh=0x12d8c8 | out: lpFileSizeHigh=0x12d8c8*=0x0) returned 0x13e0 [0117.784] ReadFile (in: hFile=0x2e8, lpBuffer=0x273fb80, nNumberOfBytesToRead=0x13e0, lpNumberOfBytesRead=0x12d7a8, lpOverlapped=0x0 | out: lpBuffer=0x273fb80*, lpNumberOfBytesRead=0x12d7a8*=0x13e0, lpOverlapped=0x0) returned 1 [0117.805] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\OldAge\\NavigationLeft_ButtonGraphic.png", nBufferLength=0x105, lpBuffer=0x12d270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\OldAge\\NavigationLeft_ButtonGraphic.png", lpFilePart=0x0) returned 0x53 [0117.806] SetErrorMode (uMode=0x1) returned 0x0 [0117.806] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\OldAge\\NavigationLeft_ButtonGraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\oldage\\navigationleft_buttongraphic.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0117.807] SetErrorMode (uMode=0x0) returned 0x1 [0117.808] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\OldAge\\NavigationLeft_SelectionSubpicture.png", nBufferLength=0x105, lpBuffer=0x12d5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\OldAge\\NavigationLeft_SelectionSubpicture.png", lpFilePart=0x0) returned 0x59 [0117.808] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\OldAge\\NavigationLeft_SelectionSubpicture.png", nBufferLength=0x105, lpBuffer=0x12d590, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\OldAge\\NavigationLeft_SelectionSubpicture.png", lpFilePart=0x0) returned 0x59 [0117.808] SetErrorMode (uMode=0x1) returned 0x0 [0117.808] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\OldAge\\NavigationLeft_SelectionSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\oldage\\navigationleft_selectionsubpicture.png"), fInfoLevelId=0x0, lpFileInformation=0x12d810 | out: lpFileInformation=0x12d810*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fd80375, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6fd80375, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d2ed141, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc3a)) returned 1 [0117.809] SetErrorMode (uMode=0x0) returned 0x1 [0117.809] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\OldAge\\NavigationLeft_SelectionSubpicture.png", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\OldAge\\NavigationLeft_SelectionSubpicture.png", lpFilePart=0x0) returned 0x59 [0117.809] SetErrorMode (uMode=0x1) returned 0x0 [0117.809] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\OldAge\\NavigationLeft_SelectionSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\oldage\\navigationleft_selectionsubpicture.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2e8 [0117.809] GetFileType (hFile=0x2e8) returned 0x1 [0117.809] SetErrorMode (uMode=0x0) returned 0x1 [0117.810] GetFileType (hFile=0x2e8) returned 0x1 [0117.810] GetFileSize (in: hFile=0x2e8, lpFileSizeHigh=0x12d8c8 | out: lpFileSizeHigh=0x12d8c8*=0x0) returned 0xc3a [0117.810] ReadFile (in: hFile=0x2e8, lpBuffer=0x2829718, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12d7a8, lpOverlapped=0x0 | out: lpBuffer=0x2829718*, lpNumberOfBytesRead=0x12d7a8*=0xc3a, lpOverlapped=0x0) returned 1 [0117.835] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\OldAge\\NavigationLeft_SelectionSubpicture.png", nBufferLength=0x105, lpBuffer=0x12d270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\OldAge\\NavigationLeft_SelectionSubpicture.png", lpFilePart=0x0) returned 0x59 [0117.836] SetErrorMode (uMode=0x1) returned 0x0 [0117.836] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\OldAge\\NavigationLeft_SelectionSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\oldage\\navigationleft_selectionsubpicture.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0117.837] SetErrorMode (uMode=0x0) returned 0x1 [0117.837] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\OldAge\\NavigationRight_ButtonGraphic.png", nBufferLength=0x105, lpBuffer=0x12d5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\OldAge\\NavigationRight_ButtonGraphic.png", lpFilePart=0x0) returned 0x54 [0117.837] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\OldAge\\NavigationRight_ButtonGraphic.png", nBufferLength=0x105, lpBuffer=0x12d590, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\OldAge\\NavigationRight_ButtonGraphic.png", lpFilePart=0x0) returned 0x54 [0117.837] SetErrorMode (uMode=0x1) returned 0x0 [0117.838] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\OldAge\\NavigationRight_ButtonGraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\oldage\\navigationright_buttongraphic.png"), fInfoLevelId=0x0, lpFileInformation=0x12d810 | out: lpFileInformation=0x12d810*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fda64d2, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6fda64d2, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d2ed141, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13a1)) returned 1 [0117.838] SetErrorMode (uMode=0x0) returned 0x1 [0117.838] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\OldAge\\NavigationRight_ButtonGraphic.png", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\OldAge\\NavigationRight_ButtonGraphic.png", lpFilePart=0x0) returned 0x54 [0117.838] SetErrorMode (uMode=0x1) returned 0x0 [0117.838] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\OldAge\\NavigationRight_ButtonGraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\oldage\\navigationright_buttongraphic.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2e8 [0117.838] GetFileType (hFile=0x2e8) returned 0x1 [0117.838] SetErrorMode (uMode=0x0) returned 0x1 [0117.839] GetFileType (hFile=0x2e8) returned 0x1 [0117.839] GetFileSize (in: hFile=0x2e8, lpFileSizeHigh=0x12d8c8 | out: lpFileSizeHigh=0x12d8c8*=0x0) returned 0x13a1 [0117.839] ReadFile (in: hFile=0x2e8, lpBuffer=0x2714110, nNumberOfBytesToRead=0x13a1, lpNumberOfBytesRead=0x12d7a8, lpOverlapped=0x0 | out: lpBuffer=0x2714110*, lpNumberOfBytesRead=0x12d7a8*=0x13a1, lpOverlapped=0x0) returned 1 [0117.861] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\OldAge\\NavigationRight_ButtonGraphic.png", nBufferLength=0x105, lpBuffer=0x12d270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\OldAge\\NavigationRight_ButtonGraphic.png", lpFilePart=0x0) returned 0x54 [0117.861] SetErrorMode (uMode=0x1) returned 0x0 [0117.861] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\OldAge\\NavigationRight_ButtonGraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\oldage\\navigationright_buttongraphic.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0117.862] SetErrorMode (uMode=0x0) returned 0x1 [0117.863] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\OldAge\\NavigationRight_SelectionSubpicture.png", nBufferLength=0x105, lpBuffer=0x12d5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\OldAge\\NavigationRight_SelectionSubpicture.png", lpFilePart=0x0) returned 0x5a [0117.863] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\OldAge\\NavigationRight_SelectionSubpicture.png", nBufferLength=0x105, lpBuffer=0x12d590, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\OldAge\\NavigationRight_SelectionSubpicture.png", lpFilePart=0x0) returned 0x5a [0117.863] SetErrorMode (uMode=0x1) returned 0x0 [0117.863] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\OldAge\\NavigationRight_SelectionSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\oldage\\navigationright_selectionsubpicture.png"), fInfoLevelId=0x0, lpFileInformation=0x12d810 | out: lpFileInformation=0x12d810*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fd340bb, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6fd340bb, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d31329f, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc2e)) returned 1 [0117.863] SetErrorMode (uMode=0x0) returned 0x1 [0117.863] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\OldAge\\NavigationRight_SelectionSubpicture.png", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\OldAge\\NavigationRight_SelectionSubpicture.png", lpFilePart=0x0) returned 0x5a [0117.864] SetErrorMode (uMode=0x1) returned 0x0 [0117.864] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\OldAge\\NavigationRight_SelectionSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\oldage\\navigationright_selectionsubpicture.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2e8 [0117.864] GetFileType (hFile=0x2e8) returned 0x1 [0117.864] SetErrorMode (uMode=0x0) returned 0x1 [0117.864] GetFileType (hFile=0x2e8) returned 0x1 [0117.864] GetFileSize (in: hFile=0x2e8, lpFileSizeHigh=0x12d8c8 | out: lpFileSizeHigh=0x12d8c8*=0x0) returned 0xc2e [0117.864] ReadFile (in: hFile=0x2e8, lpBuffer=0x27fdb38, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12d7a8, lpOverlapped=0x0 | out: lpBuffer=0x27fdb38*, lpNumberOfBytesRead=0x12d7a8*=0xc2e, lpOverlapped=0x0) returned 1 [0117.902] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\OldAge\\NavigationRight_SelectionSubpicture.png", nBufferLength=0x105, lpBuffer=0x12d270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\OldAge\\NavigationRight_SelectionSubpicture.png", lpFilePart=0x0) returned 0x5a [0117.902] SetErrorMode (uMode=0x1) returned 0x0 [0117.902] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\OldAge\\NavigationRight_SelectionSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\oldage\\navigationright_selectionsubpicture.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0117.903] SetErrorMode (uMode=0x0) returned 0x1 [0117.903] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\OldAge\\NavigationUp_ButtonGraphic.png", nBufferLength=0x105, lpBuffer=0x12d5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\OldAge\\NavigationUp_ButtonGraphic.png", lpFilePart=0x0) returned 0x51 [0117.903] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\OldAge\\NavigationUp_ButtonGraphic.png", nBufferLength=0x105, lpBuffer=0x12d590, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\OldAge\\NavigationUp_ButtonGraphic.png", lpFilePart=0x0) returned 0x51 [0117.904] SetErrorMode (uMode=0x1) returned 0x0 [0117.904] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\OldAge\\NavigationUp_ButtonGraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\oldage\\navigationup_buttongraphic.png"), fInfoLevelId=0x0, lpFileInformation=0x12d810 | out: lpFileInformation=0x12d810*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fd0df5e, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6fd0df5e, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d31329f, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x135b)) returned 1 [0117.904] SetErrorMode (uMode=0x0) returned 0x1 [0117.904] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\OldAge\\NavigationUp_ButtonGraphic.png", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\OldAge\\NavigationUp_ButtonGraphic.png", lpFilePart=0x0) returned 0x51 [0117.904] SetErrorMode (uMode=0x1) returned 0x0 [0117.904] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\OldAge\\NavigationUp_ButtonGraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\oldage\\navigationup_buttongraphic.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2e8 [0117.905] GetFileType (hFile=0x2e8) returned 0x1 [0117.905] SetErrorMode (uMode=0x0) returned 0x1 [0117.905] GetFileType (hFile=0x2e8) returned 0x1 [0117.905] GetFileSize (in: hFile=0x2e8, lpFileSizeHigh=0x12d8c8 | out: lpFileSizeHigh=0x12d8c8*=0x0) returned 0x135b [0117.905] ReadFile (in: hFile=0x2e8, lpBuffer=0x26e6d18, nNumberOfBytesToRead=0x135b, lpNumberOfBytesRead=0x12d7a8, lpOverlapped=0x0 | out: lpBuffer=0x26e6d18*, lpNumberOfBytesRead=0x12d7a8*=0x135b, lpOverlapped=0x0) returned 1 [0117.928] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\OldAge\\NavigationUp_ButtonGraphic.png", nBufferLength=0x105, lpBuffer=0x12d270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\OldAge\\NavigationUp_ButtonGraphic.png", lpFilePart=0x0) returned 0x51 [0117.928] SetErrorMode (uMode=0x1) returned 0x0 [0117.928] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\OldAge\\NavigationUp_ButtonGraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\oldage\\navigationup_buttongraphic.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0117.929] SetErrorMode (uMode=0x0) returned 0x1 [0117.929] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\OldAge\\NavigationUp_SelectionSubpicture.png", nBufferLength=0x105, lpBuffer=0x12d5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\OldAge\\NavigationUp_SelectionSubpicture.png", lpFilePart=0x0) returned 0x57 [0117.929] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\OldAge\\NavigationUp_SelectionSubpicture.png", nBufferLength=0x105, lpBuffer=0x12d590, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\OldAge\\NavigationUp_SelectionSubpicture.png", lpFilePart=0x0) returned 0x57 [0117.929] SetErrorMode (uMode=0x1) returned 0x0 [0117.930] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\OldAge\\NavigationUp_SelectionSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\oldage\\navigationup_selectionsubpicture.png"), fInfoLevelId=0x0, lpFileInformation=0x12d810 | out: lpFileInformation=0x12d810*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fd5a218, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6fd5a218, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d3393fd, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc09)) returned 1 [0117.930] SetErrorMode (uMode=0x0) returned 0x1 [0117.930] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\OldAge\\NavigationUp_SelectionSubpicture.png", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\OldAge\\NavigationUp_SelectionSubpicture.png", lpFilePart=0x0) returned 0x57 [0117.930] SetErrorMode (uMode=0x1) returned 0x0 [0117.930] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\OldAge\\NavigationUp_SelectionSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\oldage\\navigationup_selectionsubpicture.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2e8 [0117.930] GetFileType (hFile=0x2e8) returned 0x1 [0117.930] SetErrorMode (uMode=0x0) returned 0x1 [0117.931] GetFileType (hFile=0x2e8) returned 0x1 [0117.931] GetFileSize (in: hFile=0x2e8, lpFileSizeHigh=0x12d8c8 | out: lpFileSizeHigh=0x12d8c8*=0x0) returned 0xc09 [0117.931] ReadFile (in: hFile=0x2e8, lpBuffer=0x27d0500, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12d7a8, lpOverlapped=0x0 | out: lpBuffer=0x27d0500*, lpNumberOfBytesRead=0x12d7a8*=0xc09, lpOverlapped=0x0) returned 1 [0118.043] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\OldAge\\NavigationUp_SelectionSubpicture.png", nBufferLength=0x105, lpBuffer=0x12d270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\OldAge\\NavigationUp_SelectionSubpicture.png", lpFilePart=0x0) returned 0x57 [0118.044] SetErrorMode (uMode=0x1) returned 0x0 [0118.044] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\OldAge\\NavigationUp_SelectionSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\oldage\\navigationup_selectionsubpicture.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0118.045] SetErrorMode (uMode=0x0) returned 0x1 [0118.045] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\OldAge\\vintage.png", nBufferLength=0x105, lpBuffer=0x12d5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\OldAge\\vintage.png", lpFilePart=0x0) returned 0x3e [0118.045] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\OldAge\\vintage.png", nBufferLength=0x105, lpBuffer=0x12d590, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\OldAge\\vintage.png", lpFilePart=0x0) returned 0x3e [0118.045] SetErrorMode (uMode=0x1) returned 0x0 [0118.045] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\OldAge\\vintage.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\oldage\\vintage.png"), fInfoLevelId=0x0, lpFileInformation=0x12d810 | out: lpFileInformation=0x12d810*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fc9bb47, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6fc9bb47, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d3393fd, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x6c8d)) returned 1 [0118.046] SetErrorMode (uMode=0x0) returned 0x1 [0118.046] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\OldAge\\vintage.png", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\OldAge\\vintage.png", lpFilePart=0x0) returned 0x3e [0118.046] SetErrorMode (uMode=0x1) returned 0x0 [0118.046] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\OldAge\\vintage.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\oldage\\vintage.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2e8 [0118.046] GetFileType (hFile=0x2e8) returned 0x1 [0118.046] SetErrorMode (uMode=0x0) returned 0x1 [0118.046] GetFileType (hFile=0x2e8) returned 0x1 [0118.047] GetFileSize (in: hFile=0x2e8, lpFileSizeHigh=0x12d8c8 | out: lpFileSizeHigh=0x12d8c8*=0x0) returned 0x6c8d [0118.047] ReadFile (in: hFile=0x2e8, lpBuffer=0x28b64f0, nNumberOfBytesToRead=0x6c8d, lpNumberOfBytesRead=0x12d7a8, lpOverlapped=0x0 | out: lpBuffer=0x28b64f0*, lpNumberOfBytesRead=0x12d7a8*=0x6c8d, lpOverlapped=0x0) returned 1 [0118.081] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\OldAge\\vintage.png", nBufferLength=0x105, lpBuffer=0x12d270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\OldAge\\vintage.png", lpFilePart=0x0) returned 0x3e [0118.081] SetErrorMode (uMode=0x1) returned 0x0 [0118.081] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\OldAge\\vintage.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\oldage\\vintage.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0118.082] SetErrorMode (uMode=0x0) returned 0x1 [0118.083] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\OldAge\\Decrypt Instructions.txt", nBufferLength=0x105, lpBuffer=0x12d240, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\OldAge\\Decrypt Instructions.txt", lpFilePart=0x0) returned 0x4b [0118.083] SetErrorMode (uMode=0x1) returned 0x0 [0118.083] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\OldAge\\Decrypt Instructions.txt" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\oldage\\decrypt instructions.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x2e8 [0118.084] GetFileType (hFile=0x2e8) returned 0x1 [0118.084] SetErrorMode (uMode=0x0) returned 0x1 [0118.084] GetFileType (hFile=0x2e8) returned 0x1 [0118.084] WriteFile (in: hFile=0x2e8, lpBuffer=0x27cc358*, nNumberOfBytesToWrite=0x773, lpNumberOfBytesWritten=0x12d7a8, lpOverlapped=0x0 | out: lpBuffer=0x27cc358*, lpNumberOfBytesWritten=0x12d7a8*=0x773, lpOverlapped=0x0) returned 1 [0118.086] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\OldAge", nBufferLength=0x105, lpBuffer=0x12d430, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\OldAge", lpFilePart=0x0) returned 0x32 [0118.086] SetErrorMode (uMode=0x1) returned 0x0 [0118.086] FindFirstFileW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\OldAge\\*", lpFindFileData=0x12d5d0 | out: lpFindFileData=0x12d5d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9f465237, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x667289d0, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x667289d0, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x26bc80 [0118.086] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9f465237, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x667289d0, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x667289d0, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0118.087] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fcc1ca4, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6fcc1ca4, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d2ed141, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x11da, dwReserved0=0x0, dwReserved1=0x0, cFileName="1047x576black.png", cAlternateFileName="")) returned 1 [0118.087] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fce7e01, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6fce7e01, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d2ed141, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xb05, dwReserved0=0x0, dwReserved1=0x0, cFileName="15x15dot.png", cAlternateFileName="")) returned 1 [0118.087] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fd0df5e, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6fd0df5e, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d2ed141, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x183b, dwReserved0=0x0, dwReserved1=0x0, cFileName="decorative_rule.png", cAlternateFileName="")) returned 1 [0118.087] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x667289d0, ftCreationTime.dwHighDateTime=0x1d5e786, ftLastAccessTime.dwLowDateTime=0x667289d0, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x667289d0, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x773, dwReserved0=0x0, dwReserved1=0x0, cFileName="Decrypt Instructions.txt", cAlternateFileName="DECRYP~1.TXT")) returned 1 [0118.087] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fdcc62f, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6fdcc62f, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d2ed141, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationLeft_ButtonGraphic.png", cAlternateFileName="")) returned 1 [0118.087] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fd80375, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6fd80375, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d2ed141, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc3a, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationLeft_SelectionSubpicture.png", cAlternateFileName="")) returned 1 [0118.087] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fda64d2, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6fda64d2, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d2ed141, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13a1, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationRight_ButtonGraphic.png", cAlternateFileName="")) returned 1 [0118.088] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fd340bb, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6fd340bb, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d31329f, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc2e, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationRight_SelectionSubpicture.png", cAlternateFileName="")) returned 1 [0118.088] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fd0df5e, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6fd0df5e, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d31329f, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x135b, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationUp_ButtonGraphic.png", cAlternateFileName="")) returned 1 [0118.088] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fd5a218, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6fd5a218, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d3393fd, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc09, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationUp_SelectionSubpicture.png", cAlternateFileName="")) returned 1 [0118.088] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fc9bb47, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6fc9bb47, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d3393fd, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x6c8d, dwReserved0=0x0, dwReserved1=0x0, cFileName="vintage.png", cAlternateFileName="")) returned 1 [0118.088] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fc9bb47, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6fc9bb47, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d3393fd, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x6c8d, dwReserved0=0x0, dwReserved1=0x0, cFileName="vintage.png", cAlternateFileName="")) returned 0 [0118.088] FindClose (in: hFindFile=0x26bc80 | out: hFindFile=0x26bc80) returned 1 [0118.088] SetErrorMode (uMode=0x0) returned 0x1 [0118.089] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance", nBufferLength=0x105, lpBuffer=0x12d390, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance", lpFilePart=0x0) returned 0x37 [0118.089] SetErrorMode (uMode=0x1) returned 0x0 [0118.089] FindFirstFileW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\*", lpFindFileData=0x12d530 | out: lpFindFileData=0x12d530*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9f4fdbf3, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaab8e11a, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9f9e8c42, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x26bc80 [0118.092] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9f4fdbf3, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaab8e11a, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9f9e8c42, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0118.092] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70562bb6, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70562bb6, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d35f55b, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xeef, dwReserved0=0x0, dwReserved1=0x0, cFileName="720x480blacksquare.png", cAlternateFileName="")) returned 1 [0118.092] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x703015e6, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x703015e6, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d35f55b, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x1168, dwReserved0=0x0, dwReserved1=0x0, cFileName="NextMenuButtonIcon.png", cAlternateFileName="")) returned 1 [0118.092] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70327743, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70327743, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4dbda349, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc04, dwReserved0=0x0, dwReserved1=0x0, cFileName="NextMenuButtonIconSubpictur.png", cAlternateFileName="")) returned 1 [0118.092] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70184844, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70184844, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4dc26605, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xa942c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Notes_loop.wmv", cAlternateFileName="")) returned 1 [0118.092] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7021cdb8, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x7021cdb8, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4dc728c1, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xbebec, dwReserved0=0x0, dwReserved1=0x0, cFileName="Notes_loop_PAL.wmv", cAlternateFileName="")) returned 1 [0118.093] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7015e6e7, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x7015e6e7, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4dd7d253, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x11ad, dwReserved0=0x0, dwReserved1=0x0, cFileName="ParentMenuButtonIcon.png", cAlternateFileName="")) returned 1 [0118.093] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7015e6e7, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x7015e6e7, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4dd7d253, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xbef, dwReserved0=0x0, dwReserved1=0x0, cFileName="ParentMenuButtonIconSubpict.png", cAlternateFileName="")) returned 1 [0118.093] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70053d5c, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70053d5c, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4dda33b1, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x629b, dwReserved0=0x0, dwReserved1=0x0, cFileName="performance.png", cAlternateFileName="")) returned 1 [0118.093] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x700a0016, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x700a0016, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4dd7d253, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x1b0a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Perf_Scenes_Mask1.png", cAlternateFileName="")) returned 1 [0118.093] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x700c6173, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x700c6173, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4dd7d253, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x135f, dwReserved0=0x0, dwReserved1=0x0, cFileName="Perf_Scenes_Subpicture1.png", cAlternateFileName="")) returned 1 [0118.093] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70269072, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70269072, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4dda33b1, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x1197, dwReserved0=0x0, dwReserved1=0x0, cFileName="PreviousMenuButtonIcon.png", cAlternateFileName="")) returned 1 [0118.093] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x702b532c, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x702b532c, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4dda33b1, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc0a, dwReserved0=0x0, dwReserved1=0x0, cFileName="PreviousMenuButtonIconSubpi.png", cAlternateFileName="")) returned 1 [0118.093] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x700ec2d0, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x700ec2d0, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4dda33b1, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc24, dwReserved0=0x0, dwReserved1=0x0, cFileName="redmenu.png", cAlternateFileName="")) returned 1 [0118.094] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70327743, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70327743, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ddc950f, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x8232c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Scene_loop.wmv", cAlternateFileName="")) returned 1 [0118.094] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70399b5a, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70399b5a, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4de61a87, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x95bac, dwReserved0=0x0, dwReserved1=0x0, cFileName="Scene_loop_PAL.wmv", cAlternateFileName="")) returned 1 [0118.094] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7011242d, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x7011242d, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4e53996b, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x99, dwReserved0=0x0, dwReserved1=0x0, cFileName="TitleButtonIcon.png", cAlternateFileName="")) returned 1 [0118.094] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7011242d, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x7011242d, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4e53996b, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x84, dwReserved0=0x0, dwReserved1=0x0, cFileName="TitleButtonSubpicture.png", cAlternateFileName="")) returned 1 [0118.094] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x703e5e14, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x703e5e14, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ded3ea1, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x1a9204, dwReserved0=0x0, dwReserved1=0x0, cFileName="Title_Page.wmv", cAlternateFileName="")) returned 1 [0118.094] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7047e388, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x7047e388, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4e050c4d, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x1d0304, dwReserved0=0x0, dwReserved1=0x0, cFileName="Title_Page_PAL.wmv", cAlternateFileName="")) returned 1 [0118.094] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70588d13, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70588d13, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4e1a789b, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xad264, dwReserved0=0x0, dwReserved1=0x0, cFileName="title_trans_notes.wmv", cAlternateFileName="")) returned 1 [0118.094] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x705fb12a, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x705fb12a, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4e1f3b57, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xb4f64, dwReserved0=0x0, dwReserved1=0x0, cFileName="Title_Trans_Notes_PAL.wmv", cAlternateFileName="")) returned 1 [0118.094] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7066d541, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x7066d541, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4e23fe13, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x999e4, dwReserved0=0x0, dwReserved1=0x0, cFileName="title_trans_scene.wmv", cAlternateFileName="")) returned 1 [0118.094] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70705ab5, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70705ab5, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4e53996b, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xa16e4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Title_Trans_Scene_PAL.wmv", cAlternateFileName="")) returned 1 [0118.095] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70079eb9, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70079eb9, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4e53996b, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x1a3c, dwReserved0=0x0, dwReserved1=0x0, cFileName="userContent_16x9_imagemask.png", cAlternateFileName="")) returned 1 [0118.095] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x700c6173, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x700c6173, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4e53996b, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x2ee8, dwReserved0=0x0, dwReserved1=0x0, cFileName="whitemenu.png", cAlternateFileName="")) returned 1 [0118.095] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x700c6173, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x700c6173, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4e53996b, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x2ee8, dwReserved0=0x0, dwReserved1=0x0, cFileName="whitemenu.png", cAlternateFileName="")) returned 0 [0118.095] FindClose (in: hFindFile=0x26bc80 | out: hFindFile=0x26bc80) returned 1 [0118.096] SetErrorMode (uMode=0x0) returned 0x1 [0118.096] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\720x480blacksquare.png", nBufferLength=0x105, lpBuffer=0x12d5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\720x480blacksquare.png", lpFilePart=0x0) returned 0x4e [0118.096] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\720x480blacksquare.png", nBufferLength=0x105, lpBuffer=0x12d590, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\720x480blacksquare.png", lpFilePart=0x0) returned 0x4e [0118.096] SetErrorMode (uMode=0x1) returned 0x0 [0118.096] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\720x480blacksquare.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\performance\\720x480blacksquare.png"), fInfoLevelId=0x0, lpFileInformation=0x12d810 | out: lpFileInformation=0x12d810*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70562bb6, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70562bb6, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d35f55b, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xeef)) returned 1 [0118.098] SetErrorMode (uMode=0x0) returned 0x1 [0118.098] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\720x480blacksquare.png", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\720x480blacksquare.png", lpFilePart=0x0) returned 0x4e [0118.099] SetErrorMode (uMode=0x1) returned 0x0 [0118.099] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\720x480blacksquare.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\performance\\720x480blacksquare.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2e8 [0118.099] GetFileType (hFile=0x2e8) returned 0x1 [0118.099] SetErrorMode (uMode=0x0) returned 0x1 [0118.099] GetFileType (hFile=0x2e8) returned 0x1 [0118.099] GetFileSize (in: hFile=0x2e8, lpFileSizeHigh=0x12d8c8 | out: lpFileSizeHigh=0x12d8c8*=0x0) returned 0xeef [0118.099] ReadFile (in: hFile=0x2e8, lpBuffer=0x27d2cc0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12d7a8, lpOverlapped=0x0 | out: lpBuffer=0x27d2cc0*, lpNumberOfBytesRead=0x12d7a8*=0xeef, lpOverlapped=0x0) returned 1 [0118.120] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\720x480blacksquare.png", nBufferLength=0x105, lpBuffer=0x12d270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\720x480blacksquare.png", lpFilePart=0x0) returned 0x4e [0118.121] SetErrorMode (uMode=0x1) returned 0x0 [0118.121] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\720x480blacksquare.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\performance\\720x480blacksquare.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0118.122] SetErrorMode (uMode=0x0) returned 0x1 [0118.122] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\NextMenuButtonIcon.png", nBufferLength=0x105, lpBuffer=0x12d5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\NextMenuButtonIcon.png", lpFilePart=0x0) returned 0x4e [0118.122] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\NextMenuButtonIcon.png", nBufferLength=0x105, lpBuffer=0x12d590, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\NextMenuButtonIcon.png", lpFilePart=0x0) returned 0x4e [0118.122] SetErrorMode (uMode=0x1) returned 0x0 [0118.122] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\NextMenuButtonIcon.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\performance\\nextmenubuttonicon.png"), fInfoLevelId=0x0, lpFileInformation=0x12d810 | out: lpFileInformation=0x12d810*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x703015e6, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x703015e6, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d35f55b, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x1168)) returned 1 [0118.123] SetErrorMode (uMode=0x0) returned 0x1 [0118.123] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\NextMenuButtonIcon.png", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\NextMenuButtonIcon.png", lpFilePart=0x0) returned 0x4e [0118.123] SetErrorMode (uMode=0x1) returned 0x0 [0118.123] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\NextMenuButtonIcon.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\performance\\nextmenubuttonicon.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2e8 [0118.123] GetFileType (hFile=0x2e8) returned 0x1 [0118.123] SetErrorMode (uMode=0x0) returned 0x1 [0118.124] GetFileType (hFile=0x2e8) returned 0x1 [0118.124] GetFileSize (in: hFile=0x2e8, lpFileSizeHigh=0x12d8c8 | out: lpFileSizeHigh=0x12d8c8*=0x0) returned 0x1168 [0118.124] ReadFile (in: hFile=0x2e8, lpBuffer=0x28b9e58, nNumberOfBytesToRead=0x1168, lpNumberOfBytesRead=0x12d7a8, lpOverlapped=0x0 | out: lpBuffer=0x28b9e58*, lpNumberOfBytesRead=0x12d7a8*=0x1168, lpOverlapped=0x0) returned 1 [0118.150] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\NextMenuButtonIcon.png", nBufferLength=0x105, lpBuffer=0x12d270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\NextMenuButtonIcon.png", lpFilePart=0x0) returned 0x4e [0118.150] SetErrorMode (uMode=0x1) returned 0x0 [0118.150] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\NextMenuButtonIcon.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\performance\\nextmenubuttonicon.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0118.151] SetErrorMode (uMode=0x0) returned 0x1 [0118.152] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\NextMenuButtonIconSubpictur.png", nBufferLength=0x105, lpBuffer=0x12d5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\NextMenuButtonIconSubpictur.png", lpFilePart=0x0) returned 0x57 [0118.152] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\NextMenuButtonIconSubpictur.png", nBufferLength=0x105, lpBuffer=0x12d590, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\NextMenuButtonIconSubpictur.png", lpFilePart=0x0) returned 0x57 [0118.152] SetErrorMode (uMode=0x1) returned 0x0 [0118.152] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\NextMenuButtonIconSubpictur.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\performance\\nextmenubuttoniconsubpictur.png"), fInfoLevelId=0x0, lpFileInformation=0x12d810 | out: lpFileInformation=0x12d810*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70327743, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70327743, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4dbda349, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc04)) returned 1 [0118.152] SetErrorMode (uMode=0x0) returned 0x1 [0118.153] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\NextMenuButtonIconSubpictur.png", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\NextMenuButtonIconSubpictur.png", lpFilePart=0x0) returned 0x57 [0118.153] SetErrorMode (uMode=0x1) returned 0x0 [0118.153] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\NextMenuButtonIconSubpictur.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\performance\\nextmenubuttoniconsubpictur.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2e8 [0118.153] GetFileType (hFile=0x2e8) returned 0x1 [0118.153] SetErrorMode (uMode=0x0) returned 0x1 [0118.153] GetFileType (hFile=0x2e8) returned 0x1 [0118.153] GetFileSize (in: hFile=0x2e8, lpFileSizeHigh=0x12d8c8 | out: lpFileSizeHigh=0x12d8c8*=0x0) returned 0xc04 [0118.153] ReadFile (in: hFile=0x2e8, lpBuffer=0x27b3768, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12d7a8, lpOverlapped=0x0 | out: lpBuffer=0x27b3768*, lpNumberOfBytesRead=0x12d7a8*=0xc04, lpOverlapped=0x0) returned 1 [0118.175] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\NextMenuButtonIconSubpictur.png", nBufferLength=0x105, lpBuffer=0x12d270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\NextMenuButtonIconSubpictur.png", lpFilePart=0x0) returned 0x57 [0118.175] SetErrorMode (uMode=0x1) returned 0x0 [0118.175] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\NextMenuButtonIconSubpictur.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\performance\\nextmenubuttoniconsubpictur.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0118.176] SetErrorMode (uMode=0x0) returned 0x1 [0118.177] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\Notes_loop.wmv", nBufferLength=0x105, lpBuffer=0x12d5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\Notes_loop.wmv", lpFilePart=0x0) returned 0x46 [0118.177] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\Notes_loop.wmv", nBufferLength=0x105, lpBuffer=0x12d590, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\Notes_loop.wmv", lpFilePart=0x0) returned 0x46 [0118.177] SetErrorMode (uMode=0x1) returned 0x0 [0118.177] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\Notes_loop.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\performance\\notes_loop.wmv"), fInfoLevelId=0x0, lpFileInformation=0x12d810 | out: lpFileInformation=0x12d810*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70184844, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70184844, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4dc26605, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xa942c)) returned 1 [0118.181] SetErrorMode (uMode=0x0) returned 0x1 [0118.182] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\Notes_loop.wmv", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\Notes_loop.wmv", lpFilePart=0x0) returned 0x46 [0118.182] SetErrorMode (uMode=0x1) returned 0x0 [0118.182] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\Notes_loop.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\performance\\notes_loop.wmv"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2e8 [0118.182] GetFileType (hFile=0x2e8) returned 0x1 [0118.182] SetErrorMode (uMode=0x0) returned 0x1 [0118.182] GetFileType (hFile=0x2e8) returned 0x1 [0118.182] GetFileSize (in: hFile=0x2e8, lpFileSizeHigh=0x12d8c8 | out: lpFileSizeHigh=0x12d8c8*=0x0) returned 0xa942c [0118.190] ReadFile (in: hFile=0x2e8, lpBuffer=0x12826938, nNumberOfBytesToRead=0xa942c, lpNumberOfBytesRead=0x12d7a8, lpOverlapped=0x0 | out: lpBuffer=0x12826938*, lpNumberOfBytesRead=0x12d7a8*=0xa942c, lpOverlapped=0x0) returned 1 [0118.294] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\Notes_loop.wmv", nBufferLength=0x105, lpBuffer=0x12d270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\Notes_loop.wmv", lpFilePart=0x0) returned 0x46 [0118.294] SetErrorMode (uMode=0x1) returned 0x0 [0118.294] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\Notes_loop.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\performance\\notes_loop.wmv"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0118.295] SetErrorMode (uMode=0x0) returned 0x1 [0118.296] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\Notes_loop_PAL.wmv", nBufferLength=0x105, lpBuffer=0x12d5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\Notes_loop_PAL.wmv", lpFilePart=0x0) returned 0x4a [0118.296] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\Notes_loop_PAL.wmv", nBufferLength=0x105, lpBuffer=0x12d590, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\Notes_loop_PAL.wmv", lpFilePart=0x0) returned 0x4a [0118.296] SetErrorMode (uMode=0x1) returned 0x0 [0118.296] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\Notes_loop_PAL.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\performance\\notes_loop_pal.wmv"), fInfoLevelId=0x0, lpFileInformation=0x12d810 | out: lpFileInformation=0x12d810*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7021cdb8, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x7021cdb8, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4dc728c1, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xbebec)) returned 1 [0118.297] SetErrorMode (uMode=0x0) returned 0x1 [0118.297] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\Notes_loop_PAL.wmv", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\Notes_loop_PAL.wmv", lpFilePart=0x0) returned 0x4a [0118.297] SetErrorMode (uMode=0x1) returned 0x0 [0118.297] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\Notes_loop_PAL.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\performance\\notes_loop_pal.wmv"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2e8 [0118.297] SetErrorMode (uMode=0x0) returned 0x1 [0118.297] GetFileType (hFile=0x2e8) returned 0x1 [0118.297] GetFileSize (in: hFile=0x2e8, lpFileSizeHigh=0x12d8c8 | out: lpFileSizeHigh=0x12d8c8*=0x0) returned 0xbebec [0118.301] ReadFile (in: hFile=0x2e8, lpBuffer=0x1287c870, nNumberOfBytesToRead=0xbebec, lpNumberOfBytesRead=0x12d7a8, lpOverlapped=0x0 | out: lpBuffer=0x1287c870*, lpNumberOfBytesRead=0x12d7a8*=0xbebec, lpOverlapped=0x0) returned 1 [0118.400] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\Notes_loop_PAL.wmv", nBufferLength=0x105, lpBuffer=0x12d270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\Notes_loop_PAL.wmv", lpFilePart=0x0) returned 0x4a [0118.400] SetErrorMode (uMode=0x1) returned 0x0 [0118.400] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\Notes_loop_PAL.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\performance\\notes_loop_pal.wmv"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0118.401] SetErrorMode (uMode=0x0) returned 0x1 [0118.402] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\ParentMenuButtonIcon.png", nBufferLength=0x105, lpBuffer=0x12d5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\ParentMenuButtonIcon.png", lpFilePart=0x0) returned 0x50 [0118.402] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\ParentMenuButtonIcon.png", nBufferLength=0x105, lpBuffer=0x12d590, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\ParentMenuButtonIcon.png", lpFilePart=0x0) returned 0x50 [0118.402] SetErrorMode (uMode=0x1) returned 0x0 [0118.402] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\ParentMenuButtonIcon.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\performance\\parentmenubuttonicon.png"), fInfoLevelId=0x0, lpFileInformation=0x12d810 | out: lpFileInformation=0x12d810*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7015e6e7, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x7015e6e7, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4dd7d253, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x11ad)) returned 1 [0118.402] SetErrorMode (uMode=0x0) returned 0x1 [0118.402] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\ParentMenuButtonIcon.png", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\ParentMenuButtonIcon.png", lpFilePart=0x0) returned 0x50 [0118.402] SetErrorMode (uMode=0x1) returned 0x0 [0118.402] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\ParentMenuButtonIcon.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\performance\\parentmenubuttonicon.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2e8 [0118.402] SetErrorMode (uMode=0x0) returned 0x1 [0118.403] GetFileType (hFile=0x2e8) returned 0x1 [0118.403] GetFileSize (in: hFile=0x2e8, lpFileSizeHigh=0x12d8c8 | out: lpFileSizeHigh=0x12d8c8*=0x0) returned 0x11ad [0118.403] ReadFile (in: hFile=0x2e8, lpBuffer=0x26c4478, nNumberOfBytesToRead=0x11ad, lpNumberOfBytesRead=0x12d7a8, lpOverlapped=0x0 | out: lpBuffer=0x26c4478*, lpNumberOfBytesRead=0x12d7a8*=0x11ad, lpOverlapped=0x0) returned 1 [0118.422] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\ParentMenuButtonIcon.png", nBufferLength=0x105, lpBuffer=0x12d270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\ParentMenuButtonIcon.png", lpFilePart=0x0) returned 0x50 [0118.422] SetErrorMode (uMode=0x1) returned 0x0 [0118.422] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\ParentMenuButtonIcon.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\performance\\parentmenubuttonicon.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0118.423] SetErrorMode (uMode=0x0) returned 0x1 [0118.423] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\ParentMenuButtonIconSubpict.png", nBufferLength=0x105, lpBuffer=0x12d5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\ParentMenuButtonIconSubpict.png", lpFilePart=0x0) returned 0x57 [0118.423] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\ParentMenuButtonIconSubpict.png", nBufferLength=0x105, lpBuffer=0x12d590, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\ParentMenuButtonIconSubpict.png", lpFilePart=0x0) returned 0x57 [0118.423] SetErrorMode (uMode=0x1) returned 0x0 [0118.424] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\ParentMenuButtonIconSubpict.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\performance\\parentmenubuttoniconsubpict.png"), fInfoLevelId=0x0, lpFileInformation=0x12d810 | out: lpFileInformation=0x12d810*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7015e6e7, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x7015e6e7, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4dd7d253, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xbef)) returned 1 [0118.424] SetErrorMode (uMode=0x0) returned 0x1 [0118.424] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\ParentMenuButtonIconSubpict.png", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\ParentMenuButtonIconSubpict.png", lpFilePart=0x0) returned 0x57 [0118.424] SetErrorMode (uMode=0x1) returned 0x0 [0118.424] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\ParentMenuButtonIconSubpict.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\performance\\parentmenubuttoniconsubpict.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2e8 [0118.424] SetErrorMode (uMode=0x0) returned 0x1 [0118.424] GetFileType (hFile=0x2e8) returned 0x1 [0118.424] GetFileSize (in: hFile=0x2e8, lpFileSizeHigh=0x12d8c8 | out: lpFileSizeHigh=0x12d8c8*=0x0) returned 0xbef [0118.425] ReadFile (in: hFile=0x2e8, lpBuffer=0x27ad1f8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12d7a8, lpOverlapped=0x0 | out: lpBuffer=0x27ad1f8*, lpNumberOfBytesRead=0x12d7a8*=0xbef, lpOverlapped=0x0) returned 1 [0118.439] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\ParentMenuButtonIconSubpict.png", nBufferLength=0x105, lpBuffer=0x12d270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\ParentMenuButtonIconSubpict.png", lpFilePart=0x0) returned 0x57 [0118.439] SetErrorMode (uMode=0x1) returned 0x0 [0118.439] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\ParentMenuButtonIconSubpict.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\performance\\parentmenubuttoniconsubpict.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0118.440] SetErrorMode (uMode=0x0) returned 0x1 [0118.440] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\performance.png", nBufferLength=0x105, lpBuffer=0x12d5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\performance.png", lpFilePart=0x0) returned 0x47 [0118.440] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\performance.png", nBufferLength=0x105, lpBuffer=0x12d590, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\performance.png", lpFilePart=0x0) returned 0x47 [0118.440] SetErrorMode (uMode=0x1) returned 0x0 [0118.440] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\performance.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\performance\\performance.png"), fInfoLevelId=0x0, lpFileInformation=0x12d810 | out: lpFileInformation=0x12d810*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70053d5c, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70053d5c, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4dda33b1, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x629b)) returned 1 [0118.446] SetErrorMode (uMode=0x0) returned 0x1 [0118.446] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\performance.png", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\performance.png", lpFilePart=0x0) returned 0x47 [0118.446] SetErrorMode (uMode=0x1) returned 0x0 [0118.446] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\performance.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\performance\\performance.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2e8 [0118.447] SetErrorMode (uMode=0x0) returned 0x1 [0118.447] GetFileType (hFile=0x2e8) returned 0x1 [0118.447] GetFileSize (in: hFile=0x2e8, lpFileSizeHigh=0x12d8c8 | out: lpFileSizeHigh=0x12d8c8*=0x0) returned 0x629b [0118.447] ReadFile (in: hFile=0x2e8, lpBuffer=0x2893178, nNumberOfBytesToRead=0x629b, lpNumberOfBytesRead=0x12d7a8, lpOverlapped=0x0 | out: lpBuffer=0x2893178*, lpNumberOfBytesRead=0x12d7a8*=0x629b, lpOverlapped=0x0) returned 1 [0118.469] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\performance.png", nBufferLength=0x105, lpBuffer=0x12d270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\performance.png", lpFilePart=0x0) returned 0x47 [0118.469] SetErrorMode (uMode=0x1) returned 0x0 [0118.469] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\performance.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\performance\\performance.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0118.470] SetErrorMode (uMode=0x0) returned 0x1 [0118.471] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\Perf_Scenes_Mask1.png", nBufferLength=0x105, lpBuffer=0x12d5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\Perf_Scenes_Mask1.png", lpFilePart=0x0) returned 0x4d [0118.471] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\Perf_Scenes_Mask1.png", nBufferLength=0x105, lpBuffer=0x12d590, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\Perf_Scenes_Mask1.png", lpFilePart=0x0) returned 0x4d [0118.471] SetErrorMode (uMode=0x1) returned 0x0 [0118.471] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\Perf_Scenes_Mask1.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\performance\\perf_scenes_mask1.png"), fInfoLevelId=0x0, lpFileInformation=0x12d810 | out: lpFileInformation=0x12d810*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x700a0016, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x700a0016, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4dd7d253, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x1b0a)) returned 1 [0118.471] SetErrorMode (uMode=0x0) returned 0x1 [0118.471] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\Perf_Scenes_Mask1.png", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\Perf_Scenes_Mask1.png", lpFilePart=0x0) returned 0x4d [0118.471] SetErrorMode (uMode=0x1) returned 0x0 [0118.472] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\Perf_Scenes_Mask1.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\performance\\perf_scenes_mask1.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2e8 [0118.472] SetErrorMode (uMode=0x0) returned 0x1 [0118.472] GetFileType (hFile=0x2e8) returned 0x1 [0118.472] GetFileSize (in: hFile=0x2e8, lpFileSizeHigh=0x12d8c8 | out: lpFileSizeHigh=0x12d8c8*=0x0) returned 0x1b0a [0118.472] ReadFile (in: hFile=0x2e8, lpBuffer=0x27a03d8, nNumberOfBytesToRead=0x1b0a, lpNumberOfBytesRead=0x12d7a8, lpOverlapped=0x0 | out: lpBuffer=0x27a03d8*, lpNumberOfBytesRead=0x12d7a8*=0x1b0a, lpOverlapped=0x0) returned 1 [0118.489] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\Perf_Scenes_Mask1.png", nBufferLength=0x105, lpBuffer=0x12d270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\Perf_Scenes_Mask1.png", lpFilePart=0x0) returned 0x4d [0118.489] SetErrorMode (uMode=0x1) returned 0x0 [0118.490] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\Perf_Scenes_Mask1.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\performance\\perf_scenes_mask1.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0118.490] SetErrorMode (uMode=0x0) returned 0x1 [0118.491] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\Perf_Scenes_Subpicture1.png", nBufferLength=0x105, lpBuffer=0x12d5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\Perf_Scenes_Subpicture1.png", lpFilePart=0x0) returned 0x53 [0118.491] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\Perf_Scenes_Subpicture1.png", nBufferLength=0x105, lpBuffer=0x12d590, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\Perf_Scenes_Subpicture1.png", lpFilePart=0x0) returned 0x53 [0118.491] SetErrorMode (uMode=0x1) returned 0x0 [0118.491] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\Perf_Scenes_Subpicture1.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\performance\\perf_scenes_subpicture1.png"), fInfoLevelId=0x0, lpFileInformation=0x12d810 | out: lpFileInformation=0x12d810*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x700c6173, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x700c6173, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4dd7d253, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x135f)) returned 1 [0118.491] SetErrorMode (uMode=0x0) returned 0x1 [0118.491] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\Perf_Scenes_Subpicture1.png", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\Perf_Scenes_Subpicture1.png", lpFilePart=0x0) returned 0x53 [0118.492] SetErrorMode (uMode=0x1) returned 0x0 [0118.492] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\Perf_Scenes_Subpicture1.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\performance\\perf_scenes_subpicture1.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2e8 [0118.492] SetErrorMode (uMode=0x0) returned 0x1 [0118.492] GetFileType (hFile=0x2e8) returned 0x1 [0118.492] GetFileSize (in: hFile=0x2e8, lpFileSizeHigh=0x12d8c8 | out: lpFileSizeHigh=0x12d8c8*=0x0) returned 0x135f [0118.492] ReadFile (in: hFile=0x2e8, lpBuffer=0x288bd40, nNumberOfBytesToRead=0x135f, lpNumberOfBytesRead=0x12d7a8, lpOverlapped=0x0 | out: lpBuffer=0x288bd40*, lpNumberOfBytesRead=0x12d7a8*=0x135f, lpOverlapped=0x0) returned 1 [0118.510] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\Perf_Scenes_Subpicture1.png", nBufferLength=0x105, lpBuffer=0x12d270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\Perf_Scenes_Subpicture1.png", lpFilePart=0x0) returned 0x53 [0118.511] SetErrorMode (uMode=0x1) returned 0x0 [0118.511] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\Perf_Scenes_Subpicture1.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\performance\\perf_scenes_subpicture1.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0118.511] SetErrorMode (uMode=0x0) returned 0x1 [0118.512] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\PreviousMenuButtonIcon.png", nBufferLength=0x105, lpBuffer=0x12d5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\PreviousMenuButtonIcon.png", lpFilePart=0x0) returned 0x52 [0118.512] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\PreviousMenuButtonIcon.png", nBufferLength=0x105, lpBuffer=0x12d590, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\PreviousMenuButtonIcon.png", lpFilePart=0x0) returned 0x52 [0118.512] SetErrorMode (uMode=0x1) returned 0x0 [0118.512] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\PreviousMenuButtonIcon.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\performance\\previousmenubuttonicon.png"), fInfoLevelId=0x0, lpFileInformation=0x12d810 | out: lpFileInformation=0x12d810*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70269072, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70269072, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4dda33b1, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x1197)) returned 1 [0118.513] SetErrorMode (uMode=0x0) returned 0x1 [0118.513] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\PreviousMenuButtonIcon.png", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\PreviousMenuButtonIcon.png", lpFilePart=0x0) returned 0x52 [0118.513] SetErrorMode (uMode=0x1) returned 0x0 [0118.513] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\PreviousMenuButtonIcon.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\performance\\previousmenubuttonicon.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2e8 [0118.513] SetErrorMode (uMode=0x0) returned 0x1 [0118.513] GetFileType (hFile=0x2e8) returned 0x1 [0118.513] GetFileSize (in: hFile=0x2e8, lpFileSizeHigh=0x12d8c8 | out: lpFileSizeHigh=0x12d8c8*=0x0) returned 0x1197 [0118.513] ReadFile (in: hFile=0x2e8, lpBuffer=0x2782980, nNumberOfBytesToRead=0x1197, lpNumberOfBytesRead=0x12d7a8, lpOverlapped=0x0 | out: lpBuffer=0x2782980*, lpNumberOfBytesRead=0x12d7a8*=0x1197, lpOverlapped=0x0) returned 1 [0118.534] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\PreviousMenuButtonIcon.png", nBufferLength=0x105, lpBuffer=0x12d270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\PreviousMenuButtonIcon.png", lpFilePart=0x0) returned 0x52 [0118.534] SetErrorMode (uMode=0x1) returned 0x0 [0118.534] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\PreviousMenuButtonIcon.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\performance\\previousmenubuttonicon.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0118.535] SetErrorMode (uMode=0x0) returned 0x1 [0118.536] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\PreviousMenuButtonIconSubpi.png", nBufferLength=0x105, lpBuffer=0x12d5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\PreviousMenuButtonIconSubpi.png", lpFilePart=0x0) returned 0x57 [0118.536] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\PreviousMenuButtonIconSubpi.png", nBufferLength=0x105, lpBuffer=0x12d590, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\PreviousMenuButtonIconSubpi.png", lpFilePart=0x0) returned 0x57 [0118.536] SetErrorMode (uMode=0x1) returned 0x0 [0118.536] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\PreviousMenuButtonIconSubpi.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\performance\\previousmenubuttoniconsubpi.png"), fInfoLevelId=0x0, lpFileInformation=0x12d810 | out: lpFileInformation=0x12d810*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x702b532c, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x702b532c, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4dda33b1, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc0a)) returned 1 [0118.537] SetErrorMode (uMode=0x0) returned 0x1 [0118.537] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\PreviousMenuButtonIconSubpi.png", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\PreviousMenuButtonIconSubpi.png", lpFilePart=0x0) returned 0x57 [0118.538] SetErrorMode (uMode=0x1) returned 0x0 [0118.538] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\PreviousMenuButtonIconSubpi.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\performance\\previousmenubuttoniconsubpi.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2e8 [0118.538] SetErrorMode (uMode=0x0) returned 0x1 [0118.538] GetFileType (hFile=0x2e8) returned 0x1 [0118.538] GetFileSize (in: hFile=0x2e8, lpFileSizeHigh=0x12d8c8 | out: lpFileSizeHigh=0x12d8c8*=0x0) returned 0xc0a [0118.538] ReadFile (in: hFile=0x2e8, lpBuffer=0x286b6c8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12d7a8, lpOverlapped=0x0 | out: lpBuffer=0x286b6c8*, lpNumberOfBytesRead=0x12d7a8*=0xc0a, lpOverlapped=0x0) returned 1 [0118.563] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\PreviousMenuButtonIconSubpi.png", nBufferLength=0x105, lpBuffer=0x12d270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\PreviousMenuButtonIconSubpi.png", lpFilePart=0x0) returned 0x57 [0118.563] SetErrorMode (uMode=0x1) returned 0x0 [0118.563] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\PreviousMenuButtonIconSubpi.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\performance\\previousmenubuttoniconsubpi.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0118.564] SetErrorMode (uMode=0x0) returned 0x1 [0118.564] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\redmenu.png", nBufferLength=0x105, lpBuffer=0x12d5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\redmenu.png", lpFilePart=0x0) returned 0x43 [0118.564] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\redmenu.png", nBufferLength=0x105, lpBuffer=0x12d590, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\redmenu.png", lpFilePart=0x0) returned 0x43 [0118.565] SetErrorMode (uMode=0x1) returned 0x0 [0118.565] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\redmenu.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\performance\\redmenu.png"), fInfoLevelId=0x0, lpFileInformation=0x12d810 | out: lpFileInformation=0x12d810*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x700ec2d0, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x700ec2d0, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4dda33b1, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc24)) returned 1 [0118.565] SetErrorMode (uMode=0x0) returned 0x1 [0118.565] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\redmenu.png", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\redmenu.png", lpFilePart=0x0) returned 0x43 [0118.565] SetErrorMode (uMode=0x1) returned 0x0 [0118.565] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\redmenu.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\performance\\redmenu.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2e8 [0118.566] SetErrorMode (uMode=0x0) returned 0x1 [0118.566] GetFileType (hFile=0x2e8) returned 0x1 [0118.566] GetFileSize (in: hFile=0x2e8, lpFileSizeHigh=0x12d8c8 | out: lpFileSizeHigh=0x12d8c8*=0x0) returned 0xc24 [0118.566] ReadFile (in: hFile=0x2e8, lpBuffer=0x2756150, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12d7a8, lpOverlapped=0x0 | out: lpBuffer=0x2756150*, lpNumberOfBytesRead=0x12d7a8*=0xc24, lpOverlapped=0x0) returned 1 [0118.594] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\redmenu.png", nBufferLength=0x105, lpBuffer=0x12d270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\redmenu.png", lpFilePart=0x0) returned 0x43 [0118.594] SetErrorMode (uMode=0x1) returned 0x0 [0118.594] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\redmenu.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\performance\\redmenu.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0118.595] SetErrorMode (uMode=0x0) returned 0x1 [0118.595] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\Scene_loop.wmv", nBufferLength=0x105, lpBuffer=0x12d5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\Scene_loop.wmv", lpFilePart=0x0) returned 0x46 [0118.595] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\Scene_loop.wmv", nBufferLength=0x105, lpBuffer=0x12d590, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\Scene_loop.wmv", lpFilePart=0x0) returned 0x46 [0118.596] SetErrorMode (uMode=0x1) returned 0x0 [0118.596] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\Scene_loop.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\performance\\scene_loop.wmv"), fInfoLevelId=0x0, lpFileInformation=0x12d810 | out: lpFileInformation=0x12d810*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70327743, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70327743, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ddc950f, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x8232c)) returned 1 [0118.596] SetErrorMode (uMode=0x0) returned 0x1 [0118.596] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\Scene_loop.wmv", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\Scene_loop.wmv", lpFilePart=0x0) returned 0x46 [0118.596] SetErrorMode (uMode=0x1) returned 0x0 [0118.596] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\Scene_loop.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\performance\\scene_loop.wmv"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2e8 [0118.596] SetErrorMode (uMode=0x0) returned 0x1 [0118.597] GetFileType (hFile=0x2e8) returned 0x1 [0118.597] GetFileSize (in: hFile=0x2e8, lpFileSizeHigh=0x12d8c8 | out: lpFileSizeHigh=0x12d8c8*=0x0) returned 0x8232c [0118.599] ReadFile (in: hFile=0x2e8, lpBuffer=0x12d96428, nNumberOfBytesToRead=0x8232c, lpNumberOfBytesRead=0x12d7a8, lpOverlapped=0x0 | out: lpBuffer=0x12d96428*, lpNumberOfBytesRead=0x12d7a8*=0x8232c, lpOverlapped=0x0) returned 1 [0118.696] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\Scene_loop.wmv", nBufferLength=0x105, lpBuffer=0x12d270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\Scene_loop.wmv", lpFilePart=0x0) returned 0x46 [0118.696] SetErrorMode (uMode=0x1) returned 0x0 [0118.697] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\Scene_loop.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\performance\\scene_loop.wmv"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0118.697] SetErrorMode (uMode=0x0) returned 0x1 [0118.698] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\Scene_loop_PAL.wmv", nBufferLength=0x105, lpBuffer=0x12d5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\Scene_loop_PAL.wmv", lpFilePart=0x0) returned 0x4a [0118.698] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\Scene_loop_PAL.wmv", nBufferLength=0x105, lpBuffer=0x12d590, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\Scene_loop_PAL.wmv", lpFilePart=0x0) returned 0x4a [0118.698] SetErrorMode (uMode=0x1) returned 0x0 [0118.698] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\Scene_loop_PAL.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\performance\\scene_loop_pal.wmv"), fInfoLevelId=0x0, lpFileInformation=0x12d810 | out: lpFileInformation=0x12d810*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70399b5a, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70399b5a, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4de61a87, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x95bac)) returned 1 [0118.699] SetErrorMode (uMode=0x0) returned 0x1 [0118.699] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\Scene_loop_PAL.wmv", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\Scene_loop_PAL.wmv", lpFilePart=0x0) returned 0x4a [0118.699] SetErrorMode (uMode=0x1) returned 0x0 [0118.699] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\Scene_loop_PAL.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\performance\\scene_loop_pal.wmv"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2e8 [0118.699] SetErrorMode (uMode=0x0) returned 0x1 [0118.699] GetFileType (hFile=0x2e8) returned 0x1 [0118.699] GetFileSize (in: hFile=0x2e8, lpFileSizeHigh=0x12d8c8 | out: lpFileSizeHigh=0x12d8c8*=0x0) returned 0x95bac [0118.703] ReadFile (in: hFile=0x2e8, lpBuffer=0x1290bc10, nNumberOfBytesToRead=0x95bac, lpNumberOfBytesRead=0x12d7a8, lpOverlapped=0x0 | out: lpBuffer=0x1290bc10*, lpNumberOfBytesRead=0x12d7a8*=0x95bac, lpOverlapped=0x0) returned 1 [0118.819] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\Scene_loop_PAL.wmv", nBufferLength=0x105, lpBuffer=0x12d270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\Scene_loop_PAL.wmv", lpFilePart=0x0) returned 0x4a [0118.820] SetErrorMode (uMode=0x1) returned 0x0 [0118.820] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\Scene_loop_PAL.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\performance\\scene_loop_pal.wmv"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0118.821] SetErrorMode (uMode=0x0) returned 0x1 [0118.821] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\TitleButtonIcon.png", nBufferLength=0x105, lpBuffer=0x12d5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\TitleButtonIcon.png", lpFilePart=0x0) returned 0x4b [0118.822] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\TitleButtonIcon.png", nBufferLength=0x105, lpBuffer=0x12d590, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\TitleButtonIcon.png", lpFilePart=0x0) returned 0x4b [0118.822] SetErrorMode (uMode=0x1) returned 0x0 [0118.822] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\TitleButtonIcon.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\performance\\titlebuttonicon.png"), fInfoLevelId=0x0, lpFileInformation=0x12d810 | out: lpFileInformation=0x12d810*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7011242d, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x7011242d, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4e53996b, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x99)) returned 1 [0118.823] SetErrorMode (uMode=0x0) returned 0x1 [0118.823] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\TitleButtonIcon.png", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\TitleButtonIcon.png", lpFilePart=0x0) returned 0x4b [0118.823] SetErrorMode (uMode=0x1) returned 0x0 [0118.823] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\TitleButtonIcon.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\performance\\titlebuttonicon.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2e8 [0118.824] SetErrorMode (uMode=0x0) returned 0x1 [0118.824] GetFileType (hFile=0x2e8) returned 0x1 [0118.824] GetFileSize (in: hFile=0x2e8, lpFileSizeHigh=0x12d8c8 | out: lpFileSizeHigh=0x12d8c8*=0x0) returned 0x99 [0118.824] ReadFile (in: hFile=0x2e8, lpBuffer=0x26c44c8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12d7a8, lpOverlapped=0x0 | out: lpBuffer=0x26c44c8*, lpNumberOfBytesRead=0x12d7a8*=0x99, lpOverlapped=0x0) returned 1 [0118.848] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\TitleButtonIcon.png", nBufferLength=0x105, lpBuffer=0x12d270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\TitleButtonIcon.png", lpFilePart=0x0) returned 0x4b [0118.848] SetErrorMode (uMode=0x1) returned 0x0 [0118.849] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\TitleButtonIcon.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\performance\\titlebuttonicon.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0118.850] SetErrorMode (uMode=0x0) returned 0x1 [0118.850] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\TitleButtonSubpicture.png", nBufferLength=0x105, lpBuffer=0x12d5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\TitleButtonSubpicture.png", lpFilePart=0x0) returned 0x51 [0118.850] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\TitleButtonSubpicture.png", nBufferLength=0x105, lpBuffer=0x12d590, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\TitleButtonSubpicture.png", lpFilePart=0x0) returned 0x51 [0118.850] SetErrorMode (uMode=0x1) returned 0x0 [0118.850] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\TitleButtonSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\performance\\titlebuttonsubpicture.png"), fInfoLevelId=0x0, lpFileInformation=0x12d810 | out: lpFileInformation=0x12d810*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7011242d, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x7011242d, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4e53996b, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x84)) returned 1 [0118.851] SetErrorMode (uMode=0x0) returned 0x1 [0118.851] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\TitleButtonSubpicture.png", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\TitleButtonSubpicture.png", lpFilePart=0x0) returned 0x51 [0118.851] SetErrorMode (uMode=0x1) returned 0x0 [0118.851] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\TitleButtonSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\performance\\titlebuttonsubpicture.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2e8 [0118.851] SetErrorMode (uMode=0x0) returned 0x1 [0118.852] GetFileType (hFile=0x2e8) returned 0x1 [0118.852] GetFileSize (in: hFile=0x2e8, lpFileSizeHigh=0x12d8c8 | out: lpFileSizeHigh=0x12d8c8*=0x0) returned 0x84 [0118.852] ReadFile (in: hFile=0x2e8, lpBuffer=0x27a6ea8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12d7a8, lpOverlapped=0x0 | out: lpBuffer=0x27a6ea8*, lpNumberOfBytesRead=0x12d7a8*=0x84, lpOverlapped=0x0) returned 1 [0118.872] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\TitleButtonSubpicture.png", nBufferLength=0x105, lpBuffer=0x12d270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\TitleButtonSubpicture.png", lpFilePart=0x0) returned 0x51 [0118.872] SetErrorMode (uMode=0x1) returned 0x0 [0118.872] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\TitleButtonSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\performance\\titlebuttonsubpicture.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0118.873] SetErrorMode (uMode=0x0) returned 0x1 [0118.873] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\Title_Page.wmv", nBufferLength=0x105, lpBuffer=0x12d5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\Title_Page.wmv", lpFilePart=0x0) returned 0x46 [0118.873] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\Title_Page.wmv", nBufferLength=0x105, lpBuffer=0x12d590, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\Title_Page.wmv", lpFilePart=0x0) returned 0x46 [0118.873] SetErrorMode (uMode=0x1) returned 0x0 [0118.873] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\Title_Page.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\performance\\title_page.wmv"), fInfoLevelId=0x0, lpFileInformation=0x12d810 | out: lpFileInformation=0x12d810*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x703e5e14, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x703e5e14, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ded3ea1, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x1a9204)) returned 1 [0118.874] SetErrorMode (uMode=0x0) returned 0x1 [0118.874] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\Title_Page.wmv", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\Title_Page.wmv", lpFilePart=0x0) returned 0x46 [0118.874] SetErrorMode (uMode=0x1) returned 0x0 [0118.874] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\Title_Page.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\performance\\title_page.wmv"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2e8 [0118.874] SetErrorMode (uMode=0x0) returned 0x1 [0118.874] GetFileType (hFile=0x2e8) returned 0x1 [0118.874] GetFileSize (in: hFile=0x2e8, lpFileSizeHigh=0x12d8c8 | out: lpFileSizeHigh=0x12d8c8*=0x0) returned 0x1a9204 [0118.880] ReadFile (in: hFile=0x2e8, lpBuffer=0x12a373b8, nNumberOfBytesToRead=0x1a9204, lpNumberOfBytesRead=0x12d7a8, lpOverlapped=0x0 | out: lpBuffer=0x12a373b8*, lpNumberOfBytesRead=0x12d7a8*=0x1a9204, lpOverlapped=0x0) returned 1 [0119.128] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\Title_Page.wmv", nBufferLength=0x105, lpBuffer=0x12d270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\Title_Page.wmv", lpFilePart=0x0) returned 0x46 [0119.128] SetErrorMode (uMode=0x1) returned 0x0 [0119.128] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\Title_Page.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\performance\\title_page.wmv"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0119.129] SetErrorMode (uMode=0x0) returned 0x1 [0119.130] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\Title_Page_PAL.wmv", nBufferLength=0x105, lpBuffer=0x12d5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\Title_Page_PAL.wmv", lpFilePart=0x0) returned 0x4a [0119.130] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\Title_Page_PAL.wmv", nBufferLength=0x105, lpBuffer=0x12d590, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\Title_Page_PAL.wmv", lpFilePart=0x0) returned 0x4a [0119.130] SetErrorMode (uMode=0x1) returned 0x0 [0119.130] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\Title_Page_PAL.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\performance\\title_page_pal.wmv"), fInfoLevelId=0x0, lpFileInformation=0x12d810 | out: lpFileInformation=0x12d810*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7047e388, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x7047e388, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4e050c4d, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x1d0304)) returned 1 [0119.131] SetErrorMode (uMode=0x0) returned 0x1 [0119.131] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\Title_Page_PAL.wmv", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\Title_Page_PAL.wmv", lpFilePart=0x0) returned 0x4a [0119.131] SetErrorMode (uMode=0x1) returned 0x0 [0119.131] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\Title_Page_PAL.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\performance\\title_page_pal.wmv"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2e8 [0119.131] SetErrorMode (uMode=0x0) returned 0x1 [0119.131] GetFileType (hFile=0x2e8) returned 0x1 [0119.131] GetFileSize (in: hFile=0x2e8, lpFileSizeHigh=0x12d8c8 | out: lpFileSizeHigh=0x12d8c8*=0x0) returned 0x1d0304 [0119.138] ReadFile (in: hFile=0x2e8, lpBuffer=0x12d25400, nNumberOfBytesToRead=0x1d0304, lpNumberOfBytesRead=0x12d7a8, lpOverlapped=0x0 | out: lpBuffer=0x12d25400*, lpNumberOfBytesRead=0x12d7a8*=0x1d0304, lpOverlapped=0x0) returned 1 [0119.419] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\Title_Page_PAL.wmv", nBufferLength=0x105, lpBuffer=0x12d270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\Title_Page_PAL.wmv", lpFilePart=0x0) returned 0x4a [0119.419] SetErrorMode (uMode=0x1) returned 0x0 [0119.419] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\Title_Page_PAL.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\performance\\title_page_pal.wmv"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0119.420] SetErrorMode (uMode=0x0) returned 0x1 [0119.421] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\title_trans_notes.wmv", nBufferLength=0x105, lpBuffer=0x12d5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\title_trans_notes.wmv", lpFilePart=0x0) returned 0x4d [0119.421] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\title_trans_notes.wmv", nBufferLength=0x105, lpBuffer=0x12d590, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\title_trans_notes.wmv", lpFilePart=0x0) returned 0x4d [0119.422] SetErrorMode (uMode=0x1) returned 0x0 [0119.422] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\title_trans_notes.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\performance\\title_trans_notes.wmv"), fInfoLevelId=0x0, lpFileInformation=0x12d810 | out: lpFileInformation=0x12d810*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70588d13, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70588d13, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4e1a789b, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xad264)) returned 1 [0119.423] SetErrorMode (uMode=0x0) returned 0x1 [0119.423] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\title_trans_notes.wmv", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\title_trans_notes.wmv", lpFilePart=0x0) returned 0x4d [0119.423] SetErrorMode (uMode=0x1) returned 0x0 [0119.423] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\title_trans_notes.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\performance\\title_trans_notes.wmv"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2e8 [0119.424] SetErrorMode (uMode=0x0) returned 0x1 [0119.424] GetFileType (hFile=0x2e8) returned 0x1 [0119.424] GetFileSize (in: hFile=0x2e8, lpFileSizeHigh=0x12d8c8 | out: lpFileSizeHigh=0x12d8c8*=0x0) returned 0xad264 [0119.427] ReadFile (in: hFile=0x2e8, lpBuffer=0x12dc1828, nNumberOfBytesToRead=0xad264, lpNumberOfBytesRead=0x12d7a8, lpOverlapped=0x0 | out: lpBuffer=0x12dc1828*, lpNumberOfBytesRead=0x12d7a8*=0xad264, lpOverlapped=0x0) returned 1 [0119.543] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\title_trans_notes.wmv", nBufferLength=0x105, lpBuffer=0x12d270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\title_trans_notes.wmv", lpFilePart=0x0) returned 0x4d [0119.543] SetErrorMode (uMode=0x1) returned 0x0 [0119.543] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\title_trans_notes.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\performance\\title_trans_notes.wmv"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0119.544] SetErrorMode (uMode=0x0) returned 0x1 [0119.545] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\Title_Trans_Notes_PAL.wmv", nBufferLength=0x105, lpBuffer=0x12d5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\Title_Trans_Notes_PAL.wmv", lpFilePart=0x0) returned 0x51 [0119.545] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\Title_Trans_Notes_PAL.wmv", nBufferLength=0x105, lpBuffer=0x12d590, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\Title_Trans_Notes_PAL.wmv", lpFilePart=0x0) returned 0x51 [0119.545] SetErrorMode (uMode=0x1) returned 0x0 [0119.545] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\Title_Trans_Notes_PAL.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\performance\\title_trans_notes_pal.wmv"), fInfoLevelId=0x0, lpFileInformation=0x12d810 | out: lpFileInformation=0x12d810*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x705fb12a, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x705fb12a, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4e1f3b57, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xb4f64)) returned 1 [0119.546] SetErrorMode (uMode=0x0) returned 0x1 [0119.546] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\Title_Trans_Notes_PAL.wmv", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\Title_Trans_Notes_PAL.wmv", lpFilePart=0x0) returned 0x51 [0119.546] SetErrorMode (uMode=0x1) returned 0x0 [0119.546] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\Title_Trans_Notes_PAL.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\performance\\title_trans_notes_pal.wmv"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2e8 [0119.546] SetErrorMode (uMode=0x0) returned 0x1 [0119.546] GetFileType (hFile=0x2e8) returned 0x1 [0119.546] GetFileSize (in: hFile=0x2e8, lpFileSizeHigh=0x12d8c8 | out: lpFileSizeHigh=0x12d8c8*=0x0) returned 0xb4f64 [0119.550] ReadFile (in: hFile=0x2e8, lpBuffer=0x129355c0, nNumberOfBytesToRead=0xb4f64, lpNumberOfBytesRead=0x12d7a8, lpOverlapped=0x0 | out: lpBuffer=0x129355c0*, lpNumberOfBytesRead=0x12d7a8*=0xb4f64, lpOverlapped=0x0) returned 1 [0119.701] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\Title_Trans_Notes_PAL.wmv", nBufferLength=0x105, lpBuffer=0x12d270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\Title_Trans_Notes_PAL.wmv", lpFilePart=0x0) returned 0x51 [0119.701] SetErrorMode (uMode=0x1) returned 0x0 [0119.701] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\Title_Trans_Notes_PAL.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\performance\\title_trans_notes_pal.wmv"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0119.702] SetErrorMode (uMode=0x0) returned 0x1 [0119.703] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\title_trans_scene.wmv", nBufferLength=0x105, lpBuffer=0x12d5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\title_trans_scene.wmv", lpFilePart=0x0) returned 0x4d [0119.703] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\title_trans_scene.wmv", nBufferLength=0x105, lpBuffer=0x12d590, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\title_trans_scene.wmv", lpFilePart=0x0) returned 0x4d [0119.703] SetErrorMode (uMode=0x1) returned 0x0 [0119.703] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\title_trans_scene.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\performance\\title_trans_scene.wmv"), fInfoLevelId=0x0, lpFileInformation=0x12d810 | out: lpFileInformation=0x12d810*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7066d541, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x7066d541, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4e23fe13, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x999e4)) returned 1 [0119.703] SetErrorMode (uMode=0x0) returned 0x1 [0119.703] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\title_trans_scene.wmv", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\title_trans_scene.wmv", lpFilePart=0x0) returned 0x4d [0119.703] SetErrorMode (uMode=0x1) returned 0x0 [0119.704] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\title_trans_scene.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\performance\\title_trans_scene.wmv"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2e8 [0119.704] SetErrorMode (uMode=0x0) returned 0x1 [0119.704] GetFileType (hFile=0x2e8) returned 0x1 [0119.704] GetFileSize (in: hFile=0x2e8, lpFileSizeHigh=0x12d8c8 | out: lpFileSizeHigh=0x12d8c8*=0x0) returned 0x999e4 [0119.749] ReadFile (in: hFile=0x2e8, lpBuffer=0x12680ba0, nNumberOfBytesToRead=0x999e4, lpNumberOfBytesRead=0x12d7a8, lpOverlapped=0x0 | out: lpBuffer=0x12680ba0*, lpNumberOfBytesRead=0x12d7a8*=0x999e4, lpOverlapped=0x0) returned 1 [0119.849] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\title_trans_scene.wmv", nBufferLength=0x105, lpBuffer=0x12d270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\title_trans_scene.wmv", lpFilePart=0x0) returned 0x4d [0119.849] SetErrorMode (uMode=0x1) returned 0x0 [0119.850] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\title_trans_scene.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\performance\\title_trans_scene.wmv"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0119.851] SetErrorMode (uMode=0x0) returned 0x1 [0119.852] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\Title_Trans_Scene_PAL.wmv", nBufferLength=0x105, lpBuffer=0x12d5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\Title_Trans_Scene_PAL.wmv", lpFilePart=0x0) returned 0x51 [0119.852] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\Title_Trans_Scene_PAL.wmv", nBufferLength=0x105, lpBuffer=0x12d590, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\Title_Trans_Scene_PAL.wmv", lpFilePart=0x0) returned 0x51 [0119.852] SetErrorMode (uMode=0x1) returned 0x0 [0119.852] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\Title_Trans_Scene_PAL.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\performance\\title_trans_scene_pal.wmv"), fInfoLevelId=0x0, lpFileInformation=0x12d810 | out: lpFileInformation=0x12d810*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70705ab5, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70705ab5, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4e53996b, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xa16e4)) returned 1 [0119.852] SetErrorMode (uMode=0x0) returned 0x1 [0119.853] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\Title_Trans_Scene_PAL.wmv", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\Title_Trans_Scene_PAL.wmv", lpFilePart=0x0) returned 0x51 [0119.853] SetErrorMode (uMode=0x1) returned 0x0 [0119.853] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\Title_Trans_Scene_PAL.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\performance\\title_trans_scene_pal.wmv"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2e8 [0119.853] SetErrorMode (uMode=0x0) returned 0x1 [0119.853] GetFileType (hFile=0x2e8) returned 0x1 [0119.853] GetFileSize (in: hFile=0x2e8, lpFileSizeHigh=0x12d8c8 | out: lpFileSizeHigh=0x12d8c8*=0x0) returned 0xa16e4 [0119.857] ReadFile (in: hFile=0x2e8, lpBuffer=0x1271a5c0, nNumberOfBytesToRead=0xa16e4, lpNumberOfBytesRead=0x12d7a8, lpOverlapped=0x0 | out: lpBuffer=0x1271a5c0*, lpNumberOfBytesRead=0x12d7a8*=0xa16e4, lpOverlapped=0x0) returned 1 [0120.071] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\Title_Trans_Scene_PAL.wmv", nBufferLength=0x105, lpBuffer=0x12d270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\Title_Trans_Scene_PAL.wmv", lpFilePart=0x0) returned 0x51 [0120.071] SetErrorMode (uMode=0x1) returned 0x0 [0120.071] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\Title_Trans_Scene_PAL.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\performance\\title_trans_scene_pal.wmv"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0120.072] SetErrorMode (uMode=0x0) returned 0x1 [0120.072] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\userContent_16x9_imagemask.png", nBufferLength=0x105, lpBuffer=0x12d5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\userContent_16x9_imagemask.png", lpFilePart=0x0) returned 0x56 [0120.072] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\userContent_16x9_imagemask.png", nBufferLength=0x105, lpBuffer=0x12d590, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\userContent_16x9_imagemask.png", lpFilePart=0x0) returned 0x56 [0120.072] SetErrorMode (uMode=0x1) returned 0x0 [0120.073] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\userContent_16x9_imagemask.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\performance\\usercontent_16x9_imagemask.png"), fInfoLevelId=0x0, lpFileInformation=0x12d810 | out: lpFileInformation=0x12d810*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70079eb9, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70079eb9, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4e53996b, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x1a3c)) returned 1 [0120.073] SetErrorMode (uMode=0x0) returned 0x1 [0120.073] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\userContent_16x9_imagemask.png", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\userContent_16x9_imagemask.png", lpFilePart=0x0) returned 0x56 [0120.073] SetErrorMode (uMode=0x1) returned 0x0 [0120.073] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\userContent_16x9_imagemask.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\performance\\usercontent_16x9_imagemask.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2e8 [0120.074] SetErrorMode (uMode=0x0) returned 0x1 [0120.074] GetFileType (hFile=0x2e8) returned 0x1 [0120.074] GetFileSize (in: hFile=0x2e8, lpFileSizeHigh=0x12d8c8 | out: lpFileSizeHigh=0x12d8c8*=0x0) returned 0x1a3c [0120.074] ReadFile (in: hFile=0x2e8, lpBuffer=0x26c3ff8, nNumberOfBytesToRead=0x1a3c, lpNumberOfBytesRead=0x12d7a8, lpOverlapped=0x0 | out: lpBuffer=0x26c3ff8*, lpNumberOfBytesRead=0x12d7a8*=0x1a3c, lpOverlapped=0x0) returned 1 [0120.093] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\userContent_16x9_imagemask.png", nBufferLength=0x105, lpBuffer=0x12d270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\userContent_16x9_imagemask.png", lpFilePart=0x0) returned 0x56 [0120.093] SetErrorMode (uMode=0x1) returned 0x0 [0120.093] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\userContent_16x9_imagemask.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\performance\\usercontent_16x9_imagemask.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0120.094] SetErrorMode (uMode=0x0) returned 0x1 [0120.095] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\whitemenu.png", nBufferLength=0x105, lpBuffer=0x12d5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\whitemenu.png", lpFilePart=0x0) returned 0x45 [0120.095] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\whitemenu.png", nBufferLength=0x105, lpBuffer=0x12d590, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\whitemenu.png", lpFilePart=0x0) returned 0x45 [0120.095] SetErrorMode (uMode=0x1) returned 0x0 [0120.095] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\whitemenu.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\performance\\whitemenu.png"), fInfoLevelId=0x0, lpFileInformation=0x12d810 | out: lpFileInformation=0x12d810*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x700c6173, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x700c6173, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4e53996b, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x2ee8)) returned 1 [0120.095] SetErrorMode (uMode=0x0) returned 0x1 [0120.095] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\whitemenu.png", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\whitemenu.png", lpFilePart=0x0) returned 0x45 [0120.096] SetErrorMode (uMode=0x1) returned 0x0 [0120.096] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\whitemenu.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\performance\\whitemenu.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2e8 [0120.096] SetErrorMode (uMode=0x0) returned 0x1 [0120.096] GetFileType (hFile=0x2e8) returned 0x1 [0120.096] GetFileSize (in: hFile=0x2e8, lpFileSizeHigh=0x12d8c8 | out: lpFileSizeHigh=0x12d8c8*=0x0) returned 0x2ee8 [0120.096] ReadFile (in: hFile=0x2e8, lpBuffer=0x27af460, nNumberOfBytesToRead=0x2ee8, lpNumberOfBytesRead=0x12d7a8, lpOverlapped=0x0 | out: lpBuffer=0x27af460*, lpNumberOfBytesRead=0x12d7a8*=0x2ee8, lpOverlapped=0x0) returned 1 [0120.116] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\whitemenu.png", nBufferLength=0x105, lpBuffer=0x12d270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\whitemenu.png", lpFilePart=0x0) returned 0x45 [0120.116] SetErrorMode (uMode=0x1) returned 0x0 [0120.116] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\whitemenu.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\performance\\whitemenu.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0120.117] SetErrorMode (uMode=0x0) returned 0x1 [0120.118] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\Decrypt Instructions.txt", nBufferLength=0x105, lpBuffer=0x12d240, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\Decrypt Instructions.txt", lpFilePart=0x0) returned 0x50 [0120.118] SetErrorMode (uMode=0x1) returned 0x0 [0120.118] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\Decrypt Instructions.txt" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\performance\\decrypt instructions.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x2e8 [0120.119] SetErrorMode (uMode=0x0) returned 0x1 [0120.119] GetFileType (hFile=0x2e8) returned 0x1 [0120.119] WriteFile (in: hFile=0x2e8, lpBuffer=0x28a4f38*, nNumberOfBytesToWrite=0x773, lpNumberOfBytesWritten=0x12d7a8, lpOverlapped=0x0 | out: lpBuffer=0x28a4f38*, lpNumberOfBytesWritten=0x12d7a8*=0x773, lpOverlapped=0x0) returned 1 [0120.121] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance", nBufferLength=0x105, lpBuffer=0x12d430, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance", lpFilePart=0x0) returned 0x37 [0120.121] SetErrorMode (uMode=0x1) returned 0x0 [0120.121] FindFirstFileW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\*", lpFindFileData=0x12d5d0 | out: lpFindFileData=0x12d5d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9f4fdbf3, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x67aa5df0, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x67aa5df0, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x26bc80 [0120.121] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9f4fdbf3, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x67aa5df0, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x67aa5df0, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0120.121] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70562bb6, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70562bb6, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d35f55b, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xeef, dwReserved0=0x0, dwReserved1=0x0, cFileName="720x480blacksquare.png", cAlternateFileName="")) returned 1 [0120.121] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67aa5df0, ftCreationTime.dwHighDateTime=0x1d5e786, ftLastAccessTime.dwLowDateTime=0x67aa5df0, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x67aa5df0, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x773, dwReserved0=0x0, dwReserved1=0x0, cFileName="Decrypt Instructions.txt", cAlternateFileName="DECRYP~1.TXT")) returned 1 [0120.121] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x703015e6, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x703015e6, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d35f55b, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x1168, dwReserved0=0x0, dwReserved1=0x0, cFileName="NextMenuButtonIcon.png", cAlternateFileName="")) returned 1 [0120.121] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70327743, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70327743, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4dbda349, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc04, dwReserved0=0x0, dwReserved1=0x0, cFileName="NextMenuButtonIconSubpictur.png", cAlternateFileName="")) returned 1 [0120.121] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70184844, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70184844, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4dc26605, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xa942c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Notes_loop.wmv", cAlternateFileName="")) returned 1 [0120.121] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7021cdb8, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x7021cdb8, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4dc728c1, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xbebec, dwReserved0=0x0, dwReserved1=0x0, cFileName="Notes_loop_PAL.wmv", cAlternateFileName="")) returned 1 [0120.121] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7015e6e7, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x7015e6e7, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4dd7d253, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x11ad, dwReserved0=0x0, dwReserved1=0x0, cFileName="ParentMenuButtonIcon.png", cAlternateFileName="")) returned 1 [0120.122] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7015e6e7, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x7015e6e7, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4dd7d253, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xbef, dwReserved0=0x0, dwReserved1=0x0, cFileName="ParentMenuButtonIconSubpict.png", cAlternateFileName="")) returned 1 [0120.122] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70053d5c, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70053d5c, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4dda33b1, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x629b, dwReserved0=0x0, dwReserved1=0x0, cFileName="performance.png", cAlternateFileName="")) returned 1 [0120.122] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x700a0016, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x700a0016, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4dd7d253, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x1b0a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Perf_Scenes_Mask1.png", cAlternateFileName="")) returned 1 [0120.122] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x700c6173, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x700c6173, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4dd7d253, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x135f, dwReserved0=0x0, dwReserved1=0x0, cFileName="Perf_Scenes_Subpicture1.png", cAlternateFileName="")) returned 1 [0120.122] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70269072, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70269072, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4dda33b1, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x1197, dwReserved0=0x0, dwReserved1=0x0, cFileName="PreviousMenuButtonIcon.png", cAlternateFileName="")) returned 1 [0120.122] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x702b532c, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x702b532c, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4dda33b1, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc0a, dwReserved0=0x0, dwReserved1=0x0, cFileName="PreviousMenuButtonIconSubpi.png", cAlternateFileName="")) returned 1 [0120.122] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x700ec2d0, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x700ec2d0, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4dda33b1, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc24, dwReserved0=0x0, dwReserved1=0x0, cFileName="redmenu.png", cAlternateFileName="")) returned 1 [0120.122] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70327743, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70327743, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ddc950f, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x8232c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Scene_loop.wmv", cAlternateFileName="")) returned 1 [0120.122] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70399b5a, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70399b5a, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4de61a87, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x95bac, dwReserved0=0x0, dwReserved1=0x0, cFileName="Scene_loop_PAL.wmv", cAlternateFileName="")) returned 1 [0120.122] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7011242d, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x7011242d, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4e53996b, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x99, dwReserved0=0x0, dwReserved1=0x0, cFileName="TitleButtonIcon.png", cAlternateFileName="")) returned 1 [0120.122] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7011242d, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x7011242d, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4e53996b, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x84, dwReserved0=0x0, dwReserved1=0x0, cFileName="TitleButtonSubpicture.png", cAlternateFileName="")) returned 1 [0120.122] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x703e5e14, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x703e5e14, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ded3ea1, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x1a9204, dwReserved0=0x0, dwReserved1=0x0, cFileName="Title_Page.wmv", cAlternateFileName="")) returned 1 [0120.122] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7047e388, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x7047e388, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4e050c4d, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x1d0304, dwReserved0=0x0, dwReserved1=0x0, cFileName="Title_Page_PAL.wmv", cAlternateFileName="")) returned 1 [0120.122] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70588d13, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70588d13, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4e1a789b, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xad264, dwReserved0=0x0, dwReserved1=0x0, cFileName="title_trans_notes.wmv", cAlternateFileName="")) returned 1 [0120.122] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x705fb12a, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x705fb12a, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4e1f3b57, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xb4f64, dwReserved0=0x0, dwReserved1=0x0, cFileName="Title_Trans_Notes_PAL.wmv", cAlternateFileName="")) returned 1 [0120.123] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7066d541, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x7066d541, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4e23fe13, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x999e4, dwReserved0=0x0, dwReserved1=0x0, cFileName="title_trans_scene.wmv", cAlternateFileName="")) returned 1 [0120.123] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70705ab5, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70705ab5, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4e53996b, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xa16e4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Title_Trans_Scene_PAL.wmv", cAlternateFileName="")) returned 1 [0120.123] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70079eb9, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70079eb9, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4e53996b, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x1a3c, dwReserved0=0x0, dwReserved1=0x0, cFileName="userContent_16x9_imagemask.png", cAlternateFileName="")) returned 1 [0120.123] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x700c6173, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x700c6173, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4e53996b, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x2ee8, dwReserved0=0x0, dwReserved1=0x0, cFileName="whitemenu.png", cAlternateFileName="")) returned 1 [0120.123] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x700c6173, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x700c6173, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4e53996b, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x2ee8, dwReserved0=0x0, dwReserved1=0x0, cFileName="whitemenu.png", cAlternateFileName="")) returned 0 [0120.123] FindClose (in: hFindFile=0x26bc80 | out: hFindFile=0x26bc80) returned 1 [0120.123] SetErrorMode (uMode=0x0) returned 0x1 [0120.123] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets", nBufferLength=0x105, lpBuffer=0x12d390, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets", lpFilePart=0x0) returned 0x30 [0120.123] SetErrorMode (uMode=0x1) returned 0x0 [0120.123] FindFirstFileW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\*", lpFindFileData=0x12d530 | out: lpFindFileData=0x12d530*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa15a10e8, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa89306e, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa198102e, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x26bc80 [0120.126] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa15a10e8, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa89306e, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa198102e, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0120.126] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72003fbd, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x72003fbd, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4e55fac9, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x39eaa, dwReserved0=0x0, dwReserved1=0x0, cFileName="Notes_INTRO_BG.wmv", cAlternateFileName="")) returned 1 [0120.126] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72050277, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x72050277, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4e55fac9, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x3dd24, dwReserved0=0x0, dwReserved1=0x0, cFileName="Notes_INTRO_BG_PAL.wmv", cAlternateFileName="")) returned 1 [0120.126] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x720763d4, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x720763d4, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4e5d1ee3, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc0b4a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Notes_LOOP_BG.wmv", cAlternateFileName="")) returned 1 [0120.126] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7210e948, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x7210e948, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4e61e19f, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xd43ca, dwReserved0=0x0, dwReserved1=0x0, cFileName="Notes_LOOP_BG_PAL.wmv", cAlternateFileName="")) returned 1 [0120.126] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7240848c, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x7240848c, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4e66a45b, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xbc8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pets_btn-back-over-select.png", cAlternateFileName="")) returned 1 [0120.126] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7242e5e9, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x7242e5e9, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4e66a45b, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x739, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pets_btn-back-static.png", cAlternateFileName="")) returned 1 [0120.126] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72454746, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x72454746, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4e6905b9, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xbc8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pets_btn-next-over-select.png", cAlternateFileName="")) returned 1 [0120.126] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7247a8a3, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x7247a8a3, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4e6905b9, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x7f9, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pets_btn-next-static.png", cAlternateFileName="")) returned 1 [0120.126] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x722b1847, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x722b1847, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4e6905b9, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xb4b, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pets_btn-over-DOT.png", cAlternateFileName="")) returned 1 [0120.126] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x724a0a00, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x724a0a00, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4e6b6717, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xbc8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pets_btn-previous-over-select.png", cAlternateFileName="")) returned 1 [0120.126] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x724a0a00, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x724a0a00, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4e6b6717, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x7e3, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pets_btn-previous-static.png", cAlternateFileName="")) returned 1 [0120.126] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x722d79a4, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x722d79a4, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4e6b6717, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x33b7, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pets_frame-border.png", cAlternateFileName="")) returned 1 [0120.127] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x724c6b5d, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x724c6b5d, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4e6dc875, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x1681, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pets_frame-highlight.png", cAlternateFileName="")) returned 1 [0120.127] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x722fdb01, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x722fdb01, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4e6dc875, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x1fe9, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pets_frame-imageMask.png", cAlternateFileName="")) returned 1 [0120.127] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x722d79a4, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x722d79a4, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ea22689, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x643e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pets_frame-shadow.png", cAlternateFileName="")) returned 1 [0120.127] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x724eccba, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x724eccba, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ea487e7, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x1816, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pets_image-frame-backglow.png", cAlternateFileName="")) returned 1 [0120.127] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x724eccba, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x724eccba, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ea487e7, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x1f0a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pets_image-frame-border.png", cAlternateFileName="")) returned 1 [0120.127] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x724c6b5d, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x724c6b5d, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ea487e7, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x1146, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pets_image-frame-ImageMask.png", cAlternateFileName="")) returned 1 [0120.127] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7240848c, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x7240848c, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ea487e7, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x1ed0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pets_notes-txt-background.png", cAlternateFileName="")) returned 1 [0120.127] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71fdde60, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x71fdde60, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ea487e7, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x41ca, dwReserved0=0x0, dwReserved1=0x0, cFileName="rollinghills.png", cAlternateFileName="")) returned 1 [0120.127] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7215ac02, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x7215ac02, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ea6e945, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x3dd2a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Scenes_INTRO_BG.wmv", cAlternateFileName="")) returned 1 [0120.127] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72180d5f, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x72180d5f, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ec1184f, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x3fc64, dwReserved0=0x0, dwReserved1=0x0, cFileName="Scenes_INTRO_BG_PAL.wmv", cAlternateFileName="")) returned 1 [0120.127] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x721cd019, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x721cd019, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ec379ad, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc2a8a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Scenes_LOOP_BG.wmv", cAlternateFileName="")) returned 1 [0120.127] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7223f430, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x7223f430, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ecf6083, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xd43ca, dwReserved0=0x0, dwReserved1=0x0, cFileName="Scenes_LOOP_BG_PAL.wmv", cAlternateFileName="")) returned 1 [0120.127] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72323c5e, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x72323c5e, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ed4233f, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xe3dca, dwReserved0=0x0, dwReserved1=0x0, cFileName="Title_Page_Ref.wmv", cAlternateFileName="")) returned 1 [0120.128] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x723bc1d2, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x723bc1d2, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ee00a15, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xf188a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Title_Page_Ref_PAL.wmv", cAlternateFileName="")) returned 1 [0120.128] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x723bc1d2, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x723bc1d2, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ee00a15, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xf188a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Title_Page_Ref_PAL.wmv", cAlternateFileName="")) returned 0 [0120.128] FindClose (in: hFindFile=0x26bc80 | out: hFindFile=0x26bc80) returned 1 [0120.129] SetErrorMode (uMode=0x0) returned 0x1 [0120.129] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Notes_INTRO_BG.wmv", nBufferLength=0x105, lpBuffer=0x12d5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Notes_INTRO_BG.wmv", lpFilePart=0x0) returned 0x43 [0120.129] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Notes_INTRO_BG.wmv", nBufferLength=0x105, lpBuffer=0x12d590, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Notes_INTRO_BG.wmv", lpFilePart=0x0) returned 0x43 [0120.129] SetErrorMode (uMode=0x1) returned 0x0 [0120.129] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Notes_INTRO_BG.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\pets\\notes_intro_bg.wmv"), fInfoLevelId=0x0, lpFileInformation=0x12d810 | out: lpFileInformation=0x12d810*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72003fbd, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x72003fbd, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4e55fac9, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x39eaa)) returned 1 [0120.131] SetErrorMode (uMode=0x0) returned 0x1 [0120.131] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Notes_INTRO_BG.wmv", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Notes_INTRO_BG.wmv", lpFilePart=0x0) returned 0x43 [0120.131] SetErrorMode (uMode=0x1) returned 0x0 [0120.131] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Notes_INTRO_BG.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\pets\\notes_intro_bg.wmv"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2e8 [0120.131] SetErrorMode (uMode=0x0) returned 0x1 [0120.131] GetFileType (hFile=0x2e8) returned 0x1 [0120.131] GetFileSize (in: hFile=0x2e8, lpFileSizeHigh=0x12d8c8 | out: lpFileSizeHigh=0x12d8c8*=0x0) returned 0x39eaa [0120.132] ReadFile (in: hFile=0x2e8, lpBuffer=0x127222c0, nNumberOfBytesToRead=0x39eaa, lpNumberOfBytesRead=0x12d7a8, lpOverlapped=0x0 | out: lpBuffer=0x127222c0*, lpNumberOfBytesRead=0x12d7a8*=0x39eaa, lpOverlapped=0x0) returned 1 [0120.176] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Notes_INTRO_BG.wmv", nBufferLength=0x105, lpBuffer=0x12d270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Notes_INTRO_BG.wmv", lpFilePart=0x0) returned 0x43 [0120.177] SetErrorMode (uMode=0x1) returned 0x0 [0120.177] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Notes_INTRO_BG.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\pets\\notes_intro_bg.wmv"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0120.178] SetErrorMode (uMode=0x0) returned 0x1 [0120.178] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Notes_INTRO_BG_PAL.wmv", nBufferLength=0x105, lpBuffer=0x12d5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Notes_INTRO_BG_PAL.wmv", lpFilePart=0x0) returned 0x47 [0120.178] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Notes_INTRO_BG_PAL.wmv", nBufferLength=0x105, lpBuffer=0x12d590, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Notes_INTRO_BG_PAL.wmv", lpFilePart=0x0) returned 0x47 [0120.178] SetErrorMode (uMode=0x1) returned 0x0 [0120.178] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Notes_INTRO_BG_PAL.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\pets\\notes_intro_bg_pal.wmv"), fInfoLevelId=0x0, lpFileInformation=0x12d810 | out: lpFileInformation=0x12d810*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72050277, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x72050277, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4e55fac9, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x3dd24)) returned 1 [0120.180] SetErrorMode (uMode=0x0) returned 0x1 [0120.180] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Notes_INTRO_BG_PAL.wmv", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Notes_INTRO_BG_PAL.wmv", lpFilePart=0x0) returned 0x47 [0120.180] SetErrorMode (uMode=0x1) returned 0x0 [0120.180] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Notes_INTRO_BG_PAL.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\pets\\notes_intro_bg_pal.wmv"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2e8 [0120.180] SetErrorMode (uMode=0x0) returned 0x1 [0120.180] GetFileType (hFile=0x2e8) returned 0x1 [0120.180] GetFileSize (in: hFile=0x2e8, lpFileSizeHigh=0x12d8c8 | out: lpFileSizeHigh=0x12d8c8*=0x0) returned 0x3dd24 [0120.182] ReadFile (in: hFile=0x2e8, lpBuffer=0x1287db90, nNumberOfBytesToRead=0x3dd24, lpNumberOfBytesRead=0x12d7a8, lpOverlapped=0x0 | out: lpBuffer=0x1287db90*, lpNumberOfBytesRead=0x12d7a8*=0x3dd24, lpOverlapped=0x0) returned 1 [0120.240] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Notes_INTRO_BG_PAL.wmv", nBufferLength=0x105, lpBuffer=0x12d270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Notes_INTRO_BG_PAL.wmv", lpFilePart=0x0) returned 0x47 [0120.240] SetErrorMode (uMode=0x1) returned 0x0 [0120.240] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Notes_INTRO_BG_PAL.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\pets\\notes_intro_bg_pal.wmv"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0120.241] SetErrorMode (uMode=0x0) returned 0x1 [0120.241] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Notes_LOOP_BG.wmv", nBufferLength=0x105, lpBuffer=0x12d5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Notes_LOOP_BG.wmv", lpFilePart=0x0) returned 0x42 [0120.241] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Notes_LOOP_BG.wmv", nBufferLength=0x105, lpBuffer=0x12d590, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Notes_LOOP_BG.wmv", lpFilePart=0x0) returned 0x42 [0120.242] SetErrorMode (uMode=0x1) returned 0x0 [0120.242] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Notes_LOOP_BG.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\pets\\notes_loop_bg.wmv"), fInfoLevelId=0x0, lpFileInformation=0x12d810 | out: lpFileInformation=0x12d810*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x720763d4, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x720763d4, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4e5d1ee3, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc0b4a)) returned 1 [0120.242] SetErrorMode (uMode=0x0) returned 0x1 [0120.242] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Notes_LOOP_BG.wmv", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Notes_LOOP_BG.wmv", lpFilePart=0x0) returned 0x42 [0120.242] SetErrorMode (uMode=0x1) returned 0x0 [0120.242] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Notes_LOOP_BG.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\pets\\notes_loop_bg.wmv"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2e8 [0120.243] SetErrorMode (uMode=0x0) returned 0x1 [0120.243] GetFileType (hFile=0x2e8) returned 0x1 [0120.243] GetFileSize (in: hFile=0x2e8, lpFileSizeHigh=0x12d8c8 | out: lpFileSizeHigh=0x12d8c8*=0x0) returned 0xc0b4a [0120.246] ReadFile (in: hFile=0x2e8, lpBuffer=0x126be900, nNumberOfBytesToRead=0xc0b4a, lpNumberOfBytesRead=0x12d7a8, lpOverlapped=0x0 | out: lpBuffer=0x126be900*, lpNumberOfBytesRead=0x12d7a8*=0xc0b4a, lpOverlapped=0x0) returned 1 [0120.331] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Notes_LOOP_BG.wmv", nBufferLength=0x105, lpBuffer=0x12d270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Notes_LOOP_BG.wmv", lpFilePart=0x0) returned 0x42 [0120.331] SetErrorMode (uMode=0x1) returned 0x0 [0120.331] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Notes_LOOP_BG.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\pets\\notes_loop_bg.wmv"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0120.332] SetErrorMode (uMode=0x0) returned 0x1 [0120.333] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Notes_LOOP_BG_PAL.wmv", nBufferLength=0x105, lpBuffer=0x12d5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Notes_LOOP_BG_PAL.wmv", lpFilePart=0x0) returned 0x46 [0120.333] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Notes_LOOP_BG_PAL.wmv", nBufferLength=0x105, lpBuffer=0x12d590, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Notes_LOOP_BG_PAL.wmv", lpFilePart=0x0) returned 0x46 [0120.333] SetErrorMode (uMode=0x1) returned 0x0 [0120.333] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Notes_LOOP_BG_PAL.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\pets\\notes_loop_bg_pal.wmv"), fInfoLevelId=0x0, lpFileInformation=0x12d810 | out: lpFileInformation=0x12d810*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7210e948, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x7210e948, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4e61e19f, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xd43ca)) returned 1 [0120.334] SetErrorMode (uMode=0x0) returned 0x1 [0120.334] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Notes_LOOP_BG_PAL.wmv", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Notes_LOOP_BG_PAL.wmv", lpFilePart=0x0) returned 0x46 [0120.334] SetErrorMode (uMode=0x1) returned 0x0 [0120.334] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Notes_LOOP_BG_PAL.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\pets\\notes_loop_bg_pal.wmv"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2e8 [0120.334] SetErrorMode (uMode=0x0) returned 0x1 [0120.334] GetFileType (hFile=0x2e8) returned 0x1 [0120.334] GetFileSize (in: hFile=0x2e8, lpFileSizeHigh=0x12d8c8 | out: lpFileSizeHigh=0x12d8c8*=0x0) returned 0xd43ca [0120.338] ReadFile (in: hFile=0x2e8, lpBuffer=0x12741720, nNumberOfBytesToRead=0xd43ca, lpNumberOfBytesRead=0x12d7a8, lpOverlapped=0x0 | out: lpBuffer=0x12741720*, lpNumberOfBytesRead=0x12d7a8*=0xd43ca, lpOverlapped=0x0) returned 1 [0120.428] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Notes_LOOP_BG_PAL.wmv", nBufferLength=0x105, lpBuffer=0x12d270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Notes_LOOP_BG_PAL.wmv", lpFilePart=0x0) returned 0x46 [0120.428] SetErrorMode (uMode=0x1) returned 0x0 [0120.428] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Notes_LOOP_BG_PAL.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\pets\\notes_loop_bg_pal.wmv"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0120.429] SetErrorMode (uMode=0x0) returned 0x1 [0120.430] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Pets_btn-back-over-select.png", nBufferLength=0x105, lpBuffer=0x12d5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Pets_btn-back-over-select.png", lpFilePart=0x0) returned 0x4e [0120.430] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Pets_btn-back-over-select.png", nBufferLength=0x105, lpBuffer=0x12d590, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Pets_btn-back-over-select.png", lpFilePart=0x0) returned 0x4e [0120.430] SetErrorMode (uMode=0x1) returned 0x0 [0120.430] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Pets_btn-back-over-select.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\pets\\pets_btn-back-over-select.png"), fInfoLevelId=0x0, lpFileInformation=0x12d810 | out: lpFileInformation=0x12d810*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7240848c, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x7240848c, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4e66a45b, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xbc8)) returned 1 [0120.431] SetErrorMode (uMode=0x0) returned 0x1 [0120.431] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Pets_btn-back-over-select.png", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Pets_btn-back-over-select.png", lpFilePart=0x0) returned 0x4e [0120.431] SetErrorMode (uMode=0x1) returned 0x0 [0120.432] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Pets_btn-back-over-select.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\pets\\pets_btn-back-over-select.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2e8 [0120.432] SetErrorMode (uMode=0x0) returned 0x1 [0120.432] GetFileType (hFile=0x2e8) returned 0x1 [0120.432] GetFileSize (in: hFile=0x2e8, lpFileSizeHigh=0x12d8c8 | out: lpFileSizeHigh=0x12d8c8*=0x0) returned 0xbc8 [0120.432] ReadFile (in: hFile=0x2e8, lpBuffer=0x26c4f18, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12d7a8, lpOverlapped=0x0 | out: lpBuffer=0x26c4f18*, lpNumberOfBytesRead=0x12d7a8*=0xbc8, lpOverlapped=0x0) returned 1 [0120.461] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Pets_btn-back-over-select.png", nBufferLength=0x105, lpBuffer=0x12d270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Pets_btn-back-over-select.png", lpFilePart=0x0) returned 0x4e [0120.461] SetErrorMode (uMode=0x1) returned 0x0 [0120.461] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Pets_btn-back-over-select.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\pets\\pets_btn-back-over-select.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0120.462] SetErrorMode (uMode=0x0) returned 0x1 [0120.462] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Pets_btn-back-static.png", nBufferLength=0x105, lpBuffer=0x12d5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Pets_btn-back-static.png", lpFilePart=0x0) returned 0x49 [0120.462] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Pets_btn-back-static.png", nBufferLength=0x105, lpBuffer=0x12d590, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Pets_btn-back-static.png", lpFilePart=0x0) returned 0x49 [0120.462] SetErrorMode (uMode=0x1) returned 0x0 [0120.463] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Pets_btn-back-static.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\pets\\pets_btn-back-static.png"), fInfoLevelId=0x0, lpFileInformation=0x12d810 | out: lpFileInformation=0x12d810*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7242e5e9, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x7242e5e9, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4e66a45b, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x739)) returned 1 [0120.463] SetErrorMode (uMode=0x0) returned 0x1 [0120.463] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Pets_btn-back-static.png", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Pets_btn-back-static.png", lpFilePart=0x0) returned 0x49 [0120.463] SetErrorMode (uMode=0x1) returned 0x0 [0120.463] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Pets_btn-back-static.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\pets\\pets_btn-back-static.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2e8 [0120.464] SetErrorMode (uMode=0x0) returned 0x1 [0120.464] GetFileType (hFile=0x2e8) returned 0x1 [0120.464] GetFileSize (in: hFile=0x2e8, lpFileSizeHigh=0x12d8c8 | out: lpFileSizeHigh=0x12d8c8*=0x0) returned 0x739 [0120.464] ReadFile (in: hFile=0x2e8, lpBuffer=0x27ab870, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12d7a8, lpOverlapped=0x0 | out: lpBuffer=0x27ab870*, lpNumberOfBytesRead=0x12d7a8*=0x739, lpOverlapped=0x0) returned 1 [0120.493] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Pets_btn-back-static.png", nBufferLength=0x105, lpBuffer=0x12d270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Pets_btn-back-static.png", lpFilePart=0x0) returned 0x49 [0120.493] SetErrorMode (uMode=0x1) returned 0x0 [0120.494] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Pets_btn-back-static.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\pets\\pets_btn-back-static.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0120.495] SetErrorMode (uMode=0x0) returned 0x1 [0120.495] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Pets_btn-next-over-select.png", nBufferLength=0x105, lpBuffer=0x12d5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Pets_btn-next-over-select.png", lpFilePart=0x0) returned 0x4e [0120.495] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Pets_btn-next-over-select.png", nBufferLength=0x105, lpBuffer=0x12d590, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Pets_btn-next-over-select.png", lpFilePart=0x0) returned 0x4e [0120.495] SetErrorMode (uMode=0x1) returned 0x0 [0120.495] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Pets_btn-next-over-select.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\pets\\pets_btn-next-over-select.png"), fInfoLevelId=0x0, lpFileInformation=0x12d810 | out: lpFileInformation=0x12d810*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72454746, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x72454746, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4e6905b9, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xbc8)) returned 1 [0120.496] SetErrorMode (uMode=0x0) returned 0x1 [0120.496] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Pets_btn-next-over-select.png", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Pets_btn-next-over-select.png", lpFilePart=0x0) returned 0x4e [0120.496] SetErrorMode (uMode=0x1) returned 0x0 [0120.496] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Pets_btn-next-over-select.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\pets\\pets_btn-next-over-select.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2e8 [0120.496] SetErrorMode (uMode=0x0) returned 0x1 [0120.496] GetFileType (hFile=0x2e8) returned 0x1 [0120.496] GetFileSize (in: hFile=0x2e8, lpFileSizeHigh=0x12d8c8 | out: lpFileSizeHigh=0x12d8c8*=0x0) returned 0xbc8 [0120.496] ReadFile (in: hFile=0x2e8, lpBuffer=0x2890c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12d7a8, lpOverlapped=0x0 | out: lpBuffer=0x2890c60*, lpNumberOfBytesRead=0x12d7a8*=0xbc8, lpOverlapped=0x0) returned 1 [0120.530] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Pets_btn-next-over-select.png", nBufferLength=0x105, lpBuffer=0x12d270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Pets_btn-next-over-select.png", lpFilePart=0x0) returned 0x4e [0120.530] SetErrorMode (uMode=0x1) returned 0x0 [0120.530] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Pets_btn-next-over-select.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\pets\\pets_btn-next-over-select.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0120.531] SetErrorMode (uMode=0x0) returned 0x1 [0120.532] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Pets_btn-next-static.png", nBufferLength=0x105, lpBuffer=0x12d5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Pets_btn-next-static.png", lpFilePart=0x0) returned 0x49 [0120.532] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Pets_btn-next-static.png", nBufferLength=0x105, lpBuffer=0x12d590, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Pets_btn-next-static.png", lpFilePart=0x0) returned 0x49 [0120.532] SetErrorMode (uMode=0x1) returned 0x0 [0120.532] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Pets_btn-next-static.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\pets\\pets_btn-next-static.png"), fInfoLevelId=0x0, lpFileInformation=0x12d810 | out: lpFileInformation=0x12d810*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7247a8a3, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x7247a8a3, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4e6905b9, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x7f9)) returned 1 [0120.532] SetErrorMode (uMode=0x0) returned 0x1 [0120.532] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Pets_btn-next-static.png", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Pets_btn-next-static.png", lpFilePart=0x0) returned 0x49 [0120.533] SetErrorMode (uMode=0x1) returned 0x0 [0120.533] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Pets_btn-next-static.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\pets\\pets_btn-next-static.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2e8 [0120.533] SetErrorMode (uMode=0x0) returned 0x1 [0120.533] GetFileType (hFile=0x2e8) returned 0x1 [0120.533] GetFileSize (in: hFile=0x2e8, lpFileSizeHigh=0x12d8c8 | out: lpFileSizeHigh=0x12d8c8*=0x0) returned 0x7f9 [0120.533] ReadFile (in: hFile=0x2e8, lpBuffer=0x2778b18, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12d7a8, lpOverlapped=0x0 | out: lpBuffer=0x2778b18*, lpNumberOfBytesRead=0x12d7a8*=0x7f9, lpOverlapped=0x0) returned 1 [0120.562] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Pets_btn-next-static.png", nBufferLength=0x105, lpBuffer=0x12d270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Pets_btn-next-static.png", lpFilePart=0x0) returned 0x49 [0120.562] SetErrorMode (uMode=0x1) returned 0x0 [0120.563] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Pets_btn-next-static.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\pets\\pets_btn-next-static.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0120.563] SetErrorMode (uMode=0x0) returned 0x1 [0120.564] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Pets_btn-over-DOT.png", nBufferLength=0x105, lpBuffer=0x12d5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Pets_btn-over-DOT.png", lpFilePart=0x0) returned 0x46 [0120.564] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Pets_btn-over-DOT.png", nBufferLength=0x105, lpBuffer=0x12d590, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Pets_btn-over-DOT.png", lpFilePart=0x0) returned 0x46 [0120.564] SetErrorMode (uMode=0x1) returned 0x0 [0120.564] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Pets_btn-over-DOT.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\pets\\pets_btn-over-dot.png"), fInfoLevelId=0x0, lpFileInformation=0x12d810 | out: lpFileInformation=0x12d810*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x722b1847, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x722b1847, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4e6905b9, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xb4b)) returned 1 [0120.566] SetErrorMode (uMode=0x0) returned 0x1 [0120.566] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Pets_btn-over-DOT.png", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Pets_btn-over-DOT.png", lpFilePart=0x0) returned 0x46 [0120.566] SetErrorMode (uMode=0x1) returned 0x0 [0120.566] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Pets_btn-over-DOT.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\pets\\pets_btn-over-dot.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2e8 [0120.566] SetErrorMode (uMode=0x0) returned 0x1 [0120.567] GetFileType (hFile=0x2e8) returned 0x1 [0120.567] GetFileSize (in: hFile=0x2e8, lpFileSizeHigh=0x12d8c8 | out: lpFileSizeHigh=0x12d8c8*=0x0) returned 0xb4b [0120.567] ReadFile (in: hFile=0x2e8, lpBuffer=0x285e518, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12d7a8, lpOverlapped=0x0 | out: lpBuffer=0x285e518*, lpNumberOfBytesRead=0x12d7a8*=0xb4b, lpOverlapped=0x0) returned 1 [0120.600] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Pets_btn-over-DOT.png", nBufferLength=0x105, lpBuffer=0x12d270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Pets_btn-over-DOT.png", lpFilePart=0x0) returned 0x46 [0120.601] SetErrorMode (uMode=0x1) returned 0x0 [0120.601] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Pets_btn-over-DOT.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\pets\\pets_btn-over-dot.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0120.602] SetErrorMode (uMode=0x0) returned 0x1 [0120.602] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Pets_btn-previous-over-select.png", nBufferLength=0x105, lpBuffer=0x12d5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Pets_btn-previous-over-select.png", lpFilePart=0x0) returned 0x52 [0120.602] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Pets_btn-previous-over-select.png", nBufferLength=0x105, lpBuffer=0x12d590, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Pets_btn-previous-over-select.png", lpFilePart=0x0) returned 0x52 [0120.602] SetErrorMode (uMode=0x1) returned 0x0 [0120.602] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Pets_btn-previous-over-select.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\pets\\pets_btn-previous-over-select.png"), fInfoLevelId=0x0, lpFileInformation=0x12d810 | out: lpFileInformation=0x12d810*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x724a0a00, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x724a0a00, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4e6b6717, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xbc8)) returned 1 [0120.603] SetErrorMode (uMode=0x0) returned 0x1 [0120.603] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Pets_btn-previous-over-select.png", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Pets_btn-previous-over-select.png", lpFilePart=0x0) returned 0x52 [0120.603] SetErrorMode (uMode=0x1) returned 0x0 [0120.603] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Pets_btn-previous-over-select.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\pets\\pets_btn-previous-over-select.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2e8 [0120.603] SetErrorMode (uMode=0x0) returned 0x1 [0120.603] GetFileType (hFile=0x2e8) returned 0x1 [0120.603] GetFileSize (in: hFile=0x2e8, lpFileSizeHigh=0x12d8c8 | out: lpFileSizeHigh=0x12d8c8*=0x0) returned 0xbc8 [0120.604] ReadFile (in: hFile=0x2e8, lpBuffer=0x2744158, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12d7a8, lpOverlapped=0x0 | out: lpBuffer=0x2744158*, lpNumberOfBytesRead=0x12d7a8*=0xbc8, lpOverlapped=0x0) returned 1 [0120.633] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Pets_btn-previous-over-select.png", nBufferLength=0x105, lpBuffer=0x12d270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Pets_btn-previous-over-select.png", lpFilePart=0x0) returned 0x52 [0120.633] SetErrorMode (uMode=0x1) returned 0x0 [0120.633] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Pets_btn-previous-over-select.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\pets\\pets_btn-previous-over-select.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0120.634] SetErrorMode (uMode=0x0) returned 0x1 [0120.634] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Pets_btn-previous-static.png", nBufferLength=0x105, lpBuffer=0x12d5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Pets_btn-previous-static.png", lpFilePart=0x0) returned 0x4d [0120.634] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Pets_btn-previous-static.png", nBufferLength=0x105, lpBuffer=0x12d590, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Pets_btn-previous-static.png", lpFilePart=0x0) returned 0x4d [0120.634] SetErrorMode (uMode=0x1) returned 0x0 [0120.635] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Pets_btn-previous-static.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\pets\\pets_btn-previous-static.png"), fInfoLevelId=0x0, lpFileInformation=0x12d810 | out: lpFileInformation=0x12d810*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x724a0a00, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x724a0a00, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4e6b6717, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x7e3)) returned 1 [0120.635] SetErrorMode (uMode=0x0) returned 0x1 [0120.635] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Pets_btn-previous-static.png", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Pets_btn-previous-static.png", lpFilePart=0x0) returned 0x4d [0120.635] SetErrorMode (uMode=0x1) returned 0x0 [0120.636] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Pets_btn-previous-static.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\pets\\pets_btn-previous-static.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2e8 [0120.636] SetErrorMode (uMode=0x0) returned 0x1 [0120.636] GetFileType (hFile=0x2e8) returned 0x1 [0120.636] GetFileSize (in: hFile=0x2e8, lpFileSizeHigh=0x12d8c8 | out: lpFileSizeHigh=0x12d8c8*=0x0) returned 0x7e3 [0120.636] ReadFile (in: hFile=0x2e8, lpBuffer=0x282aba8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12d7a8, lpOverlapped=0x0 | out: lpBuffer=0x282aba8*, lpNumberOfBytesRead=0x12d7a8*=0x7e3, lpOverlapped=0x0) returned 1 [0120.684] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Pets_btn-previous-static.png", nBufferLength=0x105, lpBuffer=0x12d270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Pets_btn-previous-static.png", lpFilePart=0x0) returned 0x4d [0120.684] SetErrorMode (uMode=0x1) returned 0x0 [0120.684] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Pets_btn-previous-static.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\pets\\pets_btn-previous-static.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0120.685] SetErrorMode (uMode=0x0) returned 0x1 [0120.685] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Pets_frame-border.png", nBufferLength=0x105, lpBuffer=0x12d5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Pets_frame-border.png", lpFilePart=0x0) returned 0x46 [0120.685] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Pets_frame-border.png", nBufferLength=0x105, lpBuffer=0x12d590, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Pets_frame-border.png", lpFilePart=0x0) returned 0x46 [0120.685] SetErrorMode (uMode=0x1) returned 0x0 [0120.685] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Pets_frame-border.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\pets\\pets_frame-border.png"), fInfoLevelId=0x0, lpFileInformation=0x12d810 | out: lpFileInformation=0x12d810*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x722d79a4, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x722d79a4, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4e6b6717, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x33b7)) returned 1 [0120.686] SetErrorMode (uMode=0x0) returned 0x1 [0120.686] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Pets_frame-border.png", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Pets_frame-border.png", lpFilePart=0x0) returned 0x46 [0120.686] SetErrorMode (uMode=0x1) returned 0x0 [0120.686] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Pets_frame-border.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\pets\\pets_frame-border.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2e8 [0120.686] SetErrorMode (uMode=0x0) returned 0x1 [0120.686] GetFileType (hFile=0x2e8) returned 0x1 [0120.686] GetFileSize (in: hFile=0x2e8, lpFileSizeHigh=0x12d8c8 | out: lpFileSizeHigh=0x12d8c8*=0x0) returned 0x33b7 [0120.686] ReadFile (in: hFile=0x2e8, lpBuffer=0x27120d0, nNumberOfBytesToRead=0x33b7, lpNumberOfBytesRead=0x12d7a8, lpOverlapped=0x0 | out: lpBuffer=0x27120d0*, lpNumberOfBytesRead=0x12d7a8*=0x33b7, lpOverlapped=0x0) returned 1 [0120.716] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Pets_frame-border.png", nBufferLength=0x105, lpBuffer=0x12d270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Pets_frame-border.png", lpFilePart=0x0) returned 0x46 [0120.716] SetErrorMode (uMode=0x1) returned 0x0 [0120.716] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Pets_frame-border.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\pets\\pets_frame-border.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0120.717] SetErrorMode (uMode=0x0) returned 0x1 [0120.717] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Pets_frame-highlight.png", nBufferLength=0x105, lpBuffer=0x12d5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Pets_frame-highlight.png", lpFilePart=0x0) returned 0x49 [0120.717] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Pets_frame-highlight.png", nBufferLength=0x105, lpBuffer=0x12d590, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Pets_frame-highlight.png", lpFilePart=0x0) returned 0x49 [0120.718] SetErrorMode (uMode=0x1) returned 0x0 [0120.718] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Pets_frame-highlight.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\pets\\pets_frame-highlight.png"), fInfoLevelId=0x0, lpFileInformation=0x12d810 | out: lpFileInformation=0x12d810*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x724c6b5d, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x724c6b5d, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4e6dc875, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x1681)) returned 1 [0120.718] SetErrorMode (uMode=0x0) returned 0x1 [0120.718] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Pets_frame-highlight.png", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Pets_frame-highlight.png", lpFilePart=0x0) returned 0x49 [0120.718] SetErrorMode (uMode=0x1) returned 0x0 [0120.718] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Pets_frame-highlight.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\pets\\pets_frame-highlight.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2e8 [0120.719] SetErrorMode (uMode=0x0) returned 0x1 [0120.719] GetFileType (hFile=0x2e8) returned 0x1 [0120.719] GetFileSize (in: hFile=0x2e8, lpFileSizeHigh=0x12d8c8 | out: lpFileSizeHigh=0x12d8c8*=0x0) returned 0x1681 [0120.719] ReadFile (in: hFile=0x2e8, lpBuffer=0x2806df0, nNumberOfBytesToRead=0x1681, lpNumberOfBytesRead=0x12d7a8, lpOverlapped=0x0 | out: lpBuffer=0x2806df0*, lpNumberOfBytesRead=0x12d7a8*=0x1681, lpOverlapped=0x0) returned 1 [0120.757] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Pets_frame-highlight.png", nBufferLength=0x105, lpBuffer=0x12d270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Pets_frame-highlight.png", lpFilePart=0x0) returned 0x49 [0120.758] SetErrorMode (uMode=0x1) returned 0x0 [0120.758] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Pets_frame-highlight.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\pets\\pets_frame-highlight.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0120.759] SetErrorMode (uMode=0x0) returned 0x1 [0120.759] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Pets_frame-imageMask.png", nBufferLength=0x105, lpBuffer=0x12d5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Pets_frame-imageMask.png", lpFilePart=0x0) returned 0x49 [0120.759] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Pets_frame-imageMask.png", nBufferLength=0x105, lpBuffer=0x12d590, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Pets_frame-imageMask.png", lpFilePart=0x0) returned 0x49 [0120.759] SetErrorMode (uMode=0x1) returned 0x0 [0120.759] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Pets_frame-imageMask.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\pets\\pets_frame-imagemask.png"), fInfoLevelId=0x0, lpFileInformation=0x12d810 | out: lpFileInformation=0x12d810*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x722fdb01, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x722fdb01, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4e6dc875, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x1fe9)) returned 1 [0120.760] SetErrorMode (uMode=0x0) returned 0x1 [0120.760] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Pets_frame-imageMask.png", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Pets_frame-imageMask.png", lpFilePart=0x0) returned 0x49 [0120.761] SetErrorMode (uMode=0x1) returned 0x0 [0120.761] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Pets_frame-imageMask.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\pets\\pets_frame-imagemask.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2e8 [0120.761] SetErrorMode (uMode=0x0) returned 0x1 [0120.761] GetFileType (hFile=0x2e8) returned 0x1 [0120.761] GetFileSize (in: hFile=0x2e8, lpFileSizeHigh=0x12d8c8 | out: lpFileSizeHigh=0x12d8c8*=0x0) returned 0x1fe9 [0120.761] ReadFile (in: hFile=0x2e8, lpBuffer=0x26eea68, nNumberOfBytesToRead=0x1fe9, lpNumberOfBytesRead=0x12d7a8, lpOverlapped=0x0 | out: lpBuffer=0x26eea68*, lpNumberOfBytesRead=0x12d7a8*=0x1fe9, lpOverlapped=0x0) returned 1 [0120.791] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Pets_frame-imageMask.png", nBufferLength=0x105, lpBuffer=0x12d270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Pets_frame-imageMask.png", lpFilePart=0x0) returned 0x49 [0120.791] SetErrorMode (uMode=0x1) returned 0x0 [0120.791] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Pets_frame-imageMask.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\pets\\pets_frame-imagemask.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0120.792] SetErrorMode (uMode=0x0) returned 0x1 [0120.793] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Pets_frame-shadow.png", nBufferLength=0x105, lpBuffer=0x12d5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Pets_frame-shadow.png", lpFilePart=0x0) returned 0x46 [0120.793] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Pets_frame-shadow.png", nBufferLength=0x105, lpBuffer=0x12d590, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Pets_frame-shadow.png", lpFilePart=0x0) returned 0x46 [0120.793] SetErrorMode (uMode=0x1) returned 0x0 [0120.793] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Pets_frame-shadow.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\pets\\pets_frame-shadow.png"), fInfoLevelId=0x0, lpFileInformation=0x12d810 | out: lpFileInformation=0x12d810*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x722d79a4, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x722d79a4, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ea22689, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x643e)) returned 1 [0120.794] SetErrorMode (uMode=0x0) returned 0x1 [0120.794] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Pets_frame-shadow.png", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Pets_frame-shadow.png", lpFilePart=0x0) returned 0x46 [0120.794] SetErrorMode (uMode=0x1) returned 0x0 [0120.794] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Pets_frame-shadow.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\pets\\pets_frame-shadow.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2e8 [0120.794] SetErrorMode (uMode=0x0) returned 0x1 [0120.794] GetFileType (hFile=0x2e8) returned 0x1 [0120.795] GetFileSize (in: hFile=0x2e8, lpFileSizeHigh=0x12d8c8 | out: lpFileSizeHigh=0x12d8c8*=0x0) returned 0x643e [0120.795] ReadFile (in: hFile=0x2e8, lpBuffer=0x27dc0a0, nNumberOfBytesToRead=0x643e, lpNumberOfBytesRead=0x12d7a8, lpOverlapped=0x0 | out: lpBuffer=0x27dc0a0*, lpNumberOfBytesRead=0x12d7a8*=0x643e, lpOverlapped=0x0) returned 1 [0120.833] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Pets_frame-shadow.png", nBufferLength=0x105, lpBuffer=0x12d270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Pets_frame-shadow.png", lpFilePart=0x0) returned 0x46 [0120.833] SetErrorMode (uMode=0x1) returned 0x0 [0120.833] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Pets_frame-shadow.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\pets\\pets_frame-shadow.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0120.834] SetErrorMode (uMode=0x0) returned 0x1 [0120.834] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Pets_image-frame-backglow.png", nBufferLength=0x105, lpBuffer=0x12d5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Pets_image-frame-backglow.png", lpFilePart=0x0) returned 0x4e [0120.834] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Pets_image-frame-backglow.png", nBufferLength=0x105, lpBuffer=0x12d590, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Pets_image-frame-backglow.png", lpFilePart=0x0) returned 0x4e [0120.835] SetErrorMode (uMode=0x1) returned 0x0 [0120.835] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Pets_image-frame-backglow.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\pets\\pets_image-frame-backglow.png"), fInfoLevelId=0x0, lpFileInformation=0x12d810 | out: lpFileInformation=0x12d810*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x724eccba, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x724eccba, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ea487e7, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x1816)) returned 1 [0120.835] SetErrorMode (uMode=0x0) returned 0x1 [0120.835] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Pets_image-frame-backglow.png", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Pets_image-frame-backglow.png", lpFilePart=0x0) returned 0x4e [0120.835] SetErrorMode (uMode=0x1) returned 0x0 [0120.835] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Pets_image-frame-backglow.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\pets\\pets_image-frame-backglow.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2e8 [0120.836] SetErrorMode (uMode=0x0) returned 0x1 [0120.836] GetFileType (hFile=0x2e8) returned 0x1 [0120.836] GetFileSize (in: hFile=0x2e8, lpFileSizeHigh=0x12d8c8 | out: lpFileSizeHigh=0x12d8c8*=0x0) returned 0x1816 [0120.836] ReadFile (in: hFile=0x2e8, lpBuffer=0x26eee60, nNumberOfBytesToRead=0x1816, lpNumberOfBytesRead=0x12d7a8, lpOverlapped=0x0 | out: lpBuffer=0x26eee60*, lpNumberOfBytesRead=0x12d7a8*=0x1816, lpOverlapped=0x0) returned 1 [0120.865] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Pets_image-frame-backglow.png", nBufferLength=0x105, lpBuffer=0x12d270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Pets_image-frame-backglow.png", lpFilePart=0x0) returned 0x4e [0120.865] SetErrorMode (uMode=0x1) returned 0x0 [0120.866] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Pets_image-frame-backglow.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\pets\\pets_image-frame-backglow.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0120.866] SetErrorMode (uMode=0x0) returned 0x1 [0120.867] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Pets_image-frame-border.png", nBufferLength=0x105, lpBuffer=0x12d5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Pets_image-frame-border.png", lpFilePart=0x0) returned 0x4c [0120.867] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Pets_image-frame-border.png", nBufferLength=0x105, lpBuffer=0x12d590, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Pets_image-frame-border.png", lpFilePart=0x0) returned 0x4c [0120.867] SetErrorMode (uMode=0x1) returned 0x0 [0120.867] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Pets_image-frame-border.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\pets\\pets_image-frame-border.png"), fInfoLevelId=0x0, lpFileInformation=0x12d810 | out: lpFileInformation=0x12d810*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x724eccba, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x724eccba, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ea487e7, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x1f0a)) returned 1 [0120.868] SetErrorMode (uMode=0x0) returned 0x1 [0120.868] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Pets_image-frame-border.png", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Pets_image-frame-border.png", lpFilePart=0x0) returned 0x4c [0120.868] SetErrorMode (uMode=0x1) returned 0x0 [0120.868] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Pets_image-frame-border.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\pets\\pets_image-frame-border.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2e8 [0120.868] SetErrorMode (uMode=0x0) returned 0x1 [0120.868] GetFileType (hFile=0x2e8) returned 0x1 [0120.869] GetFileSize (in: hFile=0x2e8, lpFileSizeHigh=0x12d8c8 | out: lpFileSizeHigh=0x12d8c8*=0x0) returned 0x1f0a [0120.869] ReadFile (in: hFile=0x2e8, lpBuffer=0x27d9628, nNumberOfBytesToRead=0x1f0a, lpNumberOfBytesRead=0x12d7a8, lpOverlapped=0x0 | out: lpBuffer=0x27d9628*, lpNumberOfBytesRead=0x12d7a8*=0x1f0a, lpOverlapped=0x0) returned 1 [0120.910] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Pets_image-frame-border.png", nBufferLength=0x105, lpBuffer=0x12d270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Pets_image-frame-border.png", lpFilePart=0x0) returned 0x4c [0120.910] SetErrorMode (uMode=0x1) returned 0x0 [0120.910] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Pets_image-frame-border.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\pets\\pets_image-frame-border.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0120.911] SetErrorMode (uMode=0x0) returned 0x1 [0120.911] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Pets_image-frame-ImageMask.png", nBufferLength=0x105, lpBuffer=0x12d5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Pets_image-frame-ImageMask.png", lpFilePart=0x0) returned 0x4f [0120.911] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Pets_image-frame-ImageMask.png", nBufferLength=0x105, lpBuffer=0x12d590, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Pets_image-frame-ImageMask.png", lpFilePart=0x0) returned 0x4f [0120.912] SetErrorMode (uMode=0x1) returned 0x0 [0120.912] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Pets_image-frame-ImageMask.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\pets\\pets_image-frame-imagemask.png"), fInfoLevelId=0x0, lpFileInformation=0x12d810 | out: lpFileInformation=0x12d810*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x724c6b5d, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x724c6b5d, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ea487e7, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x1146)) returned 1 [0120.913] SetErrorMode (uMode=0x0) returned 0x1 [0120.914] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Pets_image-frame-ImageMask.png", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Pets_image-frame-ImageMask.png", lpFilePart=0x0) returned 0x4f [0120.914] SetErrorMode (uMode=0x1) returned 0x0 [0120.914] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Pets_image-frame-ImageMask.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\pets\\pets_image-frame-imagemask.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2e8 [0120.914] SetErrorMode (uMode=0x0) returned 0x1 [0120.914] GetFileType (hFile=0x2e8) returned 0x1 [0120.914] GetFileSize (in: hFile=0x2e8, lpFileSizeHigh=0x12d8c8 | out: lpFileSizeHigh=0x12d8c8*=0x0) returned 0x1146 [0120.914] ReadFile (in: hFile=0x2e8, lpBuffer=0x28c6478, nNumberOfBytesToRead=0x1146, lpNumberOfBytesRead=0x12d7a8, lpOverlapped=0x0 | out: lpBuffer=0x28c6478*, lpNumberOfBytesRead=0x12d7a8*=0x1146, lpOverlapped=0x0) returned 1 [0120.944] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Pets_image-frame-ImageMask.png", nBufferLength=0x105, lpBuffer=0x12d270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Pets_image-frame-ImageMask.png", lpFilePart=0x0) returned 0x4f [0120.944] SetErrorMode (uMode=0x1) returned 0x0 [0120.944] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Pets_image-frame-ImageMask.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\pets\\pets_image-frame-imagemask.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0120.945] SetErrorMode (uMode=0x0) returned 0x1 [0120.946] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Pets_notes-txt-background.png", nBufferLength=0x105, lpBuffer=0x12d5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Pets_notes-txt-background.png", lpFilePart=0x0) returned 0x4e [0120.946] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Pets_notes-txt-background.png", nBufferLength=0x105, lpBuffer=0x12d590, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Pets_notes-txt-background.png", lpFilePart=0x0) returned 0x4e [0120.946] SetErrorMode (uMode=0x1) returned 0x0 [0120.946] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Pets_notes-txt-background.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\pets\\pets_notes-txt-background.png"), fInfoLevelId=0x0, lpFileInformation=0x12d810 | out: lpFileInformation=0x12d810*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7240848c, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x7240848c, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ea487e7, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x1ed0)) returned 1 [0120.946] SetErrorMode (uMode=0x0) returned 0x1 [0120.947] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Pets_notes-txt-background.png", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Pets_notes-txt-background.png", lpFilePart=0x0) returned 0x4e [0120.947] SetErrorMode (uMode=0x1) returned 0x0 [0120.947] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Pets_notes-txt-background.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\pets\\pets_notes-txt-background.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2e8 [0120.947] SetErrorMode (uMode=0x0) returned 0x1 [0120.947] GetFileType (hFile=0x2e8) returned 0x1 [0120.947] GetFileSize (in: hFile=0x2e8, lpFileSizeHigh=0x12d8c8 | out: lpFileSizeHigh=0x12d8c8*=0x0) returned 0x1ed0 [0120.947] ReadFile (in: hFile=0x2e8, lpBuffer=0x279da58, nNumberOfBytesToRead=0x1ed0, lpNumberOfBytesRead=0x12d7a8, lpOverlapped=0x0 | out: lpBuffer=0x279da58*, lpNumberOfBytesRead=0x12d7a8*=0x1ed0, lpOverlapped=0x0) returned 1 [0120.969] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Pets_notes-txt-background.png", nBufferLength=0x105, lpBuffer=0x12d270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Pets_notes-txt-background.png", lpFilePart=0x0) returned 0x4e [0120.969] SetErrorMode (uMode=0x1) returned 0x0 [0120.969] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Pets_notes-txt-background.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\pets\\pets_notes-txt-background.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0120.970] SetErrorMode (uMode=0x0) returned 0x1 [0120.970] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\rollinghills.png", nBufferLength=0x105, lpBuffer=0x12d5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\rollinghills.png", lpFilePart=0x0) returned 0x41 [0120.971] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\rollinghills.png", nBufferLength=0x105, lpBuffer=0x12d590, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\rollinghills.png", lpFilePart=0x0) returned 0x41 [0120.971] SetErrorMode (uMode=0x1) returned 0x0 [0120.971] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\rollinghills.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\pets\\rollinghills.png"), fInfoLevelId=0x0, lpFileInformation=0x12d810 | out: lpFileInformation=0x12d810*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71fdde60, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x71fdde60, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ea487e7, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x41ca)) returned 1 [0120.971] SetErrorMode (uMode=0x0) returned 0x1 [0120.971] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\rollinghills.png", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\rollinghills.png", lpFilePart=0x0) returned 0x41 [0120.971] SetErrorMode (uMode=0x1) returned 0x0 [0120.971] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\rollinghills.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\pets\\rollinghills.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2e8 [0120.972] SetErrorMode (uMode=0x0) returned 0x1 [0120.972] GetFileType (hFile=0x2e8) returned 0x1 [0120.972] GetFileSize (in: hFile=0x2e8, lpFileSizeHigh=0x12d8c8 | out: lpFileSizeHigh=0x12d8c8*=0x0) returned 0x41ca [0120.972] ReadFile (in: hFile=0x2e8, lpBuffer=0x288aa30, nNumberOfBytesToRead=0x41ca, lpNumberOfBytesRead=0x12d7a8, lpOverlapped=0x0 | out: lpBuffer=0x288aa30*, lpNumberOfBytesRead=0x12d7a8*=0x41ca, lpOverlapped=0x0) returned 1 [0121.000] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\rollinghills.png", nBufferLength=0x105, lpBuffer=0x12d270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\rollinghills.png", lpFilePart=0x0) returned 0x41 [0121.001] SetErrorMode (uMode=0x1) returned 0x0 [0121.001] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\rollinghills.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\pets\\rollinghills.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0121.002] SetErrorMode (uMode=0x0) returned 0x1 [0121.002] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Scenes_INTRO_BG.wmv", nBufferLength=0x105, lpBuffer=0x12d5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Scenes_INTRO_BG.wmv", lpFilePart=0x0) returned 0x44 [0121.002] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Scenes_INTRO_BG.wmv", nBufferLength=0x105, lpBuffer=0x12d590, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Scenes_INTRO_BG.wmv", lpFilePart=0x0) returned 0x44 [0121.002] SetErrorMode (uMode=0x1) returned 0x0 [0121.003] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Scenes_INTRO_BG.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\pets\\scenes_intro_bg.wmv"), fInfoLevelId=0x0, lpFileInformation=0x12d810 | out: lpFileInformation=0x12d810*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7215ac02, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x7215ac02, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ea6e945, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x3dd2a)) returned 1 [0121.003] SetErrorMode (uMode=0x0) returned 0x1 [0121.003] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Scenes_INTRO_BG.wmv", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Scenes_INTRO_BG.wmv", lpFilePart=0x0) returned 0x44 [0121.003] SetErrorMode (uMode=0x1) returned 0x0 [0121.003] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Scenes_INTRO_BG.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\pets\\scenes_intro_bg.wmv"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2e8 [0121.004] SetErrorMode (uMode=0x0) returned 0x1 [0121.004] GetFileType (hFile=0x2e8) returned 0x1 [0121.004] GetFileSize (in: hFile=0x2e8, lpFileSizeHigh=0x12d8c8 | out: lpFileSizeHigh=0x12d8c8*=0x0) returned 0x3dd2a [0121.005] ReadFile (in: hFile=0x2e8, lpBuffer=0x128fd750, nNumberOfBytesToRead=0x3dd2a, lpNumberOfBytesRead=0x12d7a8, lpOverlapped=0x0 | out: lpBuffer=0x128fd750*, lpNumberOfBytesRead=0x12d7a8*=0x3dd2a, lpOverlapped=0x0) returned 1 [0121.081] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Scenes_INTRO_BG.wmv", nBufferLength=0x105, lpBuffer=0x12d270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Scenes_INTRO_BG.wmv", lpFilePart=0x0) returned 0x44 [0121.081] SetErrorMode (uMode=0x1) returned 0x0 [0121.081] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Scenes_INTRO_BG.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\pets\\scenes_intro_bg.wmv"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0121.082] SetErrorMode (uMode=0x0) returned 0x1 [0121.082] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Scenes_INTRO_BG_PAL.wmv", nBufferLength=0x105, lpBuffer=0x12d5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Scenes_INTRO_BG_PAL.wmv", lpFilePart=0x0) returned 0x48 [0121.082] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Scenes_INTRO_BG_PAL.wmv", nBufferLength=0x105, lpBuffer=0x12d590, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Scenes_INTRO_BG_PAL.wmv", lpFilePart=0x0) returned 0x48 [0121.083] SetErrorMode (uMode=0x1) returned 0x0 [0121.083] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Scenes_INTRO_BG_PAL.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\pets\\scenes_intro_bg_pal.wmv"), fInfoLevelId=0x0, lpFileInformation=0x12d810 | out: lpFileInformation=0x12d810*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72180d5f, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x72180d5f, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ec1184f, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x3fc64)) returned 1 [0121.084] SetErrorMode (uMode=0x0) returned 0x1 [0121.084] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Scenes_INTRO_BG_PAL.wmv", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Scenes_INTRO_BG_PAL.wmv", lpFilePart=0x0) returned 0x48 [0121.084] SetErrorMode (uMode=0x1) returned 0x0 [0121.084] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Scenes_INTRO_BG_PAL.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\pets\\scenes_intro_bg_pal.wmv"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2e8 [0121.084] SetErrorMode (uMode=0x0) returned 0x1 [0121.084] GetFileType (hFile=0x2e8) returned 0x1 [0121.084] GetFileSize (in: hFile=0x2e8, lpFileSizeHigh=0x12d8c8 | out: lpFileSizeHigh=0x12d8c8*=0x0) returned 0x3fc64 [0121.086] ReadFile (in: hFile=0x2e8, lpBuffer=0x1273a370, nNumberOfBytesToRead=0x3fc64, lpNumberOfBytesRead=0x12d7a8, lpOverlapped=0x0 | out: lpBuffer=0x1273a370*, lpNumberOfBytesRead=0x12d7a8*=0x3fc64, lpOverlapped=0x0) returned 1 [0121.138] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Scenes_INTRO_BG_PAL.wmv", nBufferLength=0x105, lpBuffer=0x12d270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Scenes_INTRO_BG_PAL.wmv", lpFilePart=0x0) returned 0x48 [0121.138] SetErrorMode (uMode=0x1) returned 0x0 [0121.138] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Scenes_INTRO_BG_PAL.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\pets\\scenes_intro_bg_pal.wmv"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0121.139] SetErrorMode (uMode=0x0) returned 0x1 [0121.140] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Scenes_LOOP_BG.wmv", nBufferLength=0x105, lpBuffer=0x12d5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Scenes_LOOP_BG.wmv", lpFilePart=0x0) returned 0x43 [0121.140] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Scenes_LOOP_BG.wmv", nBufferLength=0x105, lpBuffer=0x12d590, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Scenes_LOOP_BG.wmv", lpFilePart=0x0) returned 0x43 [0121.140] SetErrorMode (uMode=0x1) returned 0x0 [0121.140] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Scenes_LOOP_BG.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\pets\\scenes_loop_bg.wmv"), fInfoLevelId=0x0, lpFileInformation=0x12d810 | out: lpFileInformation=0x12d810*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x721cd019, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x721cd019, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ec379ad, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc2a8a)) returned 1 [0121.140] SetErrorMode (uMode=0x0) returned 0x1 [0121.140] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Scenes_LOOP_BG.wmv", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Scenes_LOOP_BG.wmv", lpFilePart=0x0) returned 0x43 [0121.140] SetErrorMode (uMode=0x1) returned 0x0 [0121.140] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Scenes_LOOP_BG.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\pets\\scenes_loop_bg.wmv"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2e8 [0121.141] SetErrorMode (uMode=0x0) returned 0x1 [0121.141] GetFileType (hFile=0x2e8) returned 0x1 [0121.141] GetFileSize (in: hFile=0x2e8, lpFileSizeHigh=0x12d8c8 | out: lpFileSizeHigh=0x12d8c8*=0x0) returned 0xc2a8a [0121.144] ReadFile (in: hFile=0x2e8, lpBuffer=0x129b6f38, nNumberOfBytesToRead=0xc2a8a, lpNumberOfBytesRead=0x12d7a8, lpOverlapped=0x0 | out: lpBuffer=0x129b6f38*, lpNumberOfBytesRead=0x12d7a8*=0xc2a8a, lpOverlapped=0x0) returned 1 [0121.595] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Scenes_LOOP_BG.wmv", nBufferLength=0x105, lpBuffer=0x12d270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Scenes_LOOP_BG.wmv", lpFilePart=0x0) returned 0x43 [0121.595] SetErrorMode (uMode=0x1) returned 0x0 [0121.595] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Scenes_LOOP_BG.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\pets\\scenes_loop_bg.wmv"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0121.596] SetErrorMode (uMode=0x0) returned 0x1 [0121.597] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Scenes_LOOP_BG_PAL.wmv", nBufferLength=0x105, lpBuffer=0x12d5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Scenes_LOOP_BG_PAL.wmv", lpFilePart=0x0) returned 0x47 [0121.597] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Scenes_LOOP_BG_PAL.wmv", nBufferLength=0x105, lpBuffer=0x12d590, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Scenes_LOOP_BG_PAL.wmv", lpFilePart=0x0) returned 0x47 [0121.597] SetErrorMode (uMode=0x1) returned 0x0 [0121.597] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Scenes_LOOP_BG_PAL.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\pets\\scenes_loop_bg_pal.wmv"), fInfoLevelId=0x0, lpFileInformation=0x12d810 | out: lpFileInformation=0x12d810*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7223f430, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x7223f430, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ecf6083, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xd43ca)) returned 1 [0121.597] SetErrorMode (uMode=0x0) returned 0x1 [0121.597] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Scenes_LOOP_BG_PAL.wmv", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Scenes_LOOP_BG_PAL.wmv", lpFilePart=0x0) returned 0x47 [0121.598] SetErrorMode (uMode=0x1) returned 0x0 [0121.598] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Scenes_LOOP_BG_PAL.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\pets\\scenes_loop_bg_pal.wmv"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2e8 [0121.598] SetErrorMode (uMode=0x0) returned 0x1 [0121.598] GetFileType (hFile=0x2e8) returned 0x1 [0121.598] GetFileSize (in: hFile=0x2e8, lpFileSizeHigh=0x12d8c8 | out: lpFileSizeHigh=0x12d8c8*=0x0) returned 0xd43ca [0121.633] ReadFile (in: hFile=0x2e8, lpBuffer=0x12680ba0, nNumberOfBytesToRead=0xd43ca, lpNumberOfBytesRead=0x12d7a8, lpOverlapped=0x0 | out: lpBuffer=0x12680ba0*, lpNumberOfBytesRead=0x12d7a8*=0xd43ca, lpOverlapped=0x0) returned 1 [0121.836] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Scenes_LOOP_BG_PAL.wmv", nBufferLength=0x105, lpBuffer=0x12d270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Scenes_LOOP_BG_PAL.wmv", lpFilePart=0x0) returned 0x47 [0121.836] SetErrorMode (uMode=0x1) returned 0x0 [0121.837] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Scenes_LOOP_BG_PAL.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\pets\\scenes_loop_bg_pal.wmv"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0121.837] SetErrorMode (uMode=0x0) returned 0x1 [0121.838] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Title_Page_Ref.wmv", nBufferLength=0x105, lpBuffer=0x12d5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Title_Page_Ref.wmv", lpFilePart=0x0) returned 0x43 [0121.838] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Title_Page_Ref.wmv", nBufferLength=0x105, lpBuffer=0x12d590, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Title_Page_Ref.wmv", lpFilePart=0x0) returned 0x43 [0121.838] SetErrorMode (uMode=0x1) returned 0x0 [0121.838] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Title_Page_Ref.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\pets\\title_page_ref.wmv"), fInfoLevelId=0x0, lpFileInformation=0x12d810 | out: lpFileInformation=0x12d810*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72323c5e, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x72323c5e, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ed4233f, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xe3dca)) returned 1 [0121.838] SetErrorMode (uMode=0x0) returned 0x1 [0121.838] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Title_Page_Ref.wmv", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Title_Page_Ref.wmv", lpFilePart=0x0) returned 0x43 [0121.838] SetErrorMode (uMode=0x1) returned 0x0 [0121.838] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Title_Page_Ref.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\pets\\title_page_ref.wmv"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2e8 [0121.839] SetErrorMode (uMode=0x0) returned 0x1 [0121.839] GetFileType (hFile=0x2e8) returned 0x1 [0121.839] GetFileSize (in: hFile=0x2e8, lpFileSizeHigh=0x12d8c8 | out: lpFileSizeHigh=0x12d8c8*=0x0) returned 0xe3dca [0121.843] ReadFile (in: hFile=0x2e8, lpBuffer=0x12754fa0, nNumberOfBytesToRead=0xe3dca, lpNumberOfBytesRead=0x12d7a8, lpOverlapped=0x0 | out: lpBuffer=0x12754fa0*, lpNumberOfBytesRead=0x12d7a8*=0xe3dca, lpOverlapped=0x0) returned 1 [0122.094] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Title_Page_Ref.wmv", nBufferLength=0x105, lpBuffer=0x12d270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Title_Page_Ref.wmv", lpFilePart=0x0) returned 0x43 [0122.094] SetErrorMode (uMode=0x1) returned 0x0 [0122.094] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Title_Page_Ref.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\pets\\title_page_ref.wmv"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0122.095] SetErrorMode (uMode=0x0) returned 0x1 [0122.095] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Title_Page_Ref_PAL.wmv", nBufferLength=0x105, lpBuffer=0x12d5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Title_Page_Ref_PAL.wmv", lpFilePart=0x0) returned 0x47 [0122.095] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Title_Page_Ref_PAL.wmv", nBufferLength=0x105, lpBuffer=0x12d590, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Title_Page_Ref_PAL.wmv", lpFilePart=0x0) returned 0x47 [0122.095] SetErrorMode (uMode=0x1) returned 0x0 [0122.095] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Title_Page_Ref_PAL.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\pets\\title_page_ref_pal.wmv"), fInfoLevelId=0x0, lpFileInformation=0x12d810 | out: lpFileInformation=0x12d810*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x723bc1d2, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x723bc1d2, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ee00a15, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xf188a)) returned 1 [0122.097] SetErrorMode (uMode=0x0) returned 0x1 [0122.097] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Title_Page_Ref_PAL.wmv", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Title_Page_Ref_PAL.wmv", lpFilePart=0x0) returned 0x47 [0122.097] SetErrorMode (uMode=0x1) returned 0x0 [0122.097] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Title_Page_Ref_PAL.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\pets\\title_page_ref_pal.wmv"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2e8 [0122.098] SetErrorMode (uMode=0x0) returned 0x1 [0122.098] GetFileType (hFile=0x2e8) returned 0x1 [0122.098] GetFileSize (in: hFile=0x2e8, lpFileSizeHigh=0x12d8c8 | out: lpFileSizeHigh=0x12d8c8*=0x0) returned 0xf188a [0122.105] ReadFile (in: hFile=0x2e8, lpBuffer=0x1292c550, nNumberOfBytesToRead=0xf188a, lpNumberOfBytesRead=0x12d7a8, lpOverlapped=0x0 | out: lpBuffer=0x1292c550*, lpNumberOfBytesRead=0x12d7a8*=0xf188a, lpOverlapped=0x0) returned 1 [0122.402] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Title_Page_Ref_PAL.wmv", nBufferLength=0x105, lpBuffer=0x12d270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Title_Page_Ref_PAL.wmv", lpFilePart=0x0) returned 0x47 [0122.402] SetErrorMode (uMode=0x1) returned 0x0 [0122.402] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Title_Page_Ref_PAL.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\pets\\title_page_ref_pal.wmv"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0122.403] SetErrorMode (uMode=0x0) returned 0x1 [0122.403] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Decrypt Instructions.txt", nBufferLength=0x105, lpBuffer=0x12d240, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Decrypt Instructions.txt", lpFilePart=0x0) returned 0x49 [0122.403] SetErrorMode (uMode=0x1) returned 0x0 [0122.403] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Decrypt Instructions.txt" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\pets\\decrypt instructions.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x2e8 [0122.404] SetErrorMode (uMode=0x0) returned 0x1 [0122.404] GetFileType (hFile=0x2e8) returned 0x1 [0122.404] WriteFile (in: hFile=0x2e8, lpBuffer=0x26c6ca0*, nNumberOfBytesToWrite=0x773, lpNumberOfBytesWritten=0x12d7a8, lpOverlapped=0x0 | out: lpBuffer=0x26c6ca0*, lpNumberOfBytesWritten=0x12d7a8*=0x773, lpOverlapped=0x0) returned 1 [0122.406] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets", nBufferLength=0x105, lpBuffer=0x12d430, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets", lpFilePart=0x0) returned 0x30 [0122.406] SetErrorMode (uMode=0x1) returned 0x0 [0122.406] FindFirstFileW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\*", lpFindFileData=0x12d5d0 | out: lpFindFileData=0x12d5d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa15a10e8, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x69038550, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x69038550, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x26bc80 [0122.406] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa15a10e8, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x69038550, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x69038550, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0122.406] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x69038550, ftCreationTime.dwHighDateTime=0x1d5e786, ftLastAccessTime.dwLowDateTime=0x69038550, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x69038550, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x773, dwReserved0=0x0, dwReserved1=0x0, cFileName="Decrypt Instructions.txt", cAlternateFileName="DECRYP~1.TXT")) returned 1 [0122.406] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72003fbd, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x72003fbd, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4e55fac9, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x39eaa, dwReserved0=0x0, dwReserved1=0x0, cFileName="Notes_INTRO_BG.wmv", cAlternateFileName="")) returned 1 [0122.406] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72050277, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x72050277, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4e55fac9, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x3dd24, dwReserved0=0x0, dwReserved1=0x0, cFileName="Notes_INTRO_BG_PAL.wmv", cAlternateFileName="")) returned 1 [0122.406] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x720763d4, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x720763d4, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4e5d1ee3, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc0b4a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Notes_LOOP_BG.wmv", cAlternateFileName="")) returned 1 [0122.407] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7210e948, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x7210e948, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4e61e19f, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xd43ca, dwReserved0=0x0, dwReserved1=0x0, cFileName="Notes_LOOP_BG_PAL.wmv", cAlternateFileName="")) returned 1 [0122.407] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7240848c, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x7240848c, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4e66a45b, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xbc8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pets_btn-back-over-select.png", cAlternateFileName="")) returned 1 [0122.407] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7242e5e9, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x7242e5e9, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4e66a45b, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x739, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pets_btn-back-static.png", cAlternateFileName="")) returned 1 [0122.407] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72454746, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x72454746, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4e6905b9, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xbc8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pets_btn-next-over-select.png", cAlternateFileName="")) returned 1 [0122.407] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7247a8a3, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x7247a8a3, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4e6905b9, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x7f9, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pets_btn-next-static.png", cAlternateFileName="")) returned 1 [0122.407] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x722b1847, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x722b1847, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4e6905b9, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xb4b, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pets_btn-over-DOT.png", cAlternateFileName="")) returned 1 [0122.407] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x724a0a00, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x724a0a00, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4e6b6717, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xbc8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pets_btn-previous-over-select.png", cAlternateFileName="")) returned 1 [0122.407] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x724a0a00, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x724a0a00, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4e6b6717, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x7e3, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pets_btn-previous-static.png", cAlternateFileName="")) returned 1 [0122.407] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x722d79a4, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x722d79a4, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4e6b6717, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x33b7, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pets_frame-border.png", cAlternateFileName="")) returned 1 [0122.407] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x724c6b5d, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x724c6b5d, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4e6dc875, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x1681, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pets_frame-highlight.png", cAlternateFileName="")) returned 1 [0122.407] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x722fdb01, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x722fdb01, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4e6dc875, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x1fe9, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pets_frame-imageMask.png", cAlternateFileName="")) returned 1 [0122.407] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x722d79a4, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x722d79a4, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ea22689, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x643e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pets_frame-shadow.png", cAlternateFileName="")) returned 1 [0122.407] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x724eccba, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x724eccba, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ea487e7, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x1816, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pets_image-frame-backglow.png", cAlternateFileName="")) returned 1 [0122.407] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x724eccba, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x724eccba, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ea487e7, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x1f0a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pets_image-frame-border.png", cAlternateFileName="")) returned 1 [0122.408] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x724c6b5d, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x724c6b5d, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ea487e7, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x1146, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pets_image-frame-ImageMask.png", cAlternateFileName="")) returned 1 [0122.408] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7240848c, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x7240848c, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ea487e7, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x1ed0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pets_notes-txt-background.png", cAlternateFileName="")) returned 1 [0122.408] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71fdde60, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x71fdde60, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ea487e7, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x41ca, dwReserved0=0x0, dwReserved1=0x0, cFileName="rollinghills.png", cAlternateFileName="")) returned 1 [0122.408] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7215ac02, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x7215ac02, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ea6e945, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x3dd2a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Scenes_INTRO_BG.wmv", cAlternateFileName="")) returned 1 [0122.408] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72180d5f, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x72180d5f, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ec1184f, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x3fc64, dwReserved0=0x0, dwReserved1=0x0, cFileName="Scenes_INTRO_BG_PAL.wmv", cAlternateFileName="")) returned 1 [0122.408] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x721cd019, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x721cd019, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ec379ad, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc2a8a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Scenes_LOOP_BG.wmv", cAlternateFileName="")) returned 1 [0122.408] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7223f430, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x7223f430, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ecf6083, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xd43ca, dwReserved0=0x0, dwReserved1=0x0, cFileName="Scenes_LOOP_BG_PAL.wmv", cAlternateFileName="")) returned 1 [0122.408] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72323c5e, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x72323c5e, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ed4233f, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xe3dca, dwReserved0=0x0, dwReserved1=0x0, cFileName="Title_Page_Ref.wmv", cAlternateFileName="")) returned 1 [0122.408] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x723bc1d2, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x723bc1d2, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ee00a15, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xf188a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Title_Page_Ref_PAL.wmv", cAlternateFileName="")) returned 1 [0122.409] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x723bc1d2, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x723bc1d2, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ee00a15, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xf188a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Title_Page_Ref_PAL.wmv", cAlternateFileName="")) returned 0 [0122.409] FindClose (in: hFindFile=0x26bc80 | out: hFindFile=0x26bc80) returned 1 [0122.410] SetErrorMode (uMode=0x0) returned 0x1 [0122.410] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Push", nBufferLength=0x105, lpBuffer=0x12d390, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Push", lpFilePart=0x0) returned 0x30 [0122.410] SetErrorMode (uMode=0x1) returned 0x0 [0122.410] FindFirstFileW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Push\\*", lpFindFileData=0x12d530 | out: lpFindFileData=0x12d530*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa11287e6, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa73ba87, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa119af33, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x26bc80 [0122.412] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa11287e6, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa73ba87, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa119af33, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0122.413] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f316407, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f316407, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ee26b73, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x11da, dwReserved0=0x0, dwReserved1=0x0, cFileName="1047x576black.png", cAlternateFileName="")) returned 1 [0122.413] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f316407, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f316407, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ee26b73, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x11da, dwReserved0=0x0, dwReserved1=0x0, cFileName="1047_576black.png", cAlternateFileName="")) returned 1 [0122.413] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f3626c1, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f3626c1, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ee26b73, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationLeft_ButtonGraphic.png", cAlternateFileName="")) returned 1 [0122.413] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f3626c1, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f3626c1, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ee26b73, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc3a, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationLeft_SelectionSubpicture.png", cAlternateFileName="")) returned 1 [0122.413] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f38881e, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f38881e, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ee26b73, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13a1, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationRight_ButtonGraphic.png", cAlternateFileName="")) returned 1 [0122.413] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f38881e, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f38881e, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ee26b73, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc2e, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationRight_SelectionSubpicture.png", cAlternateFileName="")) returned 1 [0122.413] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f33c564, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f33c564, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ee26b73, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x135b, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationUp_ButtonGraphic.png", cAlternateFileName="")) returned 1 [0122.413] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f33c564, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f33c564, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ee26b73, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc09, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationUp_SelectionSubpicture.png", cAlternateFileName="")) returned 1 [0122.413] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f2f02aa, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f2f02aa, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ee4ccd1, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x5e02, dwReserved0=0x0, dwReserved1=0x0, cFileName="push.png", cAlternateFileName="")) returned 1 [0122.413] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f3ae97b, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f3ae97b, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ee4ccd1, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xb92, dwReserved0=0x0, dwReserved1=0x0, cFileName="pushplaysubpicture.png", cAlternateFileName="")) returned 1 [0122.413] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f38881e, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f38881e, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ee4ccd1, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xb70, dwReserved0=0x0, dwReserved1=0x0, cFileName="push_item.png", cAlternateFileName="")) returned 1 [0122.413] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f3ae97b, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f3ae97b, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ee4ccd1, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xbb8, dwReserved0=0x0, dwReserved1=0x0, cFileName="push_title.png", cAlternateFileName="")) returned 1 [0122.413] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f3ae97b, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f3ae97b, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ee4ccd1, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xbb8, dwReserved0=0x0, dwReserved1=0x0, cFileName="push_title.png", cAlternateFileName="")) returned 0 [0122.414] FindClose (in: hFindFile=0x26bc80 | out: hFindFile=0x26bc80) returned 1 [0122.415] SetErrorMode (uMode=0x0) returned 0x1 [0122.415] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Push\\1047x576black.png", nBufferLength=0x105, lpBuffer=0x12d5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Push\\1047x576black.png", lpFilePart=0x0) returned 0x42 [0122.415] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Push\\1047x576black.png", nBufferLength=0x105, lpBuffer=0x12d590, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Push\\1047x576black.png", lpFilePart=0x0) returned 0x42 [0122.415] SetErrorMode (uMode=0x1) returned 0x0 [0122.415] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Push\\1047x576black.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\push\\1047x576black.png"), fInfoLevelId=0x0, lpFileInformation=0x12d810 | out: lpFileInformation=0x12d810*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f316407, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f316407, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ee26b73, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x11da)) returned 1 [0122.416] SetErrorMode (uMode=0x0) returned 0x1 [0122.416] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Push\\1047x576black.png", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Push\\1047x576black.png", lpFilePart=0x0) returned 0x42 [0122.417] SetErrorMode (uMode=0x1) returned 0x0 [0122.417] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Push\\1047x576black.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\push\\1047x576black.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2e8 [0122.417] SetErrorMode (uMode=0x0) returned 0x1 [0122.417] GetFileType (hFile=0x2e8) returned 0x1 [0122.417] GetFileSize (in: hFile=0x2e8, lpFileSizeHigh=0x12d8c8 | out: lpFileSizeHigh=0x12d8c8*=0x0) returned 0x11da [0122.417] ReadFile (in: hFile=0x2e8, lpBuffer=0x26cb950, nNumberOfBytesToRead=0x11da, lpNumberOfBytesRead=0x12d7a8, lpOverlapped=0x0 | out: lpBuffer=0x26cb950*, lpNumberOfBytesRead=0x12d7a8*=0x11da, lpOverlapped=0x0) returned 1 [0122.440] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Push\\1047x576black.png", nBufferLength=0x105, lpBuffer=0x12d270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Push\\1047x576black.png", lpFilePart=0x0) returned 0x42 [0122.440] SetErrorMode (uMode=0x1) returned 0x0 [0122.440] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Push\\1047x576black.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\push\\1047x576black.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0122.441] SetErrorMode (uMode=0x0) returned 0x1 [0122.442] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Push\\1047_576black.png", nBufferLength=0x105, lpBuffer=0x12d5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Push\\1047_576black.png", lpFilePart=0x0) returned 0x42 [0122.442] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Push\\1047_576black.png", nBufferLength=0x105, lpBuffer=0x12d590, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Push\\1047_576black.png", lpFilePart=0x0) returned 0x42 [0122.442] SetErrorMode (uMode=0x1) returned 0x0 [0122.442] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Push\\1047_576black.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\push\\1047_576black.png"), fInfoLevelId=0x0, lpFileInformation=0x12d810 | out: lpFileInformation=0x12d810*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f316407, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f316407, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ee26b73, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x11da)) returned 1 [0122.442] SetErrorMode (uMode=0x0) returned 0x1 [0122.442] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Push\\1047_576black.png", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Push\\1047_576black.png", lpFilePart=0x0) returned 0x42 [0122.442] SetErrorMode (uMode=0x1) returned 0x0 [0122.443] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Push\\1047_576black.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\push\\1047_576black.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2e8 [0122.443] SetErrorMode (uMode=0x0) returned 0x1 [0122.443] GetFileType (hFile=0x2e8) returned 0x1 [0122.443] GetFileSize (in: hFile=0x2e8, lpFileSizeHigh=0x12d8c8 | out: lpFileSizeHigh=0x12d8c8*=0x0) returned 0x11da [0122.443] ReadFile (in: hFile=0x2e8, lpBuffer=0x27b3ab8, nNumberOfBytesToRead=0x11da, lpNumberOfBytesRead=0x12d7a8, lpOverlapped=0x0 | out: lpBuffer=0x27b3ab8*, lpNumberOfBytesRead=0x12d7a8*=0x11da, lpOverlapped=0x0) returned 1 [0122.465] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Push\\1047_576black.png", nBufferLength=0x105, lpBuffer=0x12d270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Push\\1047_576black.png", lpFilePart=0x0) returned 0x42 [0122.465] SetErrorMode (uMode=0x1) returned 0x0 [0122.465] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Push\\1047_576black.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\push\\1047_576black.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0122.466] SetErrorMode (uMode=0x0) returned 0x1 [0122.466] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Push\\NavigationLeft_ButtonGraphic.png", nBufferLength=0x105, lpBuffer=0x12d5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Push\\NavigationLeft_ButtonGraphic.png", lpFilePart=0x0) returned 0x51 [0122.466] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Push\\NavigationLeft_ButtonGraphic.png", nBufferLength=0x105, lpBuffer=0x12d590, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Push\\NavigationLeft_ButtonGraphic.png", lpFilePart=0x0) returned 0x51 [0122.466] SetErrorMode (uMode=0x1) returned 0x0 [0122.467] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Push\\NavigationLeft_ButtonGraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\push\\navigationleft_buttongraphic.png"), fInfoLevelId=0x0, lpFileInformation=0x12d810 | out: lpFileInformation=0x12d810*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f3626c1, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f3626c1, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ee26b73, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13e0)) returned 1 [0122.467] SetErrorMode (uMode=0x0) returned 0x1 [0122.467] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Push\\NavigationLeft_ButtonGraphic.png", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Push\\NavigationLeft_ButtonGraphic.png", lpFilePart=0x0) returned 0x51 [0122.467] SetErrorMode (uMode=0x1) returned 0x0 [0122.467] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Push\\NavigationLeft_ButtonGraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\push\\navigationleft_buttongraphic.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2e8 [0122.467] SetErrorMode (uMode=0x0) returned 0x1 [0122.467] GetFileType (hFile=0x2e8) returned 0x1 [0122.467] GetFileSize (in: hFile=0x2e8, lpFileSizeHigh=0x12d8c8 | out: lpFileSizeHigh=0x12d8c8*=0x0) returned 0x13e0 [0122.468] ReadFile (in: hFile=0x2e8, lpBuffer=0x289b9a8, nNumberOfBytesToRead=0x13e0, lpNumberOfBytesRead=0x12d7a8, lpOverlapped=0x0 | out: lpBuffer=0x289b9a8*, lpNumberOfBytesRead=0x12d7a8*=0x13e0, lpOverlapped=0x0) returned 1 [0122.519] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Push\\NavigationLeft_ButtonGraphic.png", nBufferLength=0x105, lpBuffer=0x12d270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Push\\NavigationLeft_ButtonGraphic.png", lpFilePart=0x0) returned 0x51 [0122.519] SetErrorMode (uMode=0x1) returned 0x0 [0122.519] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Push\\NavigationLeft_ButtonGraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\push\\navigationleft_buttongraphic.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0122.520] SetErrorMode (uMode=0x0) returned 0x1 [0122.521] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Push\\NavigationLeft_SelectionSubpicture.png", nBufferLength=0x105, lpBuffer=0x12d5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Push\\NavigationLeft_SelectionSubpicture.png", lpFilePart=0x0) returned 0x57 [0122.521] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Push\\NavigationLeft_SelectionSubpicture.png", nBufferLength=0x105, lpBuffer=0x12d590, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Push\\NavigationLeft_SelectionSubpicture.png", lpFilePart=0x0) returned 0x57 [0122.521] SetErrorMode (uMode=0x1) returned 0x0 [0122.521] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Push\\NavigationLeft_SelectionSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\push\\navigationleft_selectionsubpicture.png"), fInfoLevelId=0x0, lpFileInformation=0x12d810 | out: lpFileInformation=0x12d810*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f3626c1, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f3626c1, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ee26b73, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc3a)) returned 1 [0122.521] SetErrorMode (uMode=0x0) returned 0x1 [0122.522] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Push\\NavigationLeft_SelectionSubpicture.png", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Push\\NavigationLeft_SelectionSubpicture.png", lpFilePart=0x0) returned 0x57 [0122.522] SetErrorMode (uMode=0x1) returned 0x0 [0122.522] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Push\\NavigationLeft_SelectionSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\push\\navigationleft_selectionsubpicture.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2e8 [0122.522] SetErrorMode (uMode=0x0) returned 0x1 [0122.522] GetFileType (hFile=0x2e8) returned 0x1 [0122.522] GetFileSize (in: hFile=0x2e8, lpFileSizeHigh=0x12d8c8 | out: lpFileSizeHigh=0x12d8c8*=0x0) returned 0xc3a [0122.522] ReadFile (in: hFile=0x2e8, lpBuffer=0x2788218, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12d7a8, lpOverlapped=0x0 | out: lpBuffer=0x2788218*, lpNumberOfBytesRead=0x12d7a8*=0xc3a, lpOverlapped=0x0) returned 1 [0122.543] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Push\\NavigationLeft_SelectionSubpicture.png", nBufferLength=0x105, lpBuffer=0x12d270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Push\\NavigationLeft_SelectionSubpicture.png", lpFilePart=0x0) returned 0x57 [0122.543] SetErrorMode (uMode=0x1) returned 0x0 [0122.543] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Push\\NavigationLeft_SelectionSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\push\\navigationleft_selectionsubpicture.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0122.544] SetErrorMode (uMode=0x0) returned 0x1 [0122.544] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Push\\NavigationRight_ButtonGraphic.png", nBufferLength=0x105, lpBuffer=0x12d5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Push\\NavigationRight_ButtonGraphic.png", lpFilePart=0x0) returned 0x52 [0122.544] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Push\\NavigationRight_ButtonGraphic.png", nBufferLength=0x105, lpBuffer=0x12d590, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Push\\NavigationRight_ButtonGraphic.png", lpFilePart=0x0) returned 0x52 [0122.544] SetErrorMode (uMode=0x1) returned 0x0 [0122.544] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Push\\NavigationRight_ButtonGraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\push\\navigationright_buttongraphic.png"), fInfoLevelId=0x0, lpFileInformation=0x12d810 | out: lpFileInformation=0x12d810*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f38881e, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f38881e, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ee26b73, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13a1)) returned 1 [0122.545] SetErrorMode (uMode=0x0) returned 0x1 [0122.545] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Push\\NavigationRight_ButtonGraphic.png", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Push\\NavigationRight_ButtonGraphic.png", lpFilePart=0x0) returned 0x52 [0122.545] SetErrorMode (uMode=0x1) returned 0x0 [0122.545] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Push\\NavigationRight_ButtonGraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\push\\navigationright_buttongraphic.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2e8 [0122.545] SetErrorMode (uMode=0x0) returned 0x1 [0122.545] GetFileType (hFile=0x2e8) returned 0x1 [0122.545] GetFileSize (in: hFile=0x2e8, lpFileSizeHigh=0x12d8c8 | out: lpFileSizeHigh=0x12d8c8*=0x0) returned 0x13a1 [0122.546] ReadFile (in: hFile=0x2e8, lpBuffer=0x286e6e8, nNumberOfBytesToRead=0x13a1, lpNumberOfBytesRead=0x12d7a8, lpOverlapped=0x0 | out: lpBuffer=0x286e6e8*, lpNumberOfBytesRead=0x12d7a8*=0x13a1, lpOverlapped=0x0) returned 1 [0122.571] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Push\\NavigationRight_ButtonGraphic.png", nBufferLength=0x105, lpBuffer=0x12d270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Push\\NavigationRight_ButtonGraphic.png", lpFilePart=0x0) returned 0x52 [0122.571] SetErrorMode (uMode=0x1) returned 0x0 [0122.571] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Push\\NavigationRight_ButtonGraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\push\\navigationright_buttongraphic.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0122.572] SetErrorMode (uMode=0x0) returned 0x1 [0122.572] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Push\\NavigationRight_SelectionSubpicture.png", nBufferLength=0x105, lpBuffer=0x12d5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Push\\NavigationRight_SelectionSubpicture.png", lpFilePart=0x0) returned 0x58 [0122.572] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Push\\NavigationRight_SelectionSubpicture.png", nBufferLength=0x105, lpBuffer=0x12d590, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Push\\NavigationRight_SelectionSubpicture.png", lpFilePart=0x0) returned 0x58 [0122.573] SetErrorMode (uMode=0x1) returned 0x0 [0122.573] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Push\\NavigationRight_SelectionSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\push\\navigationright_selectionsubpicture.png"), fInfoLevelId=0x0, lpFileInformation=0x12d810 | out: lpFileInformation=0x12d810*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f38881e, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f38881e, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ee26b73, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc2e)) returned 1 [0122.573] SetErrorMode (uMode=0x0) returned 0x1 [0122.573] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Push\\NavigationRight_SelectionSubpicture.png", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Push\\NavigationRight_SelectionSubpicture.png", lpFilePart=0x0) returned 0x58 [0122.573] SetErrorMode (uMode=0x1) returned 0x0 [0122.573] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Push\\NavigationRight_SelectionSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\push\\navigationright_selectionsubpicture.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2e8 [0122.574] SetErrorMode (uMode=0x0) returned 0x1 [0122.574] GetFileType (hFile=0x2e8) returned 0x1 [0122.574] GetFileSize (in: hFile=0x2e8, lpFileSizeHigh=0x12d8c8 | out: lpFileSizeHigh=0x12d8c8*=0x0) returned 0xc2e [0122.574] ReadFile (in: hFile=0x2e8, lpBuffer=0x275c4f0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12d7a8, lpOverlapped=0x0 | out: lpBuffer=0x275c4f0*, lpNumberOfBytesRead=0x12d7a8*=0xc2e, lpOverlapped=0x0) returned 1 [0122.596] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Push\\NavigationRight_SelectionSubpicture.png", nBufferLength=0x105, lpBuffer=0x12d270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Push\\NavigationRight_SelectionSubpicture.png", lpFilePart=0x0) returned 0x58 [0122.596] SetErrorMode (uMode=0x1) returned 0x0 [0122.596] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Push\\NavigationRight_SelectionSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\push\\navigationright_selectionsubpicture.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0122.597] SetErrorMode (uMode=0x0) returned 0x1 [0122.598] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Push\\NavigationUp_ButtonGraphic.png", nBufferLength=0x105, lpBuffer=0x12d5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Push\\NavigationUp_ButtonGraphic.png", lpFilePart=0x0) returned 0x4f [0122.598] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Push\\NavigationUp_ButtonGraphic.png", nBufferLength=0x105, lpBuffer=0x12d590, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Push\\NavigationUp_ButtonGraphic.png", lpFilePart=0x0) returned 0x4f [0122.598] SetErrorMode (uMode=0x1) returned 0x0 [0122.598] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Push\\NavigationUp_ButtonGraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\push\\navigationup_buttongraphic.png"), fInfoLevelId=0x0, lpFileInformation=0x12d810 | out: lpFileInformation=0x12d810*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f33c564, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f33c564, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ee26b73, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x135b)) returned 1 [0122.598] SetErrorMode (uMode=0x0) returned 0x1 [0122.598] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Push\\NavigationUp_ButtonGraphic.png", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Push\\NavigationUp_ButtonGraphic.png", lpFilePart=0x0) returned 0x4f [0122.598] SetErrorMode (uMode=0x1) returned 0x0 [0122.598] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Push\\NavigationUp_ButtonGraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\push\\navigationup_buttongraphic.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2e8 [0122.599] SetErrorMode (uMode=0x0) returned 0x1 [0122.599] GetFileType (hFile=0x2e8) returned 0x1 [0122.599] GetFileSize (in: hFile=0x2e8, lpFileSizeHigh=0x12d8c8 | out: lpFileSizeHigh=0x12d8c8*=0x0) returned 0x135b [0122.599] ReadFile (in: hFile=0x2e8, lpBuffer=0x2842960, nNumberOfBytesToRead=0x135b, lpNumberOfBytesRead=0x12d7a8, lpOverlapped=0x0 | out: lpBuffer=0x2842960*, lpNumberOfBytesRead=0x12d7a8*=0x135b, lpOverlapped=0x0) returned 1 [0122.624] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Push\\NavigationUp_ButtonGraphic.png", nBufferLength=0x105, lpBuffer=0x12d270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Push\\NavigationUp_ButtonGraphic.png", lpFilePart=0x0) returned 0x4f [0122.624] SetErrorMode (uMode=0x1) returned 0x0 [0122.624] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Push\\NavigationUp_ButtonGraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\push\\navigationup_buttongraphic.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0122.625] SetErrorMode (uMode=0x0) returned 0x1 [0122.625] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Push\\NavigationUp_SelectionSubpicture.png", nBufferLength=0x105, lpBuffer=0x12d5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Push\\NavigationUp_SelectionSubpicture.png", lpFilePart=0x0) returned 0x55 [0122.625] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Push\\NavigationUp_SelectionSubpicture.png", nBufferLength=0x105, lpBuffer=0x12d590, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Push\\NavigationUp_SelectionSubpicture.png", lpFilePart=0x0) returned 0x55 [0122.625] SetErrorMode (uMode=0x1) returned 0x0 [0122.625] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Push\\NavigationUp_SelectionSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\push\\navigationup_selectionsubpicture.png"), fInfoLevelId=0x0, lpFileInformation=0x12d810 | out: lpFileInformation=0x12d810*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f33c564, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f33c564, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ee26b73, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc09)) returned 1 [0122.626] SetErrorMode (uMode=0x0) returned 0x1 [0122.626] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Push\\NavigationUp_SelectionSubpicture.png", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Push\\NavigationUp_SelectionSubpicture.png", lpFilePart=0x0) returned 0x55 [0122.626] SetErrorMode (uMode=0x1) returned 0x0 [0122.626] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Push\\NavigationUp_SelectionSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\push\\navigationup_selectionsubpicture.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2e8 [0122.626] SetErrorMode (uMode=0x0) returned 0x1 [0122.626] GetFileType (hFile=0x2e8) returned 0x1 [0122.626] GetFileSize (in: hFile=0x2e8, lpFileSizeHigh=0x12d8c8 | out: lpFileSizeHigh=0x12d8c8*=0x0) returned 0xc09 [0122.626] ReadFile (in: hFile=0x2e8, lpBuffer=0x2730448, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12d7a8, lpOverlapped=0x0 | out: lpBuffer=0x2730448*, lpNumberOfBytesRead=0x12d7a8*=0xc09, lpOverlapped=0x0) returned 1 [0122.647] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Push\\NavigationUp_SelectionSubpicture.png", nBufferLength=0x105, lpBuffer=0x12d270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Push\\NavigationUp_SelectionSubpicture.png", lpFilePart=0x0) returned 0x55 [0122.647] SetErrorMode (uMode=0x1) returned 0x0 [0122.647] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Push\\NavigationUp_SelectionSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\push\\navigationup_selectionsubpicture.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0122.648] SetErrorMode (uMode=0x0) returned 0x1 [0122.649] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Push\\push.png", nBufferLength=0x105, lpBuffer=0x12d5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Push\\push.png", lpFilePart=0x0) returned 0x39 [0122.649] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Push\\push.png", nBufferLength=0x105, lpBuffer=0x12d590, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Push\\push.png", lpFilePart=0x0) returned 0x39 [0122.649] SetErrorMode (uMode=0x1) returned 0x0 [0122.649] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Push\\push.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\push\\push.png"), fInfoLevelId=0x0, lpFileInformation=0x12d810 | out: lpFileInformation=0x12d810*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f2f02aa, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f2f02aa, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ee4ccd1, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x5e02)) returned 1 [0122.649] SetErrorMode (uMode=0x0) returned 0x1 [0122.649] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Push\\push.png", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Push\\push.png", lpFilePart=0x0) returned 0x39 [0122.650] SetErrorMode (uMode=0x1) returned 0x0 [0122.650] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Push\\push.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\push\\push.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2e8 [0122.650] SetErrorMode (uMode=0x0) returned 0x1 [0122.650] GetFileType (hFile=0x2e8) returned 0x1 [0122.650] GetFileSize (in: hFile=0x2e8, lpFileSizeHigh=0x12d8c8 | out: lpFileSizeHigh=0x12d8c8*=0x0) returned 0x5e02 [0122.650] ReadFile (in: hFile=0x2e8, lpBuffer=0x2816730, nNumberOfBytesToRead=0x5e02, lpNumberOfBytesRead=0x12d7a8, lpOverlapped=0x0 | out: lpBuffer=0x2816730*, lpNumberOfBytesRead=0x12d7a8*=0x5e02, lpOverlapped=0x0) returned 1 [0122.691] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Push\\push.png", nBufferLength=0x105, lpBuffer=0x12d270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Push\\push.png", lpFilePart=0x0) returned 0x39 [0122.691] SetErrorMode (uMode=0x1) returned 0x0 [0122.691] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Push\\push.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\push\\push.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0122.692] SetErrorMode (uMode=0x0) returned 0x1 [0122.692] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Push\\pushplaysubpicture.png", nBufferLength=0x105, lpBuffer=0x12d5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Push\\pushplaysubpicture.png", lpFilePart=0x0) returned 0x47 [0122.692] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Push\\pushplaysubpicture.png", nBufferLength=0x105, lpBuffer=0x12d590, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Push\\pushplaysubpicture.png", lpFilePart=0x0) returned 0x47 [0122.692] SetErrorMode (uMode=0x1) returned 0x0 [0122.693] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Push\\pushplaysubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\push\\pushplaysubpicture.png"), fInfoLevelId=0x0, lpFileInformation=0x12d810 | out: lpFileInformation=0x12d810*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f3ae97b, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f3ae97b, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ee4ccd1, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xb92)) returned 1 [0122.693] SetErrorMode (uMode=0x0) returned 0x1 [0122.693] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Push\\pushplaysubpicture.png", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Push\\pushplaysubpicture.png", lpFilePart=0x0) returned 0x47 [0122.693] SetErrorMode (uMode=0x1) returned 0x0 [0122.693] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Push\\pushplaysubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\push\\pushplaysubpicture.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2e8 [0122.693] SetErrorMode (uMode=0x0) returned 0x1 [0122.694] GetFileType (hFile=0x2e8) returned 0x1 [0122.694] GetFileSize (in: hFile=0x2e8, lpFileSizeHigh=0x12d8c8 | out: lpFileSizeHigh=0x12d8c8*=0x0) returned 0xb92 [0122.694] ReadFile (in: hFile=0x2e8, lpBuffer=0x2724a98, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12d7a8, lpOverlapped=0x0 | out: lpBuffer=0x2724a98*, lpNumberOfBytesRead=0x12d7a8*=0xb92, lpOverlapped=0x0) returned 1 [0122.716] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Push\\pushplaysubpicture.png", nBufferLength=0x105, lpBuffer=0x12d270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Push\\pushplaysubpicture.png", lpFilePart=0x0) returned 0x47 [0122.716] SetErrorMode (uMode=0x1) returned 0x0 [0122.716] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Push\\pushplaysubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\push\\pushplaysubpicture.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0122.717] SetErrorMode (uMode=0x0) returned 0x1 [0122.718] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Push\\push_item.png", nBufferLength=0x105, lpBuffer=0x12d5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Push\\push_item.png", lpFilePart=0x0) returned 0x3e [0122.718] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Push\\push_item.png", nBufferLength=0x105, lpBuffer=0x12d590, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Push\\push_item.png", lpFilePart=0x0) returned 0x3e [0122.718] SetErrorMode (uMode=0x1) returned 0x0 [0122.718] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Push\\push_item.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\push\\push_item.png"), fInfoLevelId=0x0, lpFileInformation=0x12d810 | out: lpFileInformation=0x12d810*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f38881e, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f38881e, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ee4ccd1, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xb70)) returned 1 [0122.718] SetErrorMode (uMode=0x0) returned 0x1 [0122.718] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Push\\push_item.png", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Push\\push_item.png", lpFilePart=0x0) returned 0x3e [0122.719] SetErrorMode (uMode=0x1) returned 0x0 [0122.719] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Push\\push_item.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\push\\push_item.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2e8 [0122.719] SetErrorMode (uMode=0x0) returned 0x1 [0122.719] GetFileType (hFile=0x2e8) returned 0x1 [0122.719] GetFileSize (in: hFile=0x2e8, lpFileSizeHigh=0x12d8c8 | out: lpFileSizeHigh=0x12d8c8*=0x0) returned 0xb70 [0122.719] ReadFile (in: hFile=0x2e8, lpBuffer=0x280b670, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12d7a8, lpOverlapped=0x0 | out: lpBuffer=0x280b670*, lpNumberOfBytesRead=0x12d7a8*=0xb70, lpOverlapped=0x0) returned 1 [0122.744] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Push\\push_item.png", nBufferLength=0x105, lpBuffer=0x12d270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Push\\push_item.png", lpFilePart=0x0) returned 0x3e [0122.744] SetErrorMode (uMode=0x1) returned 0x0 [0122.744] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Push\\push_item.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\push\\push_item.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0122.745] SetErrorMode (uMode=0x0) returned 0x1 [0122.745] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Push\\push_title.png", nBufferLength=0x105, lpBuffer=0x12d5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Push\\push_title.png", lpFilePart=0x0) returned 0x3f [0122.745] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Push\\push_title.png", nBufferLength=0x105, lpBuffer=0x12d590, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Push\\push_title.png", lpFilePart=0x0) returned 0x3f [0122.745] SetErrorMode (uMode=0x1) returned 0x0 [0122.746] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Push\\push_title.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\push\\push_title.png"), fInfoLevelId=0x0, lpFileInformation=0x12d810 | out: lpFileInformation=0x12d810*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f3ae97b, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f3ae97b, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ee4ccd1, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xbb8)) returned 1 [0122.746] SetErrorMode (uMode=0x0) returned 0x1 [0122.746] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Push\\push_title.png", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Push\\push_title.png", lpFilePart=0x0) returned 0x3f [0122.746] SetErrorMode (uMode=0x1) returned 0x0 [0122.746] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Push\\push_title.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\push\\push_title.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2e8 [0122.747] SetErrorMode (uMode=0x0) returned 0x1 [0122.747] GetFileType (hFile=0x2e8) returned 0x1 [0122.747] GetFileSize (in: hFile=0x2e8, lpFileSizeHigh=0x12d8c8 | out: lpFileSizeHigh=0x12d8c8*=0x0) returned 0xbb8 [0122.747] ReadFile (in: hFile=0x2e8, lpBuffer=0x26ff148, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12d7a8, lpOverlapped=0x0 | out: lpBuffer=0x26ff148*, lpNumberOfBytesRead=0x12d7a8*=0xbb8, lpOverlapped=0x0) returned 1 [0122.767] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Push\\push_title.png", nBufferLength=0x105, lpBuffer=0x12d270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Push\\push_title.png", lpFilePart=0x0) returned 0x3f [0122.767] SetErrorMode (uMode=0x1) returned 0x0 [0122.768] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Push\\push_title.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\push\\push_title.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0122.769] SetErrorMode (uMode=0x0) returned 0x1 [0122.769] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Push\\Decrypt Instructions.txt", nBufferLength=0x105, lpBuffer=0x12d240, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Push\\Decrypt Instructions.txt", lpFilePart=0x0) returned 0x49 [0122.769] SetErrorMode (uMode=0x1) returned 0x0 [0122.769] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Push\\Decrypt Instructions.txt" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\push\\decrypt instructions.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x2e8 [0122.770] SetErrorMode (uMode=0x0) returned 0x1 [0122.770] GetFileType (hFile=0x2e8) returned 0x1 [0122.770] WriteFile (in: hFile=0x2e8, lpBuffer=0x27e8020*, nNumberOfBytesToWrite=0x773, lpNumberOfBytesWritten=0x12d7a8, lpOverlapped=0x0 | out: lpBuffer=0x27e8020*, lpNumberOfBytesWritten=0x12d7a8*=0x773, lpOverlapped=0x0) returned 1 [0122.771] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Push", nBufferLength=0x105, lpBuffer=0x12d430, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Push", lpFilePart=0x0) returned 0x30 [0122.771] SetErrorMode (uMode=0x1) returned 0x0 [0122.772] FindFirstFileW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Push\\*", lpFindFileData=0x12d5d0 | out: lpFindFileData=0x12d5d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa11287e6, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x693ca650, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x693ca650, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x26bc80 [0122.772] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa11287e6, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x693ca650, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x693ca650, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0122.772] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f316407, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f316407, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ee26b73, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x11da, dwReserved0=0x0, dwReserved1=0x0, cFileName="1047x576black.png", cAlternateFileName="")) returned 1 [0122.772] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f316407, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f316407, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ee26b73, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x11da, dwReserved0=0x0, dwReserved1=0x0, cFileName="1047_576black.png", cAlternateFileName="")) returned 1 [0122.772] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x693ca650, ftCreationTime.dwHighDateTime=0x1d5e786, ftLastAccessTime.dwLowDateTime=0x693ca650, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x693ca650, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x773, dwReserved0=0x0, dwReserved1=0x0, cFileName="Decrypt Instructions.txt", cAlternateFileName="DECRYP~1.TXT")) returned 1 [0122.772] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f3626c1, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f3626c1, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ee26b73, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationLeft_ButtonGraphic.png", cAlternateFileName="")) returned 1 [0122.772] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f3626c1, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f3626c1, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ee26b73, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc3a, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationLeft_SelectionSubpicture.png", cAlternateFileName="")) returned 1 [0122.772] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f38881e, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f38881e, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ee26b73, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13a1, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationRight_ButtonGraphic.png", cAlternateFileName="")) returned 1 [0122.772] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f38881e, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f38881e, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ee26b73, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc2e, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationRight_SelectionSubpicture.png", cAlternateFileName="")) returned 1 [0122.772] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f33c564, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f33c564, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ee26b73, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x135b, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationUp_ButtonGraphic.png", cAlternateFileName="")) returned 1 [0122.773] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f33c564, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f33c564, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ee26b73, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc09, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationUp_SelectionSubpicture.png", cAlternateFileName="")) returned 1 [0122.773] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f2f02aa, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f2f02aa, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ee4ccd1, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x5e02, dwReserved0=0x0, dwReserved1=0x0, cFileName="push.png", cAlternateFileName="")) returned 1 [0122.773] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f3ae97b, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f3ae97b, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ee4ccd1, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xb92, dwReserved0=0x0, dwReserved1=0x0, cFileName="pushplaysubpicture.png", cAlternateFileName="")) returned 1 [0122.773] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f38881e, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f38881e, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ee4ccd1, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xb70, dwReserved0=0x0, dwReserved1=0x0, cFileName="push_item.png", cAlternateFileName="")) returned 1 [0122.773] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f3ae97b, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f3ae97b, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ee4ccd1, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xbb8, dwReserved0=0x0, dwReserved1=0x0, cFileName="push_title.png", cAlternateFileName="")) returned 1 [0122.773] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f3ae97b, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f3ae97b, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ee4ccd1, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xbb8, dwReserved0=0x0, dwReserved1=0x0, cFileName="push_title.png", cAlternateFileName="")) returned 0 [0122.773] FindClose (in: hFindFile=0x26bc80 | out: hFindFile=0x26bc80) returned 1 [0122.773] SetErrorMode (uMode=0x0) returned 0x1 [0122.773] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Rectangles", nBufferLength=0x105, lpBuffer=0x12d390, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Rectangles", lpFilePart=0x0) returned 0x36 [0122.773] SetErrorMode (uMode=0x1) returned 0x0 [0122.774] FindFirstFileW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Rectangles\\*", lpFindFileData=0x12d530 | out: lpFindFileData=0x12d530*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9f38039d, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa89306e, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9f3f2aea, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x26bc80 [0122.776] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9f38039d, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa89306e, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9f3f2aea, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0122.776] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f955d49, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f955d49, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4eebf0eb, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x11da, dwReserved0=0x0, dwReserved1=0x0, cFileName="1047x576black.png", cAlternateFileName="")) returned 1 [0122.776] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f9c8160, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f9c8160, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4eebf0eb, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x1928, dwReserved0=0x0, dwReserved1=0x0, cFileName="1047x576_91n92.png", cAlternateFileName="")) returned 1 [0122.776] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f9ee2bd, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f9ee2bd, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4eee5249, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xb05, dwReserved0=0x0, dwReserved1=0x0, cFileName="15x15dot.png", cAlternateFileName="")) returned 1 [0122.776] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f9a2003, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f9a2003, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ef0b3a7, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x15f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="720x480icongraphic.png", cAlternateFileName="")) returned 1 [0122.776] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fa86831, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6fa86831, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ef0b3a7, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationLeft_ButtonGraphic.png", cAlternateFileName="")) returned 1 [0122.776] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fa3a577, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6fa3a577, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ef0b3a7, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc3a, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationLeft_SelectionSubpicture.png", cAlternateFileName="")) returned 1 [0122.776] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fa606d4, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6fa606d4, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ef0b3a7, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13a1, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationRight_ButtonGraphic.png", cAlternateFileName="")) returned 1 [0122.776] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fa1441a, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6fa1441a, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ef0b3a7, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc2e, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationRight_SelectionSubpicture.png", cAlternateFileName="")) returned 1 [0122.776] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f9ee2bd, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f9ee2bd, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ef0b3a7, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x135b, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationUp_ButtonGraphic.png", cAlternateFileName="")) returned 1 [0122.777] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fa3a577, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6fa3a577, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ef0b3a7, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc09, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationUp_SelectionSubpicture.png", cAlternateFileName="")) returned 1 [0122.777] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f92fbec, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f92fbec, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ef31505, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x6114, dwReserved0=0x0, dwReserved1=0x0, cFileName="reflect.png", cAlternateFileName="")) returned 1 [0122.777] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f97bea6, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f97bea6, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ef31505, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x2fcdc, dwReserved0=0x0, dwReserved1=0x0, cFileName="vistabg.png", cAlternateFileName="")) returned 1 [0122.777] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f97bea6, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f97bea6, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ef31505, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x2fcdc, dwReserved0=0x0, dwReserved1=0x0, cFileName="vistabg.png", cAlternateFileName="")) returned 0 [0122.777] FindClose (in: hFindFile=0x26bc80 | out: hFindFile=0x26bc80) returned 1 [0122.778] SetErrorMode (uMode=0x0) returned 0x1 [0122.778] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Rectangles\\1047x576black.png", nBufferLength=0x105, lpBuffer=0x12d5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Rectangles\\1047x576black.png", lpFilePart=0x0) returned 0x48 [0122.778] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Rectangles\\1047x576black.png", nBufferLength=0x105, lpBuffer=0x12d590, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Rectangles\\1047x576black.png", lpFilePart=0x0) returned 0x48 [0122.779] SetErrorMode (uMode=0x1) returned 0x0 [0122.779] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Rectangles\\1047x576black.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\rectangles\\1047x576black.png"), fInfoLevelId=0x0, lpFileInformation=0x12d810 | out: lpFileInformation=0x12d810*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f955d49, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f955d49, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4eebf0eb, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x11da)) returned 1 [0122.781] SetErrorMode (uMode=0x0) returned 0x1 [0122.781] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Rectangles\\1047x576black.png", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Rectangles\\1047x576black.png", lpFilePart=0x0) returned 0x48 [0122.781] SetErrorMode (uMode=0x1) returned 0x0 [0122.781] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Rectangles\\1047x576black.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\rectangles\\1047x576black.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2e8 [0122.781] SetErrorMode (uMode=0x0) returned 0x1 [0122.781] GetFileType (hFile=0x2e8) returned 0x1 [0122.781] GetFileSize (in: hFile=0x2e8, lpFileSizeHigh=0x12d8c8 | out: lpFileSizeHigh=0x12d8c8*=0x0) returned 0x11da [0122.781] ReadFile (in: hFile=0x2e8, lpBuffer=0x27ec9d0, nNumberOfBytesToRead=0x11da, lpNumberOfBytesRead=0x12d7a8, lpOverlapped=0x0 | out: lpBuffer=0x27ec9d0*, lpNumberOfBytesRead=0x12d7a8*=0x11da, lpOverlapped=0x0) returned 1 [0122.802] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Rectangles\\1047x576black.png", nBufferLength=0x105, lpBuffer=0x12d270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Rectangles\\1047x576black.png", lpFilePart=0x0) returned 0x48 [0122.802] SetErrorMode (uMode=0x1) returned 0x0 [0122.802] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Rectangles\\1047x576black.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\rectangles\\1047x576black.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0122.803] SetErrorMode (uMode=0x0) returned 0x1 [0122.803] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Rectangles\\1047x576_91n92.png", nBufferLength=0x105, lpBuffer=0x12d5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Rectangles\\1047x576_91n92.png", lpFilePart=0x0) returned 0x49 [0122.804] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Rectangles\\1047x576_91n92.png", nBufferLength=0x105, lpBuffer=0x12d590, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Rectangles\\1047x576_91n92.png", lpFilePart=0x0) returned 0x49 [0122.804] SetErrorMode (uMode=0x1) returned 0x0 [0122.804] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Rectangles\\1047x576_91n92.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\rectangles\\1047x576_91n92.png"), fInfoLevelId=0x0, lpFileInformation=0x12d810 | out: lpFileInformation=0x12d810*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f9c8160, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f9c8160, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4eebf0eb, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x1928)) returned 1 [0122.804] SetErrorMode (uMode=0x0) returned 0x1 [0122.804] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Rectangles\\1047x576_91n92.png", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Rectangles\\1047x576_91n92.png", lpFilePart=0x0) returned 0x49 [0122.804] SetErrorMode (uMode=0x1) returned 0x0 [0122.804] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Rectangles\\1047x576_91n92.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\rectangles\\1047x576_91n92.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2e8 [0122.805] SetErrorMode (uMode=0x0) returned 0x1 [0122.805] GetFileType (hFile=0x2e8) returned 0x1 [0122.805] GetFileSize (in: hFile=0x2e8, lpFileSizeHigh=0x12d8c8 | out: lpFileSizeHigh=0x12d8c8*=0x0) returned 0x1928 [0122.805] ReadFile (in: hFile=0x2e8, lpBuffer=0x28d4888, nNumberOfBytesToRead=0x1928, lpNumberOfBytesRead=0x12d7a8, lpOverlapped=0x0 | out: lpBuffer=0x28d4888*, lpNumberOfBytesRead=0x12d7a8*=0x1928, lpOverlapped=0x0) returned 1 [0122.830] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Rectangles\\1047x576_91n92.png", nBufferLength=0x105, lpBuffer=0x12d270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Rectangles\\1047x576_91n92.png", lpFilePart=0x0) returned 0x49 [0122.830] SetErrorMode (uMode=0x1) returned 0x0 [0122.830] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Rectangles\\1047x576_91n92.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\rectangles\\1047x576_91n92.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0122.831] SetErrorMode (uMode=0x0) returned 0x1 [0122.832] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Rectangles\\15x15dot.png", nBufferLength=0x105, lpBuffer=0x12d5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Rectangles\\15x15dot.png", lpFilePart=0x0) returned 0x43 [0122.832] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Rectangles\\15x15dot.png", nBufferLength=0x105, lpBuffer=0x12d590, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Rectangles\\15x15dot.png", lpFilePart=0x0) returned 0x43 [0122.832] SetErrorMode (uMode=0x1) returned 0x0 [0122.832] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Rectangles\\15x15dot.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\rectangles\\15x15dot.png"), fInfoLevelId=0x0, lpFileInformation=0x12d810 | out: lpFileInformation=0x12d810*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f9ee2bd, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f9ee2bd, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4eee5249, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xb05)) returned 1 [0122.832] SetErrorMode (uMode=0x0) returned 0x1 [0122.832] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Rectangles\\15x15dot.png", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Rectangles\\15x15dot.png", lpFilePart=0x0) returned 0x43 [0122.832] SetErrorMode (uMode=0x1) returned 0x0 [0122.833] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Rectangles\\15x15dot.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\rectangles\\15x15dot.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2e8 [0122.833] SetErrorMode (uMode=0x0) returned 0x1 [0122.833] GetFileType (hFile=0x2e8) returned 0x1 [0122.833] GetFileSize (in: hFile=0x2e8, lpFileSizeHigh=0x12d8c8 | out: lpFileSizeHigh=0x12d8c8*=0x0) returned 0xb05 [0122.833] ReadFile (in: hFile=0x2e8, lpBuffer=0x27c4bc0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12d7a8, lpOverlapped=0x0 | out: lpBuffer=0x27c4bc0*, lpNumberOfBytesRead=0x12d7a8*=0xb05, lpOverlapped=0x0) returned 1 [0122.854] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Rectangles\\15x15dot.png", nBufferLength=0x105, lpBuffer=0x12d270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Rectangles\\15x15dot.png", lpFilePart=0x0) returned 0x43 [0122.854] SetErrorMode (uMode=0x1) returned 0x0 [0122.854] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Rectangles\\15x15dot.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\rectangles\\15x15dot.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0122.855] SetErrorMode (uMode=0x0) returned 0x1 [0122.855] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Rectangles\\720x480icongraphic.png", nBufferLength=0x105, lpBuffer=0x12d5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Rectangles\\720x480icongraphic.png", lpFilePart=0x0) returned 0x4d [0122.855] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Rectangles\\720x480icongraphic.png", nBufferLength=0x105, lpBuffer=0x12d590, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Rectangles\\720x480icongraphic.png", lpFilePart=0x0) returned 0x4d [0122.855] SetErrorMode (uMode=0x1) returned 0x0 [0122.856] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Rectangles\\720x480icongraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\rectangles\\720x480icongraphic.png"), fInfoLevelId=0x0, lpFileInformation=0x12d810 | out: lpFileInformation=0x12d810*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f9a2003, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f9a2003, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ef0b3a7, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x15f4)) returned 1 [0122.856] SetErrorMode (uMode=0x0) returned 0x1 [0122.856] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Rectangles\\720x480icongraphic.png", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Rectangles\\720x480icongraphic.png", lpFilePart=0x0) returned 0x4d [0122.856] SetErrorMode (uMode=0x1) returned 0x0 [0122.856] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Rectangles\\720x480icongraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\rectangles\\720x480icongraphic.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2e8 [0122.856] SetErrorMode (uMode=0x0) returned 0x1 [0122.856] GetFileType (hFile=0x2e8) returned 0x1 [0122.856] GetFileSize (in: hFile=0x2e8, lpFileSizeHigh=0x12d8c8 | out: lpFileSizeHigh=0x12d8c8*=0x0) returned 0x15f4 [0122.857] ReadFile (in: hFile=0x2e8, lpBuffer=0x28aa990, nNumberOfBytesToRead=0x15f4, lpNumberOfBytesRead=0x12d7a8, lpOverlapped=0x0 | out: lpBuffer=0x28aa990*, lpNumberOfBytesRead=0x12d7a8*=0x15f4, lpOverlapped=0x0) returned 1 [0122.881] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Rectangles\\720x480icongraphic.png", nBufferLength=0x105, lpBuffer=0x12d270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Rectangles\\720x480icongraphic.png", lpFilePart=0x0) returned 0x4d [0122.881] SetErrorMode (uMode=0x1) returned 0x0 [0122.882] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Rectangles\\720x480icongraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\rectangles\\720x480icongraphic.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0122.882] SetErrorMode (uMode=0x0) returned 0x1 [0122.883] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Rectangles\\NavigationLeft_ButtonGraphic.png", nBufferLength=0x105, lpBuffer=0x12d5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Rectangles\\NavigationLeft_ButtonGraphic.png", lpFilePart=0x0) returned 0x57 [0122.883] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Rectangles\\NavigationLeft_ButtonGraphic.png", nBufferLength=0x105, lpBuffer=0x12d590, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Rectangles\\NavigationLeft_ButtonGraphic.png", lpFilePart=0x0) returned 0x57 [0122.883] SetErrorMode (uMode=0x1) returned 0x0 [0122.883] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Rectangles\\NavigationLeft_ButtonGraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\rectangles\\navigationleft_buttongraphic.png"), fInfoLevelId=0x0, lpFileInformation=0x12d810 | out: lpFileInformation=0x12d810*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fa86831, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6fa86831, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ef0b3a7, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13e0)) returned 1 [0122.883] SetErrorMode (uMode=0x0) returned 0x1 [0122.884] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Rectangles\\NavigationLeft_ButtonGraphic.png", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Rectangles\\NavigationLeft_ButtonGraphic.png", lpFilePart=0x0) returned 0x57 [0122.884] SetErrorMode (uMode=0x1) returned 0x0 [0122.884] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Rectangles\\NavigationLeft_ButtonGraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\rectangles\\navigationleft_buttongraphic.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2e8 [0122.884] SetErrorMode (uMode=0x0) returned 0x1 [0122.884] GetFileType (hFile=0x2e8) returned 0x1 [0122.884] GetFileSize (in: hFile=0x2e8, lpFileSizeHigh=0x12d8c8 | out: lpFileSizeHigh=0x12d8c8*=0x0) returned 0x13e0 [0122.884] ReadFile (in: hFile=0x2e8, lpBuffer=0x2793d28, nNumberOfBytesToRead=0x13e0, lpNumberOfBytesRead=0x12d7a8, lpOverlapped=0x0 | out: lpBuffer=0x2793d28*, lpNumberOfBytesRead=0x12d7a8*=0x13e0, lpOverlapped=0x0) returned 1 [0122.916] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Rectangles\\NavigationLeft_ButtonGraphic.png", nBufferLength=0x105, lpBuffer=0x12d270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Rectangles\\NavigationLeft_ButtonGraphic.png", lpFilePart=0x0) returned 0x57 [0122.916] SetErrorMode (uMode=0x1) returned 0x0 [0122.916] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Rectangles\\NavigationLeft_ButtonGraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\rectangles\\navigationleft_buttongraphic.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0122.917] SetErrorMode (uMode=0x0) returned 0x1 [0122.917] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Rectangles\\NavigationLeft_SelectionSubpicture.png", nBufferLength=0x105, lpBuffer=0x12d5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Rectangles\\NavigationLeft_SelectionSubpicture.png", lpFilePart=0x0) returned 0x5d [0122.918] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Rectangles\\NavigationLeft_SelectionSubpicture.png", nBufferLength=0x105, lpBuffer=0x12d590, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Rectangles\\NavigationLeft_SelectionSubpicture.png", lpFilePart=0x0) returned 0x5d [0122.918] SetErrorMode (uMode=0x1) returned 0x0 [0122.918] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Rectangles\\NavigationLeft_SelectionSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\rectangles\\navigationleft_selectionsubpicture.png"), fInfoLevelId=0x0, lpFileInformation=0x12d810 | out: lpFileInformation=0x12d810*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fa3a577, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6fa3a577, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ef0b3a7, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc3a)) returned 1 [0122.918] SetErrorMode (uMode=0x0) returned 0x1 [0122.918] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Rectangles\\NavigationLeft_SelectionSubpicture.png", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Rectangles\\NavigationLeft_SelectionSubpicture.png", lpFilePart=0x0) returned 0x5d [0122.918] SetErrorMode (uMode=0x1) returned 0x0 [0122.919] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Rectangles\\NavigationLeft_SelectionSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\rectangles\\navigationleft_selectionsubpicture.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2e8 [0122.919] SetErrorMode (uMode=0x0) returned 0x1 [0122.919] GetFileType (hFile=0x2e8) returned 0x1 [0122.919] GetFileSize (in: hFile=0x2e8, lpFileSizeHigh=0x12d8c8 | out: lpFileSizeHigh=0x12d8c8*=0x0) returned 0xc3a [0122.919] ReadFile (in: hFile=0x2e8, lpBuffer=0x287d8f8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12d7a8, lpOverlapped=0x0 | out: lpBuffer=0x287d8f8*, lpNumberOfBytesRead=0x12d7a8*=0xc3a, lpOverlapped=0x0) returned 1 [0122.944] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Rectangles\\NavigationLeft_SelectionSubpicture.png", nBufferLength=0x105, lpBuffer=0x12d270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Rectangles\\NavigationLeft_SelectionSubpicture.png", lpFilePart=0x0) returned 0x5d [0122.944] SetErrorMode (uMode=0x1) returned 0x0 [0122.944] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Rectangles\\NavigationLeft_SelectionSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\rectangles\\navigationleft_selectionsubpicture.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0122.945] SetErrorMode (uMode=0x0) returned 0x1 [0122.946] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Rectangles\\NavigationRight_ButtonGraphic.png", nBufferLength=0x105, lpBuffer=0x12d5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Rectangles\\NavigationRight_ButtonGraphic.png", lpFilePart=0x0) returned 0x58 [0122.946] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Rectangles\\NavigationRight_ButtonGraphic.png", nBufferLength=0x105, lpBuffer=0x12d590, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Rectangles\\NavigationRight_ButtonGraphic.png", lpFilePart=0x0) returned 0x58 [0122.946] SetErrorMode (uMode=0x1) returned 0x0 [0122.946] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Rectangles\\NavigationRight_ButtonGraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\rectangles\\navigationright_buttongraphic.png"), fInfoLevelId=0x0, lpFileInformation=0x12d810 | out: lpFileInformation=0x12d810*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fa606d4, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6fa606d4, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ef0b3a7, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13a1)) returned 1 [0122.946] SetErrorMode (uMode=0x0) returned 0x1 [0122.946] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Rectangles\\NavigationRight_ButtonGraphic.png", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Rectangles\\NavigationRight_ButtonGraphic.png", lpFilePart=0x0) returned 0x58 [0122.946] SetErrorMode (uMode=0x1) returned 0x0 [0122.947] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Rectangles\\NavigationRight_ButtonGraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\rectangles\\navigationright_buttongraphic.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2e8 [0122.947] SetErrorMode (uMode=0x0) returned 0x1 [0122.947] GetFileType (hFile=0x2e8) returned 0x1 [0122.947] GetFileSize (in: hFile=0x2e8, lpFileSizeHigh=0x12d8c8 | out: lpFileSizeHigh=0x12d8c8*=0x0) returned 0x13a1 [0122.947] ReadFile (in: hFile=0x2e8, lpBuffer=0x27631e0, nNumberOfBytesToRead=0x13a1, lpNumberOfBytesRead=0x12d7a8, lpOverlapped=0x0 | out: lpBuffer=0x27631e0*, lpNumberOfBytesRead=0x12d7a8*=0x13a1, lpOverlapped=0x0) returned 1 [0122.971] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Rectangles\\NavigationRight_ButtonGraphic.png", nBufferLength=0x105, lpBuffer=0x12d270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Rectangles\\NavigationRight_ButtonGraphic.png", lpFilePart=0x0) returned 0x58 [0122.971] SetErrorMode (uMode=0x1) returned 0x0 [0122.972] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Rectangles\\NavigationRight_ButtonGraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\rectangles\\navigationright_buttongraphic.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0122.972] SetErrorMode (uMode=0x0) returned 0x1 [0122.973] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Rectangles\\NavigationRight_SelectionSubpicture.png", nBufferLength=0x105, lpBuffer=0x12d5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Rectangles\\NavigationRight_SelectionSubpicture.png", lpFilePart=0x0) returned 0x5e [0122.973] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Rectangles\\NavigationRight_SelectionSubpicture.png", nBufferLength=0x105, lpBuffer=0x12d590, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Rectangles\\NavigationRight_SelectionSubpicture.png", lpFilePart=0x0) returned 0x5e [0122.973] SetErrorMode (uMode=0x1) returned 0x0 [0122.973] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Rectangles\\NavigationRight_SelectionSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\rectangles\\navigationright_selectionsubpicture.png"), fInfoLevelId=0x0, lpFileInformation=0x12d810 | out: lpFileInformation=0x12d810*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fa1441a, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6fa1441a, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ef0b3a7, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc2e)) returned 1 [0122.973] SetErrorMode (uMode=0x0) returned 0x1 [0122.974] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Rectangles\\NavigationRight_SelectionSubpicture.png", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Rectangles\\NavigationRight_SelectionSubpicture.png", lpFilePart=0x0) returned 0x5e [0122.974] SetErrorMode (uMode=0x1) returned 0x0 [0122.974] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Rectangles\\NavigationRight_SelectionSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\rectangles\\navigationright_selectionsubpicture.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2e8 [0122.974] SetErrorMode (uMode=0x0) returned 0x1 [0122.974] GetFileType (hFile=0x2e8) returned 0x1 [0122.974] GetFileSize (in: hFile=0x2e8, lpFileSizeHigh=0x12d8c8 | out: lpFileSizeHigh=0x12d8c8*=0x0) returned 0xc2e [0122.974] ReadFile (in: hFile=0x2e8, lpBuffer=0x284cc40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12d7a8, lpOverlapped=0x0 | out: lpBuffer=0x284cc40*, lpNumberOfBytesRead=0x12d7a8*=0xc2e, lpOverlapped=0x0) returned 1 [0123.000] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Rectangles\\NavigationRight_SelectionSubpicture.png", nBufferLength=0x105, lpBuffer=0x12d270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Rectangles\\NavigationRight_SelectionSubpicture.png", lpFilePart=0x0) returned 0x5e [0123.000] SetErrorMode (uMode=0x1) returned 0x0 [0123.000] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Rectangles\\NavigationRight_SelectionSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\rectangles\\navigationright_selectionsubpicture.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0123.001] SetErrorMode (uMode=0x0) returned 0x1 [0123.002] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Rectangles\\NavigationUp_ButtonGraphic.png", nBufferLength=0x105, lpBuffer=0x12d5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Rectangles\\NavigationUp_ButtonGraphic.png", lpFilePart=0x0) returned 0x55 [0123.002] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Rectangles\\NavigationUp_ButtonGraphic.png", nBufferLength=0x105, lpBuffer=0x12d590, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Rectangles\\NavigationUp_ButtonGraphic.png", lpFilePart=0x0) returned 0x55 [0123.002] SetErrorMode (uMode=0x1) returned 0x0 [0123.002] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Rectangles\\NavigationUp_ButtonGraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\rectangles\\navigationup_buttongraphic.png"), fInfoLevelId=0x0, lpFileInformation=0x12d810 | out: lpFileInformation=0x12d810*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f9ee2bd, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f9ee2bd, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ef0b3a7, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x135b)) returned 1 [0123.002] SetErrorMode (uMode=0x0) returned 0x1 [0123.002] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Rectangles\\NavigationUp_ButtonGraphic.png", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Rectangles\\NavigationUp_ButtonGraphic.png", lpFilePart=0x0) returned 0x55 [0123.002] SetErrorMode (uMode=0x1) returned 0x0 [0123.003] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Rectangles\\NavigationUp_ButtonGraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\rectangles\\navigationup_buttongraphic.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2e8 [0123.003] SetErrorMode (uMode=0x0) returned 0x1 [0123.003] GetFileType (hFile=0x2e8) returned 0x1 [0123.003] GetFileSize (in: hFile=0x2e8, lpFileSizeHigh=0x12d8c8 | out: lpFileSizeHigh=0x12d8c8*=0x0) returned 0x135b [0123.003] ReadFile (in: hFile=0x2e8, lpBuffer=0x2732e20, nNumberOfBytesToRead=0x135b, lpNumberOfBytesRead=0x12d7a8, lpOverlapped=0x0 | out: lpBuffer=0x2732e20*, lpNumberOfBytesRead=0x12d7a8*=0x135b, lpOverlapped=0x0) returned 1 [0123.032] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Rectangles\\NavigationUp_ButtonGraphic.png", nBufferLength=0x105, lpBuffer=0x12d270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Rectangles\\NavigationUp_ButtonGraphic.png", lpFilePart=0x0) returned 0x55 [0123.032] SetErrorMode (uMode=0x1) returned 0x0 [0123.032] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Rectangles\\NavigationUp_ButtonGraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\rectangles\\navigationup_buttongraphic.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0123.034] SetErrorMode (uMode=0x0) returned 0x1 [0123.035] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Rectangles\\NavigationUp_SelectionSubpicture.png", nBufferLength=0x105, lpBuffer=0x12d5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Rectangles\\NavigationUp_SelectionSubpicture.png", lpFilePart=0x0) returned 0x5b [0123.035] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Rectangles\\NavigationUp_SelectionSubpicture.png", nBufferLength=0x105, lpBuffer=0x12d590, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Rectangles\\NavigationUp_SelectionSubpicture.png", lpFilePart=0x0) returned 0x5b [0123.035] SetErrorMode (uMode=0x1) returned 0x0 [0123.035] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Rectangles\\NavigationUp_SelectionSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\rectangles\\navigationup_selectionsubpicture.png"), fInfoLevelId=0x0, lpFileInformation=0x12d810 | out: lpFileInformation=0x12d810*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fa3a577, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6fa3a577, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ef0b3a7, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc09)) returned 1 [0123.035] SetErrorMode (uMode=0x0) returned 0x1 [0123.036] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Rectangles\\NavigationUp_SelectionSubpicture.png", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Rectangles\\NavigationUp_SelectionSubpicture.png", lpFilePart=0x0) returned 0x5b [0123.036] SetErrorMode (uMode=0x1) returned 0x0 [0123.036] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Rectangles\\NavigationUp_SelectionSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\rectangles\\navigationup_selectionsubpicture.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2e8 [0123.036] SetErrorMode (uMode=0x0) returned 0x1 [0123.036] GetFileType (hFile=0x2e8) returned 0x1 [0123.036] GetFileSize (in: hFile=0x2e8, lpFileSizeHigh=0x12d8c8 | out: lpFileSizeHigh=0x12d8c8*=0x0) returned 0xc09 [0123.036] ReadFile (in: hFile=0x2e8, lpBuffer=0x281c640, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12d7a8, lpOverlapped=0x0 | out: lpBuffer=0x281c640*, lpNumberOfBytesRead=0x12d7a8*=0xc09, lpOverlapped=0x0) returned 1 [0123.059] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Rectangles\\NavigationUp_SelectionSubpicture.png", nBufferLength=0x105, lpBuffer=0x12d270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Rectangles\\NavigationUp_SelectionSubpicture.png", lpFilePart=0x0) returned 0x5b [0123.059] SetErrorMode (uMode=0x1) returned 0x0 [0123.060] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Rectangles\\NavigationUp_SelectionSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\rectangles\\navigationup_selectionsubpicture.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0123.060] SetErrorMode (uMode=0x0) returned 0x1 [0123.061] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Rectangles\\reflect.png", nBufferLength=0x105, lpBuffer=0x12d5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Rectangles\\reflect.png", lpFilePart=0x0) returned 0x42 [0123.061] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Rectangles\\reflect.png", nBufferLength=0x105, lpBuffer=0x12d590, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Rectangles\\reflect.png", lpFilePart=0x0) returned 0x42 [0123.061] SetErrorMode (uMode=0x1) returned 0x0 [0123.061] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Rectangles\\reflect.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\rectangles\\reflect.png"), fInfoLevelId=0x0, lpFileInformation=0x12d810 | out: lpFileInformation=0x12d810*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f92fbec, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f92fbec, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ef31505, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x6114)) returned 1 [0123.062] SetErrorMode (uMode=0x0) returned 0x1 [0123.062] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Rectangles\\reflect.png", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Rectangles\\reflect.png", lpFilePart=0x0) returned 0x42 [0123.062] SetErrorMode (uMode=0x1) returned 0x0 [0123.062] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Rectangles\\reflect.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\rectangles\\reflect.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2e8 [0123.063] SetErrorMode (uMode=0x0) returned 0x1 [0123.063] GetFileType (hFile=0x2e8) returned 0x1 [0123.063] GetFileSize (in: hFile=0x2e8, lpFileSizeHigh=0x12d8c8 | out: lpFileSizeHigh=0x12d8c8*=0x0) returned 0x6114 [0123.063] ReadFile (in: hFile=0x2e8, lpBuffer=0x2702620, nNumberOfBytesToRead=0x6114, lpNumberOfBytesRead=0x12d7a8, lpOverlapped=0x0 | out: lpBuffer=0x2702620*, lpNumberOfBytesRead=0x12d7a8*=0x6114, lpOverlapped=0x0) returned 1 [0123.085] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Rectangles\\reflect.png", nBufferLength=0x105, lpBuffer=0x12d270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Rectangles\\reflect.png", lpFilePart=0x0) returned 0x42 [0123.085] SetErrorMode (uMode=0x1) returned 0x0 [0123.086] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Rectangles\\reflect.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\rectangles\\reflect.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0123.086] SetErrorMode (uMode=0x0) returned 0x1 [0123.087] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Rectangles\\vistabg.png", nBufferLength=0x105, lpBuffer=0x12d5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Rectangles\\vistabg.png", lpFilePart=0x0) returned 0x42 [0123.087] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Rectangles\\vistabg.png", nBufferLength=0x105, lpBuffer=0x12d590, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Rectangles\\vistabg.png", lpFilePart=0x0) returned 0x42 [0123.087] SetErrorMode (uMode=0x1) returned 0x0 [0123.087] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Rectangles\\vistabg.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\rectangles\\vistabg.png"), fInfoLevelId=0x0, lpFileInformation=0x12d810 | out: lpFileInformation=0x12d810*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f97bea6, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f97bea6, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ef31505, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x2fcdc)) returned 1 [0123.087] SetErrorMode (uMode=0x0) returned 0x1 [0123.087] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Rectangles\\vistabg.png", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Rectangles\\vistabg.png", lpFilePart=0x0) returned 0x42 [0123.088] SetErrorMode (uMode=0x1) returned 0x0 [0123.088] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Rectangles\\vistabg.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\rectangles\\vistabg.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2e8 [0123.088] SetErrorMode (uMode=0x0) returned 0x1 [0123.088] GetFileType (hFile=0x2e8) returned 0x1 [0123.088] GetFileSize (in: hFile=0x2e8, lpFileSizeHigh=0x12d8c8 | out: lpFileSizeHigh=0x12d8c8*=0x0) returned 0x2fcdc [0123.089] ReadFile (in: hFile=0x2e8, lpBuffer=0x12772460, nNumberOfBytesToRead=0x2fcdc, lpNumberOfBytesRead=0x12d7a8, lpOverlapped=0x0 | out: lpBuffer=0x12772460*, lpNumberOfBytesRead=0x12d7a8*=0x2fcdc, lpOverlapped=0x0) returned 1 [0123.118] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Rectangles\\vistabg.png", nBufferLength=0x105, lpBuffer=0x12d270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Rectangles\\vistabg.png", lpFilePart=0x0) returned 0x42 [0123.118] SetErrorMode (uMode=0x1) returned 0x0 [0123.118] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Rectangles\\vistabg.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\rectangles\\vistabg.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0123.123] SetErrorMode (uMode=0x0) returned 0x1 [0123.123] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Rectangles\\Decrypt Instructions.txt", nBufferLength=0x105, lpBuffer=0x12d240, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Rectangles\\Decrypt Instructions.txt", lpFilePart=0x0) returned 0x4f [0123.123] SetErrorMode (uMode=0x1) returned 0x0 [0123.123] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Rectangles\\Decrypt Instructions.txt" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\rectangles\\decrypt instructions.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x2e8 [0123.124] SetErrorMode (uMode=0x0) returned 0x1 [0123.124] GetFileType (hFile=0x2e8) returned 0x1 [0123.124] WriteFile (in: hFile=0x2e8, lpBuffer=0x26eb4b8*, nNumberOfBytesToWrite=0x773, lpNumberOfBytesWritten=0x12d7a8, lpOverlapped=0x0 | out: lpBuffer=0x26eb4b8*, lpNumberOfBytesWritten=0x12d7a8*=0x773, lpOverlapped=0x0) returned 1 [0123.126] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Rectangles", nBufferLength=0x105, lpBuffer=0x12d430, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Rectangles", lpFilePart=0x0) returned 0x36 [0123.127] SetErrorMode (uMode=0x1) returned 0x0 [0123.127] FindFirstFileW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Rectangles\\*", lpFindFileData=0x12d5d0 | out: lpFindFileData=0x12d5d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9f38039d, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x69710490, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x69710490, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x26bc80 [0123.127] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9f38039d, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x69710490, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x69710490, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0123.127] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f955d49, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f955d49, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4eebf0eb, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x11da, dwReserved0=0x0, dwReserved1=0x0, cFileName="1047x576black.png", cAlternateFileName="")) returned 1 [0123.127] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f9c8160, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f9c8160, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4eebf0eb, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x1928, dwReserved0=0x0, dwReserved1=0x0, cFileName="1047x576_91n92.png", cAlternateFileName="")) returned 1 [0123.127] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f9ee2bd, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f9ee2bd, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4eee5249, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xb05, dwReserved0=0x0, dwReserved1=0x0, cFileName="15x15dot.png", cAlternateFileName="")) returned 1 [0123.127] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f9a2003, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f9a2003, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ef0b3a7, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x15f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="720x480icongraphic.png", cAlternateFileName="")) returned 1 [0123.128] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x69710490, ftCreationTime.dwHighDateTime=0x1d5e786, ftLastAccessTime.dwLowDateTime=0x69710490, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x697365f0, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x773, dwReserved0=0x0, dwReserved1=0x0, cFileName="Decrypt Instructions.txt", cAlternateFileName="DECRYP~1.TXT")) returned 1 [0123.128] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fa86831, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6fa86831, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ef0b3a7, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationLeft_ButtonGraphic.png", cAlternateFileName="")) returned 1 [0123.128] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fa3a577, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6fa3a577, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ef0b3a7, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc3a, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationLeft_SelectionSubpicture.png", cAlternateFileName="")) returned 1 [0123.128] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fa606d4, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6fa606d4, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ef0b3a7, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13a1, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationRight_ButtonGraphic.png", cAlternateFileName="")) returned 1 [0123.128] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fa1441a, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6fa1441a, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ef0b3a7, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc2e, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationRight_SelectionSubpicture.png", cAlternateFileName="")) returned 1 [0123.128] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f9ee2bd, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f9ee2bd, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ef0b3a7, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x135b, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationUp_ButtonGraphic.png", cAlternateFileName="")) returned 1 [0123.128] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fa3a577, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6fa3a577, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ef0b3a7, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc09, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationUp_SelectionSubpicture.png", cAlternateFileName="")) returned 1 [0123.128] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f92fbec, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f92fbec, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ef31505, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x6114, dwReserved0=0x0, dwReserved1=0x0, cFileName="reflect.png", cAlternateFileName="")) returned 1 [0123.128] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f97bea6, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f97bea6, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ef31505, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x2fcdc, dwReserved0=0x0, dwReserved1=0x0, cFileName="vistabg.png", cAlternateFileName="")) returned 1 [0123.128] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f97bea6, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f97bea6, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ef31505, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x2fcdc, dwReserved0=0x0, dwReserved1=0x0, cFileName="vistabg.png", cAlternateFileName="")) returned 0 [0123.128] FindClose (in: hFindFile=0x26bc80 | out: hFindFile=0x26bc80) returned 1 [0123.129] SetErrorMode (uMode=0x0) returned 0x1 [0123.129] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\ResizingPanels", nBufferLength=0x105, lpBuffer=0x12d390, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\ResizingPanels", lpFilePart=0x0) returned 0x3a [0123.129] SetErrorMode (uMode=0x1) returned 0x0 [0123.129] FindFirstFileW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\ResizingPanels\\*", lpFindFileData=0x12d530 | out: lpFindFileData=0x12d530*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa119af33, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa86cdff, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa12338ef, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x26bc80 [0123.132] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa119af33, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa86cdff, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa12338ef, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0123.132] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7091adcb, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x7091adcb, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4efa391f, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x11da, dwReserved0=0x0, dwReserved1=0x0, cFileName="1047x576black.png", cAlternateFileName="")) returned 1 [0123.132] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70a4b8b3, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70a4b8b3, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4efa391f, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xb04, dwReserved0=0x0, dwReserved1=0x0, cFileName="203x8subpicture.png", cAlternateFileName="")) returned 1 [0123.132] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7079e029, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x7079e029, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4efa391f, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x5aaf, dwReserved0=0x0, dwReserved1=0x0, cFileName="bandwidth.png", cAlternateFileName="")) returned 1 [0123.132] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70a25756, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70a25756, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4efa391f, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x191f, dwReserved0=0x0, dwReserved1=0x0, cFileName="blackbars80.png", cAlternateFileName="")) returned 1 [0123.132] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x708ceb11, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x708ceb11, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4efa391f, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationLeft_ButtonGraphic.png", cAlternateFileName="")) returned 1 [0123.132] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70810440, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70810440, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4efa391f, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc3a, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationLeft_SelectionSubpicture.png", cAlternateFileName="")) returned 1 [0123.132] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7083659d, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x7083659d, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4efa391f, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13a1, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationRight_ButtonGraphic.png", cAlternateFileName="")) returned 1 [0123.132] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x707c4186, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x707c4186, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4efa391f, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc2e, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationRight_SelectionSubpicture.png", cAlternateFileName="")) returned 1 [0123.132] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7079e029, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x7079e029, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4efa391f, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x135b, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationUp_ButtonGraphic.png", cAlternateFileName="")) returned 1 [0123.132] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x707ea2e3, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x707ea2e3, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4efc9a7d, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc09, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationUp_SelectionSubpicture.png", cAlternateFileName="")) returned 1 [0123.132] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70940f28, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70940f28, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4efc9a7d, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x84ca6, dwReserved0=0x0, dwReserved1=0x0, cFileName="Panel_Mask.wmv", cAlternateFileName="")) returned 1 [0123.133] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x709b333f, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x709b333f, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4f0d440f, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x84702, dwReserved0=0x0, dwReserved1=0x0, cFileName="Panel_Mask_PAL.wmv", cAlternateFileName="")) returned 1 [0123.133] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x709b333f, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x709b333f, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4f0d440f, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x84702, dwReserved0=0x0, dwReserved1=0x0, cFileName="Panel_Mask_PAL.wmv", cAlternateFileName="")) returned 0 [0123.133] FindClose (in: hFindFile=0x26bc80 | out: hFindFile=0x26bc80) returned 1 [0123.134] SetErrorMode (uMode=0x0) returned 0x1 [0123.134] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\ResizingPanels\\1047x576black.png", nBufferLength=0x105, lpBuffer=0x12d5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\ResizingPanels\\1047x576black.png", lpFilePart=0x0) returned 0x4c [0123.134] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\ResizingPanels\\1047x576black.png", nBufferLength=0x105, lpBuffer=0x12d590, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\ResizingPanels\\1047x576black.png", lpFilePart=0x0) returned 0x4c [0123.134] SetErrorMode (uMode=0x1) returned 0x0 [0123.134] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\ResizingPanels\\1047x576black.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\resizingpanels\\1047x576black.png"), fInfoLevelId=0x0, lpFileInformation=0x12d810 | out: lpFileInformation=0x12d810*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7091adcb, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x7091adcb, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4efa391f, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x11da)) returned 1 [0123.135] SetErrorMode (uMode=0x0) returned 0x1 [0123.136] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\ResizingPanels\\1047x576black.png", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\ResizingPanels\\1047x576black.png", lpFilePart=0x0) returned 0x4c [0123.136] SetErrorMode (uMode=0x1) returned 0x0 [0123.136] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\ResizingPanels\\1047x576black.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\resizingpanels\\1047x576black.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2e8 [0123.136] SetErrorMode (uMode=0x0) returned 0x1 [0123.136] GetFileType (hFile=0x2e8) returned 0x1 [0123.136] GetFileSize (in: hFile=0x2e8, lpFileSizeHigh=0x12d8c8 | out: lpFileSizeHigh=0x12d8c8*=0x0) returned 0x11da [0123.136] ReadFile (in: hFile=0x2e8, lpBuffer=0x26eff80, nNumberOfBytesToRead=0x11da, lpNumberOfBytesRead=0x12d7a8, lpOverlapped=0x0 | out: lpBuffer=0x26eff80*, lpNumberOfBytesRead=0x12d7a8*=0x11da, lpOverlapped=0x0) returned 1 [0123.154] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\ResizingPanels\\1047x576black.png", nBufferLength=0x105, lpBuffer=0x12d270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\ResizingPanels\\1047x576black.png", lpFilePart=0x0) returned 0x4c [0123.154] SetErrorMode (uMode=0x1) returned 0x0 [0123.154] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\ResizingPanels\\1047x576black.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\resizingpanels\\1047x576black.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0123.155] SetErrorMode (uMode=0x0) returned 0x1 [0123.155] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\ResizingPanels\\203x8subpicture.png", nBufferLength=0x105, lpBuffer=0x12d5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\ResizingPanels\\203x8subpicture.png", lpFilePart=0x0) returned 0x4e [0123.155] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\ResizingPanels\\203x8subpicture.png", nBufferLength=0x105, lpBuffer=0x12d590, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\ResizingPanels\\203x8subpicture.png", lpFilePart=0x0) returned 0x4e [0123.155] SetErrorMode (uMode=0x1) returned 0x0 [0123.156] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\ResizingPanels\\203x8subpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\resizingpanels\\203x8subpicture.png"), fInfoLevelId=0x0, lpFileInformation=0x12d810 | out: lpFileInformation=0x12d810*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70a4b8b3, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70a4b8b3, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4efa391f, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xb04)) returned 1 [0123.156] SetErrorMode (uMode=0x0) returned 0x1 [0123.156] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\ResizingPanels\\203x8subpicture.png", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\ResizingPanels\\203x8subpicture.png", lpFilePart=0x0) returned 0x4e [0123.156] SetErrorMode (uMode=0x1) returned 0x0 [0123.156] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\ResizingPanels\\203x8subpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\resizingpanels\\203x8subpicture.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2e8 [0123.156] SetErrorMode (uMode=0x0) returned 0x1 [0123.156] GetFileType (hFile=0x2e8) returned 0x1 [0123.156] GetFileSize (in: hFile=0x2e8, lpFileSizeHigh=0x12d8c8 | out: lpFileSizeHigh=0x12d8c8*=0x0) returned 0xb04 [0123.156] ReadFile (in: hFile=0x2e8, lpBuffer=0x27d8ca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12d7a8, lpOverlapped=0x0 | out: lpBuffer=0x27d8ca8*, lpNumberOfBytesRead=0x12d7a8*=0xb04, lpOverlapped=0x0) returned 1 [0123.176] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\ResizingPanels\\203x8subpicture.png", nBufferLength=0x105, lpBuffer=0x12d270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\ResizingPanels\\203x8subpicture.png", lpFilePart=0x0) returned 0x4e [0123.176] SetErrorMode (uMode=0x1) returned 0x0 [0123.176] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\ResizingPanels\\203x8subpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\resizingpanels\\203x8subpicture.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0123.177] SetErrorMode (uMode=0x0) returned 0x1 [0123.177] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\ResizingPanels\\bandwidth.png", nBufferLength=0x105, lpBuffer=0x12d5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\ResizingPanels\\bandwidth.png", lpFilePart=0x0) returned 0x48 [0123.177] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\ResizingPanels\\bandwidth.png", nBufferLength=0x105, lpBuffer=0x12d590, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\ResizingPanels\\bandwidth.png", lpFilePart=0x0) returned 0x48 [0123.177] SetErrorMode (uMode=0x1) returned 0x0 [0123.177] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\ResizingPanels\\bandwidth.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\resizingpanels\\bandwidth.png"), fInfoLevelId=0x0, lpFileInformation=0x12d810 | out: lpFileInformation=0x12d810*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7079e029, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x7079e029, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4efa391f, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x5aaf)) returned 1 [0123.179] SetErrorMode (uMode=0x0) returned 0x1 [0123.179] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\ResizingPanels\\bandwidth.png", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\ResizingPanels\\bandwidth.png", lpFilePart=0x0) returned 0x48 [0123.179] SetErrorMode (uMode=0x1) returned 0x0 [0123.179] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\ResizingPanels\\bandwidth.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\resizingpanels\\bandwidth.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2e8 [0123.179] SetErrorMode (uMode=0x0) returned 0x1 [0123.179] GetFileType (hFile=0x2e8) returned 0x1 [0123.179] GetFileSize (in: hFile=0x2e8, lpFileSizeHigh=0x12d8c8 | out: lpFileSizeHigh=0x12d8c8*=0x0) returned 0x5aaf [0123.179] ReadFile (in: hFile=0x2e8, lpBuffer=0x28be790, nNumberOfBytesToRead=0x5aaf, lpNumberOfBytesRead=0x12d7a8, lpOverlapped=0x0 | out: lpBuffer=0x28be790*, lpNumberOfBytesRead=0x12d7a8*=0x5aaf, lpOverlapped=0x0) returned 1 [0123.202] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\ResizingPanels\\bandwidth.png", nBufferLength=0x105, lpBuffer=0x12d270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\ResizingPanels\\bandwidth.png", lpFilePart=0x0) returned 0x48 [0123.202] SetErrorMode (uMode=0x1) returned 0x0 [0123.203] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\ResizingPanels\\bandwidth.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\resizingpanels\\bandwidth.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0123.204] SetErrorMode (uMode=0x0) returned 0x1 [0123.204] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\ResizingPanels\\blackbars80.png", nBufferLength=0x105, lpBuffer=0x12d5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\ResizingPanels\\blackbars80.png", lpFilePart=0x0) returned 0x4a [0123.204] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\ResizingPanels\\blackbars80.png", nBufferLength=0x105, lpBuffer=0x12d590, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\ResizingPanels\\blackbars80.png", lpFilePart=0x0) returned 0x4a [0123.204] SetErrorMode (uMode=0x1) returned 0x0 [0123.204] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\ResizingPanels\\blackbars80.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\resizingpanels\\blackbars80.png"), fInfoLevelId=0x0, lpFileInformation=0x12d810 | out: lpFileInformation=0x12d810*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70a25756, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70a25756, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4efa391f, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x191f)) returned 1 [0123.204] SetErrorMode (uMode=0x0) returned 0x1 [0123.205] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\ResizingPanels\\blackbars80.png", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\ResizingPanels\\blackbars80.png", lpFilePart=0x0) returned 0x4a [0123.205] SetErrorMode (uMode=0x1) returned 0x0 [0123.205] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\ResizingPanels\\blackbars80.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\resizingpanels\\blackbars80.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2e8 [0123.205] SetErrorMode (uMode=0x0) returned 0x1 [0123.205] GetFileType (hFile=0x2e8) returned 0x1 [0123.205] GetFileSize (in: hFile=0x2e8, lpFileSizeHigh=0x12d8c8 | out: lpFileSizeHigh=0x12d8c8*=0x0) returned 0x191f [0123.205] ReadFile (in: hFile=0x2e8, lpBuffer=0x27c7878, nNumberOfBytesToRead=0x191f, lpNumberOfBytesRead=0x12d7a8, lpOverlapped=0x0 | out: lpBuffer=0x27c7878*, lpNumberOfBytesRead=0x12d7a8*=0x191f, lpOverlapped=0x0) returned 1 [0123.225] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\ResizingPanels\\blackbars80.png", nBufferLength=0x105, lpBuffer=0x12d270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\ResizingPanels\\blackbars80.png", lpFilePart=0x0) returned 0x4a [0123.225] SetErrorMode (uMode=0x1) returned 0x0 [0123.225] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\ResizingPanels\\blackbars80.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\resizingpanels\\blackbars80.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0123.226] SetErrorMode (uMode=0x0) returned 0x1 [0123.226] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\ResizingPanels\\NavigationLeft_ButtonGraphic.png", nBufferLength=0x105, lpBuffer=0x12d5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\ResizingPanels\\NavigationLeft_ButtonGraphic.png", lpFilePart=0x0) returned 0x5b [0123.226] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\ResizingPanels\\NavigationLeft_ButtonGraphic.png", nBufferLength=0x105, lpBuffer=0x12d590, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\ResizingPanels\\NavigationLeft_ButtonGraphic.png", lpFilePart=0x0) returned 0x5b [0123.226] SetErrorMode (uMode=0x1) returned 0x0 [0123.226] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\ResizingPanels\\NavigationLeft_ButtonGraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\resizingpanels\\navigationleft_buttongraphic.png"), fInfoLevelId=0x0, lpFileInformation=0x12d810 | out: lpFileInformation=0x12d810*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x708ceb11, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x708ceb11, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4efa391f, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13e0)) returned 1 [0123.227] SetErrorMode (uMode=0x0) returned 0x1 [0123.227] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\ResizingPanels\\NavigationLeft_ButtonGraphic.png", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\ResizingPanels\\NavigationLeft_ButtonGraphic.png", lpFilePart=0x0) returned 0x5b [0123.227] SetErrorMode (uMode=0x1) returned 0x0 [0123.227] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\ResizingPanels\\NavigationLeft_ButtonGraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\resizingpanels\\navigationleft_buttongraphic.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2e8 [0123.227] SetErrorMode (uMode=0x0) returned 0x1 [0123.227] GetFileType (hFile=0x2e8) returned 0x1 [0123.227] GetFileSize (in: hFile=0x2e8, lpFileSizeHigh=0x12d8c8 | out: lpFileSizeHigh=0x12d8c8*=0x0) returned 0x13e0 [0123.228] ReadFile (in: hFile=0x2e8, lpBuffer=0x28b2668, nNumberOfBytesToRead=0x13e0, lpNumberOfBytesRead=0x12d7a8, lpOverlapped=0x0 | out: lpBuffer=0x28b2668*, lpNumberOfBytesRead=0x12d7a8*=0x13e0, lpOverlapped=0x0) returned 1 [0123.248] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\ResizingPanels\\NavigationLeft_ButtonGraphic.png", nBufferLength=0x105, lpBuffer=0x12d270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\ResizingPanels\\NavigationLeft_ButtonGraphic.png", lpFilePart=0x0) returned 0x5b [0123.248] SetErrorMode (uMode=0x1) returned 0x0 [0123.248] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\ResizingPanels\\NavigationLeft_ButtonGraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\resizingpanels\\navigationleft_buttongraphic.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0123.249] SetErrorMode (uMode=0x0) returned 0x1 [0123.249] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\ResizingPanels\\NavigationLeft_SelectionSubpicture.png", nBufferLength=0x105, lpBuffer=0x12d5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\ResizingPanels\\NavigationLeft_SelectionSubpicture.png", lpFilePart=0x0) returned 0x61 [0123.249] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\ResizingPanels\\NavigationLeft_SelectionSubpicture.png", nBufferLength=0x105, lpBuffer=0x12d590, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\ResizingPanels\\NavigationLeft_SelectionSubpicture.png", lpFilePart=0x0) returned 0x61 [0123.249] SetErrorMode (uMode=0x1) returned 0x0 [0123.249] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\ResizingPanels\\NavigationLeft_SelectionSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\resizingpanels\\navigationleft_selectionsubpicture.png"), fInfoLevelId=0x0, lpFileInformation=0x12d810 | out: lpFileInformation=0x12d810*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70810440, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70810440, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4efa391f, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc3a)) returned 1 [0123.250] SetErrorMode (uMode=0x0) returned 0x1 [0123.250] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\ResizingPanels\\NavigationLeft_SelectionSubpicture.png", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\ResizingPanels\\NavigationLeft_SelectionSubpicture.png", lpFilePart=0x0) returned 0x61 [0123.250] SetErrorMode (uMode=0x1) returned 0x0 [0123.250] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\ResizingPanels\\NavigationLeft_SelectionSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\resizingpanels\\navigationleft_selectionsubpicture.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2e8 [0123.250] SetErrorMode (uMode=0x0) returned 0x1 [0123.251] GetFileType (hFile=0x2e8) returned 0x1 [0123.251] GetFileSize (in: hFile=0x2e8, lpFileSizeHigh=0x12d8c8 | out: lpFileSizeHigh=0x12d8c8*=0x0) returned 0xc3a [0123.251] ReadFile (in: hFile=0x2e8, lpBuffer=0x2797720, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12d7a8, lpOverlapped=0x0 | out: lpBuffer=0x2797720*, lpNumberOfBytesRead=0x12d7a8*=0xc3a, lpOverlapped=0x0) returned 1 [0123.272] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\ResizingPanels\\NavigationLeft_SelectionSubpicture.png", nBufferLength=0x105, lpBuffer=0x12d270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\ResizingPanels\\NavigationLeft_SelectionSubpicture.png", lpFilePart=0x0) returned 0x61 [0123.272] SetErrorMode (uMode=0x1) returned 0x0 [0123.273] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\ResizingPanels\\NavigationLeft_SelectionSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\resizingpanels\\navigationleft_selectionsubpicture.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0123.274] SetErrorMode (uMode=0x0) returned 0x1 [0123.274] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\ResizingPanels\\NavigationRight_ButtonGraphic.png", nBufferLength=0x105, lpBuffer=0x12d5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\ResizingPanels\\NavigationRight_ButtonGraphic.png", lpFilePart=0x0) returned 0x5c [0123.274] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\ResizingPanels\\NavigationRight_ButtonGraphic.png", nBufferLength=0x105, lpBuffer=0x12d590, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\ResizingPanels\\NavigationRight_ButtonGraphic.png", lpFilePart=0x0) returned 0x5c [0123.275] SetErrorMode (uMode=0x1) returned 0x0 [0123.275] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\ResizingPanels\\NavigationRight_ButtonGraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\resizingpanels\\navigationright_buttongraphic.png"), fInfoLevelId=0x0, lpFileInformation=0x12d810 | out: lpFileInformation=0x12d810*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7083659d, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x7083659d, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4efa391f, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13a1)) returned 1 [0123.275] SetErrorMode (uMode=0x0) returned 0x1 [0123.275] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\ResizingPanels\\NavigationRight_ButtonGraphic.png", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\ResizingPanels\\NavigationRight_ButtonGraphic.png", lpFilePart=0x0) returned 0x5c [0123.275] SetErrorMode (uMode=0x1) returned 0x0 [0123.275] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\ResizingPanels\\NavigationRight_ButtonGraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\resizingpanels\\navigationright_buttongraphic.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2e8 [0123.275] SetErrorMode (uMode=0x0) returned 0x1 [0123.275] GetFileType (hFile=0x2e8) returned 0x1 [0123.276] GetFileSize (in: hFile=0x2e8, lpFileSizeHigh=0x12d8c8 | out: lpFileSizeHigh=0x12d8c8*=0x0) returned 0x13a1 [0123.276] ReadFile (in: hFile=0x2e8, lpBuffer=0x287dc90, nNumberOfBytesToRead=0x13a1, lpNumberOfBytesRead=0x12d7a8, lpOverlapped=0x0 | out: lpBuffer=0x287dc90*, lpNumberOfBytesRead=0x12d7a8*=0x13a1, lpOverlapped=0x0) returned 1 [0123.299] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\ResizingPanels\\NavigationRight_ButtonGraphic.png", nBufferLength=0x105, lpBuffer=0x12d270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\ResizingPanels\\NavigationRight_ButtonGraphic.png", lpFilePart=0x0) returned 0x5c [0123.299] SetErrorMode (uMode=0x1) returned 0x0 [0123.299] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\ResizingPanels\\NavigationRight_ButtonGraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\resizingpanels\\navigationright_buttongraphic.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0123.300] SetErrorMode (uMode=0x0) returned 0x1 [0123.301] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\ResizingPanels\\NavigationRight_SelectionSubpicture.png", nBufferLength=0x105, lpBuffer=0x12d5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\ResizingPanels\\NavigationRight_SelectionSubpicture.png", lpFilePart=0x0) returned 0x62 [0123.301] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\ResizingPanels\\NavigationRight_SelectionSubpicture.png", nBufferLength=0x105, lpBuffer=0x12d590, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\ResizingPanels\\NavigationRight_SelectionSubpicture.png", lpFilePart=0x0) returned 0x62 [0123.301] SetErrorMode (uMode=0x1) returned 0x0 [0123.301] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\ResizingPanels\\NavigationRight_SelectionSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\resizingpanels\\navigationright_selectionsubpicture.png"), fInfoLevelId=0x0, lpFileInformation=0x12d810 | out: lpFileInformation=0x12d810*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x707c4186, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x707c4186, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4efa391f, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc2e)) returned 1 [0123.301] SetErrorMode (uMode=0x0) returned 0x1 [0123.301] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\ResizingPanels\\NavigationRight_SelectionSubpicture.png", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\ResizingPanels\\NavigationRight_SelectionSubpicture.png", lpFilePart=0x0) returned 0x62 [0123.301] SetErrorMode (uMode=0x1) returned 0x0 [0123.302] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\ResizingPanels\\NavigationRight_SelectionSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\resizingpanels\\navigationright_selectionsubpicture.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2e8 [0123.302] SetErrorMode (uMode=0x0) returned 0x1 [0123.302] GetFileType (hFile=0x2e8) returned 0x1 [0123.302] GetFileSize (in: hFile=0x2e8, lpFileSizeHigh=0x12d8c8 | out: lpFileSizeHigh=0x12d8c8*=0x0) returned 0xc2e [0123.302] ReadFile (in: hFile=0x2e8, lpBuffer=0x2767478, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12d7a8, lpOverlapped=0x0 | out: lpBuffer=0x2767478*, lpNumberOfBytesRead=0x12d7a8*=0xc2e, lpOverlapped=0x0) returned 1 [0123.321] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\ResizingPanels\\NavigationRight_SelectionSubpicture.png", nBufferLength=0x105, lpBuffer=0x12d270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\ResizingPanels\\NavigationRight_SelectionSubpicture.png", lpFilePart=0x0) returned 0x62 [0123.321] SetErrorMode (uMode=0x1) returned 0x0 [0123.321] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\ResizingPanels\\NavigationRight_SelectionSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\resizingpanels\\navigationright_selectionsubpicture.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0123.322] SetErrorMode (uMode=0x0) returned 0x1 [0123.322] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\ResizingPanels\\NavigationUp_ButtonGraphic.png", nBufferLength=0x105, lpBuffer=0x12d5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\ResizingPanels\\NavigationUp_ButtonGraphic.png", lpFilePart=0x0) returned 0x59 [0123.322] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\ResizingPanels\\NavigationUp_ButtonGraphic.png", nBufferLength=0x105, lpBuffer=0x12d590, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\ResizingPanels\\NavigationUp_ButtonGraphic.png", lpFilePart=0x0) returned 0x59 [0123.323] SetErrorMode (uMode=0x1) returned 0x0 [0123.323] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\ResizingPanels\\NavigationUp_ButtonGraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\resizingpanels\\navigationup_buttongraphic.png"), fInfoLevelId=0x0, lpFileInformation=0x12d810 | out: lpFileInformation=0x12d810*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7079e029, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x7079e029, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4efa391f, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x135b)) returned 1 [0123.323] SetErrorMode (uMode=0x0) returned 0x1 [0123.323] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\ResizingPanels\\NavigationUp_ButtonGraphic.png", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\ResizingPanels\\NavigationUp_ButtonGraphic.png", lpFilePart=0x0) returned 0x59 [0123.323] SetErrorMode (uMode=0x1) returned 0x0 [0123.323] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\ResizingPanels\\NavigationUp_ButtonGraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\resizingpanels\\navigationup_buttongraphic.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2e8 [0123.323] SetErrorMode (uMode=0x0) returned 0x1 [0123.323] GetFileType (hFile=0x2e8) returned 0x1 [0123.324] GetFileSize (in: hFile=0x2e8, lpFileSizeHigh=0x12d8c8 | out: lpFileSizeHigh=0x12d8c8*=0x0) returned 0x135b [0123.324] ReadFile (in: hFile=0x2e8, lpBuffer=0x284d978, nNumberOfBytesToRead=0x135b, lpNumberOfBytesRead=0x12d7a8, lpOverlapped=0x0 | out: lpBuffer=0x284d978*, lpNumberOfBytesRead=0x12d7a8*=0x135b, lpOverlapped=0x0) returned 1 [0123.346] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\ResizingPanels\\NavigationUp_ButtonGraphic.png", nBufferLength=0x105, lpBuffer=0x12d270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\ResizingPanels\\NavigationUp_ButtonGraphic.png", lpFilePart=0x0) returned 0x59 [0123.346] SetErrorMode (uMode=0x1) returned 0x0 [0123.346] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\ResizingPanels\\NavigationUp_ButtonGraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\resizingpanels\\navigationup_buttongraphic.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0123.347] SetErrorMode (uMode=0x0) returned 0x1 [0123.347] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\ResizingPanels\\NavigationUp_SelectionSubpicture.png", nBufferLength=0x105, lpBuffer=0x12d5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\ResizingPanels\\NavigationUp_SelectionSubpicture.png", lpFilePart=0x0) returned 0x5f [0123.347] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\ResizingPanels\\NavigationUp_SelectionSubpicture.png", nBufferLength=0x105, lpBuffer=0x12d590, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\ResizingPanels\\NavigationUp_SelectionSubpicture.png", lpFilePart=0x0) returned 0x5f [0123.347] SetErrorMode (uMode=0x1) returned 0x0 [0123.347] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\ResizingPanels\\NavigationUp_SelectionSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\resizingpanels\\navigationup_selectionsubpicture.png"), fInfoLevelId=0x0, lpFileInformation=0x12d810 | out: lpFileInformation=0x12d810*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x707ea2e3, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x707ea2e3, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4efc9a7d, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc09)) returned 1 [0123.348] SetErrorMode (uMode=0x0) returned 0x1 [0123.348] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\ResizingPanels\\NavigationUp_SelectionSubpicture.png", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\ResizingPanels\\NavigationUp_SelectionSubpicture.png", lpFilePart=0x0) returned 0x5f [0123.348] SetErrorMode (uMode=0x1) returned 0x0 [0123.348] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\ResizingPanels\\NavigationUp_SelectionSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\resizingpanels\\navigationup_selectionsubpicture.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2e8 [0123.348] SetErrorMode (uMode=0x0) returned 0x1 [0123.348] GetFileType (hFile=0x2e8) returned 0x1 [0123.348] GetFileSize (in: hFile=0x2e8, lpFileSizeHigh=0x12d8c8 | out: lpFileSizeHigh=0x12d8c8*=0x0) returned 0xc09 [0123.349] ReadFile (in: hFile=0x2e8, lpBuffer=0x2736e78, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12d7a8, lpOverlapped=0x0 | out: lpBuffer=0x2736e78*, lpNumberOfBytesRead=0x12d7a8*=0xc09, lpOverlapped=0x0) returned 1 [0123.366] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\ResizingPanels\\NavigationUp_SelectionSubpicture.png", nBufferLength=0x105, lpBuffer=0x12d270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\ResizingPanels\\NavigationUp_SelectionSubpicture.png", lpFilePart=0x0) returned 0x5f [0123.367] SetErrorMode (uMode=0x1) returned 0x0 [0123.367] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\ResizingPanels\\NavigationUp_SelectionSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\resizingpanels\\navigationup_selectionsubpicture.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0123.368] SetErrorMode (uMode=0x0) returned 0x1 [0123.368] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\ResizingPanels\\Panel_Mask.wmv", nBufferLength=0x105, lpBuffer=0x12d5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\ResizingPanels\\Panel_Mask.wmv", lpFilePart=0x0) returned 0x49 [0123.368] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\ResizingPanels\\Panel_Mask.wmv", nBufferLength=0x105, lpBuffer=0x12d590, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\ResizingPanels\\Panel_Mask.wmv", lpFilePart=0x0) returned 0x49 [0123.368] SetErrorMode (uMode=0x1) returned 0x0 [0123.369] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\ResizingPanels\\Panel_Mask.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\resizingpanels\\panel_mask.wmv"), fInfoLevelId=0x0, lpFileInformation=0x12d810 | out: lpFileInformation=0x12d810*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70940f28, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70940f28, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4efc9a7d, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x84ca6)) returned 1 [0123.369] SetErrorMode (uMode=0x0) returned 0x1 [0123.369] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\ResizingPanels\\Panel_Mask.wmv", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\ResizingPanels\\Panel_Mask.wmv", lpFilePart=0x0) returned 0x49 [0123.369] SetErrorMode (uMode=0x1) returned 0x0 [0123.369] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\ResizingPanels\\Panel_Mask.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\resizingpanels\\panel_mask.wmv"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2e8 [0123.369] SetErrorMode (uMode=0x0) returned 0x1 [0123.369] GetFileType (hFile=0x2e8) returned 0x1 [0123.369] GetFileSize (in: hFile=0x2e8, lpFileSizeHigh=0x12d8c8 | out: lpFileSizeHigh=0x12d8c8*=0x0) returned 0x84ca6 [0123.372] ReadFile (in: hFile=0x2e8, lpBuffer=0x12891250, nNumberOfBytesToRead=0x84ca6, lpNumberOfBytesRead=0x12d7a8, lpOverlapped=0x0 | out: lpBuffer=0x12891250*, lpNumberOfBytesRead=0x12d7a8*=0x84ca6, lpOverlapped=0x0) returned 1 [0123.470] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\ResizingPanels\\Panel_Mask.wmv", nBufferLength=0x105, lpBuffer=0x12d270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\ResizingPanels\\Panel_Mask.wmv", lpFilePart=0x0) returned 0x49 [0123.470] SetErrorMode (uMode=0x1) returned 0x0 [0123.470] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\ResizingPanels\\Panel_Mask.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\resizingpanels\\panel_mask.wmv"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0123.479] SetErrorMode (uMode=0x0) returned 0x1 [0123.480] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\ResizingPanels\\Panel_Mask_PAL.wmv", nBufferLength=0x105, lpBuffer=0x12d5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\ResizingPanels\\Panel_Mask_PAL.wmv", lpFilePart=0x0) returned 0x4d [0123.480] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\ResizingPanels\\Panel_Mask_PAL.wmv", nBufferLength=0x105, lpBuffer=0x12d590, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\ResizingPanels\\Panel_Mask_PAL.wmv", lpFilePart=0x0) returned 0x4d [0123.480] SetErrorMode (uMode=0x1) returned 0x0 [0123.480] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\ResizingPanels\\Panel_Mask_PAL.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\resizingpanels\\panel_mask_pal.wmv"), fInfoLevelId=0x0, lpFileInformation=0x12d810 | out: lpFileInformation=0x12d810*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x709b333f, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x709b333f, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4f0d440f, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x84702)) returned 1 [0123.481] SetErrorMode (uMode=0x0) returned 0x1 [0123.481] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\ResizingPanels\\Panel_Mask_PAL.wmv", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\ResizingPanels\\Panel_Mask_PAL.wmv", lpFilePart=0x0) returned 0x4d [0123.481] SetErrorMode (uMode=0x1) returned 0x0 [0123.481] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\ResizingPanels\\Panel_Mask_PAL.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\resizingpanels\\panel_mask_pal.wmv"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2e8 [0123.481] SetErrorMode (uMode=0x0) returned 0x1 [0123.481] GetFileType (hFile=0x2e8) returned 0x1 [0123.482] GetFileSize (in: hFile=0x2e8, lpFileSizeHigh=0x12d8c8 | out: lpFileSizeHigh=0x12d8c8*=0x0) returned 0x84702 [0123.483] ReadFile (in: hFile=0x2e8, lpBuffer=0x12a1f8c0, nNumberOfBytesToRead=0x84702, lpNumberOfBytesRead=0x12d7a8, lpOverlapped=0x0 | out: lpBuffer=0x12a1f8c0*, lpNumberOfBytesRead=0x12d7a8*=0x84702, lpOverlapped=0x0) returned 1 [0123.576] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\ResizingPanels\\Panel_Mask_PAL.wmv", nBufferLength=0x105, lpBuffer=0x12d270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\ResizingPanels\\Panel_Mask_PAL.wmv", lpFilePart=0x0) returned 0x4d [0123.576] SetErrorMode (uMode=0x1) returned 0x0 [0123.576] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\ResizingPanels\\Panel_Mask_PAL.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\resizingpanels\\panel_mask_pal.wmv"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0123.577] SetErrorMode (uMode=0x0) returned 0x1 [0123.578] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\ResizingPanels\\Decrypt Instructions.txt", nBufferLength=0x105, lpBuffer=0x12d240, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\ResizingPanels\\Decrypt Instructions.txt", lpFilePart=0x0) returned 0x53 [0123.578] SetErrorMode (uMode=0x1) returned 0x0 [0123.578] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\ResizingPanels\\Decrypt Instructions.txt" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\resizingpanels\\decrypt instructions.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x2e8 [0123.579] SetErrorMode (uMode=0x0) returned 0x1 [0123.579] GetFileType (hFile=0x2e8) returned 0x1 [0123.580] WriteFile (in: hFile=0x2e8, lpBuffer=0x26c6948*, nNumberOfBytesToWrite=0x773, lpNumberOfBytesWritten=0x12d7a8, lpOverlapped=0x0 | out: lpBuffer=0x26c6948*, lpNumberOfBytesWritten=0x12d7a8*=0x773, lpOverlapped=0x0) returned 1 [0123.581] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\ResizingPanels", nBufferLength=0x105, lpBuffer=0x12d430, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\ResizingPanels", lpFilePart=0x0) returned 0x3a [0123.581] SetErrorMode (uMode=0x1) returned 0x0 [0123.581] FindFirstFileW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\ResizingPanels\\*", lpFindFileData=0x12d5d0 | out: lpFindFileData=0x12d5d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa119af33, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x69b86dd0, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x69b86dd0, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x26bc80 [0123.582] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa119af33, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x69b86dd0, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x69b86dd0, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0123.582] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7091adcb, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x7091adcb, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4efa391f, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x11da, dwReserved0=0x0, dwReserved1=0x0, cFileName="1047x576black.png", cAlternateFileName="")) returned 1 [0123.582] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70a4b8b3, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70a4b8b3, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4efa391f, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xb04, dwReserved0=0x0, dwReserved1=0x0, cFileName="203x8subpicture.png", cAlternateFileName="")) returned 1 [0123.582] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7079e029, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x7079e029, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4efa391f, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x5aaf, dwReserved0=0x0, dwReserved1=0x0, cFileName="bandwidth.png", cAlternateFileName="")) returned 1 [0123.582] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70a25756, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70a25756, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4efa391f, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x191f, dwReserved0=0x0, dwReserved1=0x0, cFileName="blackbars80.png", cAlternateFileName="")) returned 1 [0123.582] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x69b86dd0, ftCreationTime.dwHighDateTime=0x1d5e786, ftLastAccessTime.dwLowDateTime=0x69b86dd0, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x69b86dd0, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x773, dwReserved0=0x0, dwReserved1=0x0, cFileName="Decrypt Instructions.txt", cAlternateFileName="DECRYP~1.TXT")) returned 1 [0123.582] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x708ceb11, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x708ceb11, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4efa391f, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationLeft_ButtonGraphic.png", cAlternateFileName="")) returned 1 [0123.582] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70810440, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70810440, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4efa391f, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc3a, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationLeft_SelectionSubpicture.png", cAlternateFileName="")) returned 1 [0123.582] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7083659d, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x7083659d, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4efa391f, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13a1, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationRight_ButtonGraphic.png", cAlternateFileName="")) returned 1 [0123.582] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x707c4186, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x707c4186, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4efa391f, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc2e, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationRight_SelectionSubpicture.png", cAlternateFileName="")) returned 1 [0123.582] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7079e029, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x7079e029, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4efa391f, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x135b, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationUp_ButtonGraphic.png", cAlternateFileName="")) returned 1 [0123.582] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x707ea2e3, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x707ea2e3, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4efc9a7d, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc09, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationUp_SelectionSubpicture.png", cAlternateFileName="")) returned 1 [0123.582] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70940f28, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70940f28, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4efc9a7d, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x84ca6, dwReserved0=0x0, dwReserved1=0x0, cFileName="Panel_Mask.wmv", cAlternateFileName="")) returned 1 [0123.582] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x709b333f, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x709b333f, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4f0d440f, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x84702, dwReserved0=0x0, dwReserved1=0x0, cFileName="Panel_Mask_PAL.wmv", cAlternateFileName="")) returned 1 [0123.583] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x709b333f, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x709b333f, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4f0d440f, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x84702, dwReserved0=0x0, dwReserved1=0x0, cFileName="Panel_Mask_PAL.wmv", cAlternateFileName="")) returned 0 [0123.583] FindClose (in: hFindFile=0x26bc80 | out: hFindFile=0x26bc80) returned 1 [0123.583] SetErrorMode (uMode=0x0) returned 0x1 [0123.583] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Shatter", nBufferLength=0x105, lpBuffer=0x12d390, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Shatter", lpFilePart=0x0) returned 0x33 [0123.583] SetErrorMode (uMode=0x1) returned 0x0 [0123.583] FindFirstFileW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Shatter\\*", lpFindFileData=0x12d530 | out: lpFindFileData=0x12d530*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9f4d7984, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa9057bb, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9f4fdbf3, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x26bc80 [0123.587] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9f4d7984, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa9057bb, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9f4fdbf3, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0123.587] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ff23274, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6ff23274, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4f204eff, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x11da, dwReserved0=0x0, dwReserved1=0x0, cFileName="1047x576black.png", cAlternateFileName="")) returned 1 [0123.587] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ff493d1, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6ff493d1, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4f29d477, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xb04, dwReserved0=0x0, dwReserved1=0x0, cFileName="203x8subpicture.png", cAlternateFileName="")) returned 1 [0123.587] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70007aa2, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70007aa2, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4f92909f, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationLeft_ButtonGraphic.png", cAlternateFileName="")) returned 1 [0123.587] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ffe1945, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6ffe1945, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4fa59b8f, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc3a, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationLeft_SelectionSubpicture.png", cAlternateFileName="")) returned 1 [0123.587] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70007aa2, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70007aa2, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4fa59b8f, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13a1, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationRight_ButtonGraphic.png", cAlternateFileName="")) returned 1 [0123.587] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ff9568b, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6ff9568b, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4faf2107, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc2e, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationRight_SelectionSubpicture.png", cAlternateFileName="")) returned 1 [0123.587] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ff6f52e, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6ff6f52e, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4faf2107, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x135b, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationUp_ButtonGraphic.png", cAlternateFileName="")) returned 1 [0123.587] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ffbb7e8, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6ffbb7e8, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4faf2107, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc09, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationUp_SelectionSubpicture.png", cAlternateFileName="")) returned 1 [0123.587] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ff23274, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6ff23274, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4faf2107, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x547b, dwReserved0=0x0, dwReserved1=0x0, cFileName="shatter.png", cAlternateFileName="")) returned 1 [0123.588] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ff23274, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6ff23274, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4faf2107, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x547b, dwReserved0=0x0, dwReserved1=0x0, cFileName="shatter.png", cAlternateFileName="")) returned 0 [0123.588] FindClose (in: hFindFile=0x26bc80 | out: hFindFile=0x26bc80) returned 1 [0123.589] SetErrorMode (uMode=0x0) returned 0x1 [0123.589] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Shatter\\1047x576black.png", nBufferLength=0x105, lpBuffer=0x12d5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Shatter\\1047x576black.png", lpFilePart=0x0) returned 0x45 [0123.590] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Shatter\\1047x576black.png", nBufferLength=0x105, lpBuffer=0x12d590, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Shatter\\1047x576black.png", lpFilePart=0x0) returned 0x45 [0123.590] SetErrorMode (uMode=0x1) returned 0x0 [0123.590] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Shatter\\1047x576black.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\shatter\\1047x576black.png"), fInfoLevelId=0x0, lpFileInformation=0x12d810 | out: lpFileInformation=0x12d810*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ff23274, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6ff23274, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4f204eff, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x11da)) returned 1 [0123.591] SetErrorMode (uMode=0x0) returned 0x1 [0123.591] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Shatter\\1047x576black.png", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Shatter\\1047x576black.png", lpFilePart=0x0) returned 0x45 [0123.591] SetErrorMode (uMode=0x1) returned 0x0 [0123.591] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Shatter\\1047x576black.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\shatter\\1047x576black.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2e8 [0123.592] SetErrorMode (uMode=0x0) returned 0x1 [0123.592] GetFileType (hFile=0x2e8) returned 0x1 [0123.592] GetFileSize (in: hFile=0x2e8, lpFileSizeHigh=0x12d8c8 | out: lpFileSizeHigh=0x12d8c8*=0x0) returned 0x11da [0123.592] ReadFile (in: hFile=0x2e8, lpBuffer=0x26caed0, nNumberOfBytesToRead=0x11da, lpNumberOfBytesRead=0x12d7a8, lpOverlapped=0x0 | out: lpBuffer=0x26caed0*, lpNumberOfBytesRead=0x12d7a8*=0x11da, lpOverlapped=0x0) returned 1 [0123.613] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Shatter\\1047x576black.png", nBufferLength=0x105, lpBuffer=0x12d270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Shatter\\1047x576black.png", lpFilePart=0x0) returned 0x45 [0123.613] SetErrorMode (uMode=0x1) returned 0x0 [0123.613] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Shatter\\1047x576black.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\shatter\\1047x576black.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0123.614] SetErrorMode (uMode=0x0) returned 0x1 [0123.614] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Shatter\\203x8subpicture.png", nBufferLength=0x105, lpBuffer=0x12d5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Shatter\\203x8subpicture.png", lpFilePart=0x0) returned 0x47 [0123.614] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Shatter\\203x8subpicture.png", nBufferLength=0x105, lpBuffer=0x12d590, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Shatter\\203x8subpicture.png", lpFilePart=0x0) returned 0x47 [0123.614] SetErrorMode (uMode=0x1) returned 0x0 [0123.614] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Shatter\\203x8subpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\shatter\\203x8subpicture.png"), fInfoLevelId=0x0, lpFileInformation=0x12d810 | out: lpFileInformation=0x12d810*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ff493d1, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6ff493d1, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4f29d477, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xb04)) returned 1 [0123.615] SetErrorMode (uMode=0x0) returned 0x1 [0123.615] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Shatter\\203x8subpicture.png", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Shatter\\203x8subpicture.png", lpFilePart=0x0) returned 0x47 [0123.615] SetErrorMode (uMode=0x1) returned 0x0 [0123.615] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Shatter\\203x8subpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\shatter\\203x8subpicture.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2e8 [0123.615] SetErrorMode (uMode=0x0) returned 0x1 [0123.615] GetFileType (hFile=0x2e8) returned 0x1 [0123.615] GetFileSize (in: hFile=0x2e8, lpFileSizeHigh=0x12d8c8 | out: lpFileSizeHigh=0x12d8c8*=0x0) returned 0xb04 [0123.615] ReadFile (in: hFile=0x2e8, lpBuffer=0x27b3b88, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12d7a8, lpOverlapped=0x0 | out: lpBuffer=0x27b3b88*, lpNumberOfBytesRead=0x12d7a8*=0xb04, lpOverlapped=0x0) returned 1 [0123.632] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Shatter\\203x8subpicture.png", nBufferLength=0x105, lpBuffer=0x12d270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Shatter\\203x8subpicture.png", lpFilePart=0x0) returned 0x47 [0123.632] SetErrorMode (uMode=0x1) returned 0x0 [0123.632] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Shatter\\203x8subpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\shatter\\203x8subpicture.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0123.633] SetErrorMode (uMode=0x0) returned 0x1 [0123.633] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Shatter\\NavigationLeft_ButtonGraphic.png", nBufferLength=0x105, lpBuffer=0x12d5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Shatter\\NavigationLeft_ButtonGraphic.png", lpFilePart=0x0) returned 0x54 [0123.633] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Shatter\\NavigationLeft_ButtonGraphic.png", nBufferLength=0x105, lpBuffer=0x12d590, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Shatter\\NavigationLeft_ButtonGraphic.png", lpFilePart=0x0) returned 0x54 [0123.633] SetErrorMode (uMode=0x1) returned 0x0 [0123.633] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Shatter\\NavigationLeft_ButtonGraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\shatter\\navigationleft_buttongraphic.png"), fInfoLevelId=0x0, lpFileInformation=0x12d810 | out: lpFileInformation=0x12d810*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70007aa2, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70007aa2, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4f92909f, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13e0)) returned 1 [0123.634] SetErrorMode (uMode=0x0) returned 0x1 [0123.634] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Shatter\\NavigationLeft_ButtonGraphic.png", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Shatter\\NavigationLeft_ButtonGraphic.png", lpFilePart=0x0) returned 0x54 [0123.634] SetErrorMode (uMode=0x1) returned 0x0 [0123.634] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Shatter\\NavigationLeft_ButtonGraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\shatter\\navigationleft_buttongraphic.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2e8 [0123.634] SetErrorMode (uMode=0x0) returned 0x1 [0123.634] GetFileType (hFile=0x2e8) returned 0x1 [0123.634] GetFileSize (in: hFile=0x2e8, lpFileSizeHigh=0x12d8c8 | out: lpFileSizeHigh=0x12d8c8*=0x0) returned 0x13e0 [0123.635] ReadFile (in: hFile=0x2e8, lpBuffer=0x28996c8, nNumberOfBytesToRead=0x13e0, lpNumberOfBytesRead=0x12d7a8, lpOverlapped=0x0 | out: lpBuffer=0x28996c8*, lpNumberOfBytesRead=0x12d7a8*=0x13e0, lpOverlapped=0x0) returned 1 [0123.681] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Shatter\\NavigationLeft_ButtonGraphic.png", nBufferLength=0x105, lpBuffer=0x12d270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Shatter\\NavigationLeft_ButtonGraphic.png", lpFilePart=0x0) returned 0x54 [0123.681] SetErrorMode (uMode=0x1) returned 0x0 [0123.681] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Shatter\\NavigationLeft_ButtonGraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\shatter\\navigationleft_buttongraphic.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0123.682] SetErrorMode (uMode=0x0) returned 0x1 [0123.682] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Shatter\\NavigationLeft_SelectionSubpicture.png", nBufferLength=0x105, lpBuffer=0x12d5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Shatter\\NavigationLeft_SelectionSubpicture.png", lpFilePart=0x0) returned 0x5a [0123.683] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Shatter\\NavigationLeft_SelectionSubpicture.png", nBufferLength=0x105, lpBuffer=0x12d590, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Shatter\\NavigationLeft_SelectionSubpicture.png", lpFilePart=0x0) returned 0x5a [0123.683] SetErrorMode (uMode=0x1) returned 0x0 [0123.683] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Shatter\\NavigationLeft_SelectionSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\shatter\\navigationleft_selectionsubpicture.png"), fInfoLevelId=0x0, lpFileInformation=0x12d810 | out: lpFileInformation=0x12d810*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ffe1945, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6ffe1945, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4fa59b8f, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc3a)) returned 1 [0123.683] SetErrorMode (uMode=0x0) returned 0x1 [0123.683] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Shatter\\NavigationLeft_SelectionSubpicture.png", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Shatter\\NavigationLeft_SelectionSubpicture.png", lpFilePart=0x0) returned 0x5a [0123.684] SetErrorMode (uMode=0x1) returned 0x0 [0123.684] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Shatter\\NavigationLeft_SelectionSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\shatter\\navigationleft_selectionsubpicture.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2e8 [0123.684] SetErrorMode (uMode=0x0) returned 0x1 [0123.684] GetFileType (hFile=0x2e8) returned 0x1 [0123.684] GetFileSize (in: hFile=0x2e8, lpFileSizeHigh=0x12d8c8 | out: lpFileSizeHigh=0x12d8c8*=0x0) returned 0xc3a [0123.684] ReadFile (in: hFile=0x2e8, lpBuffer=0x2785df8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12d7a8, lpOverlapped=0x0 | out: lpBuffer=0x2785df8*, lpNumberOfBytesRead=0x12d7a8*=0xc3a, lpOverlapped=0x0) returned 1 [0123.702] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Shatter\\NavigationLeft_SelectionSubpicture.png", nBufferLength=0x105, lpBuffer=0x12d270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Shatter\\NavigationLeft_SelectionSubpicture.png", lpFilePart=0x0) returned 0x5a [0123.702] SetErrorMode (uMode=0x1) returned 0x0 [0123.702] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Shatter\\NavigationLeft_SelectionSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\shatter\\navigationleft_selectionsubpicture.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0123.704] SetErrorMode (uMode=0x0) returned 0x1 [0123.704] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Shatter\\NavigationRight_ButtonGraphic.png", nBufferLength=0x105, lpBuffer=0x12d5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Shatter\\NavigationRight_ButtonGraphic.png", lpFilePart=0x0) returned 0x55 [0123.704] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Shatter\\NavigationRight_ButtonGraphic.png", nBufferLength=0x105, lpBuffer=0x12d590, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Shatter\\NavigationRight_ButtonGraphic.png", lpFilePart=0x0) returned 0x55 [0123.704] SetErrorMode (uMode=0x1) returned 0x0 [0123.704] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Shatter\\NavigationRight_ButtonGraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\shatter\\navigationright_buttongraphic.png"), fInfoLevelId=0x0, lpFileInformation=0x12d810 | out: lpFileInformation=0x12d810*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70007aa2, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70007aa2, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4fa59b8f, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13a1)) returned 1 [0123.705] SetErrorMode (uMode=0x0) returned 0x1 [0123.705] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Shatter\\NavigationRight_ButtonGraphic.png", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Shatter\\NavigationRight_ButtonGraphic.png", lpFilePart=0x0) returned 0x55 [0123.705] SetErrorMode (uMode=0x1) returned 0x0 [0123.705] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Shatter\\NavigationRight_ButtonGraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\shatter\\navigationright_buttongraphic.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2e8 [0123.705] SetErrorMode (uMode=0x0) returned 0x1 [0123.705] GetFileType (hFile=0x2e8) returned 0x1 [0123.705] GetFileSize (in: hFile=0x2e8, lpFileSizeHigh=0x12d8c8 | out: lpFileSizeHigh=0x12d8c8*=0x0) returned 0x13a1 [0123.706] ReadFile (in: hFile=0x2e8, lpBuffer=0x286c300, nNumberOfBytesToRead=0x13a1, lpNumberOfBytesRead=0x12d7a8, lpOverlapped=0x0 | out: lpBuffer=0x286c300*, lpNumberOfBytesRead=0x12d7a8*=0x13a1, lpOverlapped=0x0) returned 1 [0123.727] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Shatter\\NavigationRight_ButtonGraphic.png", nBufferLength=0x105, lpBuffer=0x12d270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Shatter\\NavigationRight_ButtonGraphic.png", lpFilePart=0x0) returned 0x55 [0123.727] SetErrorMode (uMode=0x1) returned 0x0 [0123.727] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Shatter\\NavigationRight_ButtonGraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\shatter\\navigationright_buttongraphic.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0123.728] SetErrorMode (uMode=0x0) returned 0x1 [0123.728] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Shatter\\NavigationRight_SelectionSubpicture.png", nBufferLength=0x105, lpBuffer=0x12d5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Shatter\\NavigationRight_SelectionSubpicture.png", lpFilePart=0x0) returned 0x5b [0123.728] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Shatter\\NavigationRight_SelectionSubpicture.png", nBufferLength=0x105, lpBuffer=0x12d590, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Shatter\\NavigationRight_SelectionSubpicture.png", lpFilePart=0x0) returned 0x5b [0123.728] SetErrorMode (uMode=0x1) returned 0x0 [0123.729] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Shatter\\NavigationRight_SelectionSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\shatter\\navigationright_selectionsubpicture.png"), fInfoLevelId=0x0, lpFileInformation=0x12d810 | out: lpFileInformation=0x12d810*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ff9568b, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6ff9568b, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4faf2107, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc2e)) returned 1 [0123.729] SetErrorMode (uMode=0x0) returned 0x1 [0123.729] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Shatter\\NavigationRight_SelectionSubpicture.png", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Shatter\\NavigationRight_SelectionSubpicture.png", lpFilePart=0x0) returned 0x5b [0123.729] SetErrorMode (uMode=0x1) returned 0x0 [0123.729] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Shatter\\NavigationRight_SelectionSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\shatter\\navigationright_selectionsubpicture.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2e8 [0123.729] SetErrorMode (uMode=0x0) returned 0x1 [0123.729] GetFileType (hFile=0x2e8) returned 0x1 [0123.729] GetFileSize (in: hFile=0x2e8, lpFileSizeHigh=0x12d8c8 | out: lpFileSizeHigh=0x12d8c8*=0x0) returned 0xc2e [0123.730] ReadFile (in: hFile=0x2e8, lpBuffer=0x275a130, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12d7a8, lpOverlapped=0x0 | out: lpBuffer=0x275a130*, lpNumberOfBytesRead=0x12d7a8*=0xc2e, lpOverlapped=0x0) returned 1 [0123.748] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Shatter\\NavigationRight_SelectionSubpicture.png", nBufferLength=0x105, lpBuffer=0x12d270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Shatter\\NavigationRight_SelectionSubpicture.png", lpFilePart=0x0) returned 0x5b [0123.748] SetErrorMode (uMode=0x1) returned 0x0 [0123.749] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Shatter\\NavigationRight_SelectionSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\shatter\\navigationright_selectionsubpicture.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0123.750] SetErrorMode (uMode=0x0) returned 0x1 [0123.751] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Shatter\\NavigationUp_ButtonGraphic.png", nBufferLength=0x105, lpBuffer=0x12d5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Shatter\\NavigationUp_ButtonGraphic.png", lpFilePart=0x0) returned 0x52 [0123.751] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Shatter\\NavigationUp_ButtonGraphic.png", nBufferLength=0x105, lpBuffer=0x12d590, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Shatter\\NavigationUp_ButtonGraphic.png", lpFilePart=0x0) returned 0x52 [0123.751] SetErrorMode (uMode=0x1) returned 0x0 [0123.751] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Shatter\\NavigationUp_ButtonGraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\shatter\\navigationup_buttongraphic.png"), fInfoLevelId=0x0, lpFileInformation=0x12d810 | out: lpFileInformation=0x12d810*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ff6f52e, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6ff6f52e, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4faf2107, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x135b)) returned 1 [0123.751] SetErrorMode (uMode=0x0) returned 0x1 [0123.751] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Shatter\\NavigationUp_ButtonGraphic.png", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Shatter\\NavigationUp_ButtonGraphic.png", lpFilePart=0x0) returned 0x52 [0123.752] SetErrorMode (uMode=0x1) returned 0x0 [0123.752] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Shatter\\NavigationUp_ButtonGraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\shatter\\navigationup_buttongraphic.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2e8 [0123.752] SetErrorMode (uMode=0x0) returned 0x1 [0123.752] GetFileType (hFile=0x2e8) returned 0x1 [0123.752] GetFileSize (in: hFile=0x2e8, lpFileSizeHigh=0x12d8c8 | out: lpFileSizeHigh=0x12d8c8*=0x0) returned 0x135b [0123.752] ReadFile (in: hFile=0x2e8, lpBuffer=0x28405c0, nNumberOfBytesToRead=0x135b, lpNumberOfBytesRead=0x12d7a8, lpOverlapped=0x0 | out: lpBuffer=0x28405c0*, lpNumberOfBytesRead=0x12d7a8*=0x135b, lpOverlapped=0x0) returned 1 [0123.774] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Shatter\\NavigationUp_ButtonGraphic.png", nBufferLength=0x105, lpBuffer=0x12d270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Shatter\\NavigationUp_ButtonGraphic.png", lpFilePart=0x0) returned 0x52 [0123.774] SetErrorMode (uMode=0x1) returned 0x0 [0123.774] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Shatter\\NavigationUp_ButtonGraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\shatter\\navigationup_buttongraphic.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0123.775] SetErrorMode (uMode=0x0) returned 0x1 [0123.776] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Shatter\\NavigationUp_SelectionSubpicture.png", nBufferLength=0x105, lpBuffer=0x12d5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Shatter\\NavigationUp_SelectionSubpicture.png", lpFilePart=0x0) returned 0x58 [0123.776] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Shatter\\NavigationUp_SelectionSubpicture.png", nBufferLength=0x105, lpBuffer=0x12d590, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Shatter\\NavigationUp_SelectionSubpicture.png", lpFilePart=0x0) returned 0x58 [0123.776] SetErrorMode (uMode=0x1) returned 0x0 [0123.776] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Shatter\\NavigationUp_SelectionSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\shatter\\navigationup_selectionsubpicture.png"), fInfoLevelId=0x0, lpFileInformation=0x12d810 | out: lpFileInformation=0x12d810*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ffbb7e8, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6ffbb7e8, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4faf2107, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc09)) returned 1 [0123.777] SetErrorMode (uMode=0x0) returned 0x1 [0123.777] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Shatter\\NavigationUp_SelectionSubpicture.png", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Shatter\\NavigationUp_SelectionSubpicture.png", lpFilePart=0x0) returned 0x58 [0123.777] SetErrorMode (uMode=0x1) returned 0x0 [0123.777] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Shatter\\NavigationUp_SelectionSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\shatter\\navigationup_selectionsubpicture.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2e8 [0123.777] SetErrorMode (uMode=0x0) returned 0x1 [0123.777] GetFileType (hFile=0x2e8) returned 0x1 [0123.777] GetFileSize (in: hFile=0x2e8, lpFileSizeHigh=0x12d8c8 | out: lpFileSizeHigh=0x12d8c8*=0x0) returned 0xc09 [0123.777] ReadFile (in: hFile=0x2e8, lpBuffer=0x272e108, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12d7a8, lpOverlapped=0x0 | out: lpBuffer=0x272e108*, lpNumberOfBytesRead=0x12d7a8*=0xc09, lpOverlapped=0x0) returned 1 [0123.799] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Shatter\\NavigationUp_SelectionSubpicture.png", nBufferLength=0x105, lpBuffer=0x12d270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Shatter\\NavigationUp_SelectionSubpicture.png", lpFilePart=0x0) returned 0x58 [0123.799] SetErrorMode (uMode=0x1) returned 0x0 [0123.799] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Shatter\\NavigationUp_SelectionSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\shatter\\navigationup_selectionsubpicture.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0123.800] SetErrorMode (uMode=0x0) returned 0x1 [0123.801] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Shatter\\shatter.png", nBufferLength=0x105, lpBuffer=0x12d5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Shatter\\shatter.png", lpFilePart=0x0) returned 0x3f [0123.801] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Shatter\\shatter.png", nBufferLength=0x105, lpBuffer=0x12d590, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Shatter\\shatter.png", lpFilePart=0x0) returned 0x3f [0123.801] SetErrorMode (uMode=0x1) returned 0x0 [0123.801] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Shatter\\shatter.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\shatter\\shatter.png"), fInfoLevelId=0x0, lpFileInformation=0x12d810 | out: lpFileInformation=0x12d810*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ff23274, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6ff23274, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4faf2107, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x547b)) returned 1 [0123.801] SetErrorMode (uMode=0x0) returned 0x1 [0123.801] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Shatter\\shatter.png", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Shatter\\shatter.png", lpFilePart=0x0) returned 0x3f [0123.802] SetErrorMode (uMode=0x1) returned 0x0 [0123.802] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Shatter\\shatter.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\shatter\\shatter.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2e8 [0123.802] SetErrorMode (uMode=0x0) returned 0x1 [0123.802] GetFileType (hFile=0x2e8) returned 0x1 [0123.802] GetFileSize (in: hFile=0x2e8, lpFileSizeHigh=0x12d8c8 | out: lpFileSizeHigh=0x12d8c8*=0x0) returned 0x547b [0123.802] ReadFile (in: hFile=0x2e8, lpBuffer=0x2814428, nNumberOfBytesToRead=0x547b, lpNumberOfBytesRead=0x12d7a8, lpOverlapped=0x0 | out: lpBuffer=0x2814428*, lpNumberOfBytesRead=0x12d7a8*=0x547b, lpOverlapped=0x0) returned 1 [0123.823] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Shatter\\shatter.png", nBufferLength=0x105, lpBuffer=0x12d270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Shatter\\shatter.png", lpFilePart=0x0) returned 0x3f [0123.823] SetErrorMode (uMode=0x1) returned 0x0 [0123.823] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Shatter\\shatter.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\shatter\\shatter.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0123.824] SetErrorMode (uMode=0x0) returned 0x1 [0123.825] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Shatter\\Decrypt Instructions.txt", nBufferLength=0x105, lpBuffer=0x12d240, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Shatter\\Decrypt Instructions.txt", lpFilePart=0x0) returned 0x4c [0123.825] SetErrorMode (uMode=0x1) returned 0x0 [0123.825] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Shatter\\Decrypt Instructions.txt" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\shatter\\decrypt instructions.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x2e8 [0123.826] SetErrorMode (uMode=0x0) returned 0x1 [0123.826] GetFileType (hFile=0x2e8) returned 0x1 [0123.826] WriteFile (in: hFile=0x2e8, lpBuffer=0x2720738*, nNumberOfBytesToWrite=0x773, lpNumberOfBytesWritten=0x12d7a8, lpOverlapped=0x0 | out: lpBuffer=0x2720738*, lpNumberOfBytesWritten=0x12d7a8*=0x773, lpOverlapped=0x0) returned 1 [0123.827] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Shatter", nBufferLength=0x105, lpBuffer=0x12d430, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Shatter", lpFilePart=0x0) returned 0x33 [0123.827] SetErrorMode (uMode=0x1) returned 0x0 [0123.828] FindFirstFileW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Shatter\\*", lpFindFileData=0x12d5d0 | out: lpFindFileData=0x12d5d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9f4d7984, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x69dc2270, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x69dc2270, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x26bc80 [0123.828] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9f4d7984, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x69dc2270, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x69dc2270, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0123.828] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ff23274, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6ff23274, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4f204eff, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x11da, dwReserved0=0x0, dwReserved1=0x0, cFileName="1047x576black.png", cAlternateFileName="")) returned 1 [0123.828] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ff493d1, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6ff493d1, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4f29d477, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xb04, dwReserved0=0x0, dwReserved1=0x0, cFileName="203x8subpicture.png", cAlternateFileName="")) returned 1 [0123.828] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x69dc2270, ftCreationTime.dwHighDateTime=0x1d5e786, ftLastAccessTime.dwLowDateTime=0x69dc2270, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x69dc2270, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x773, dwReserved0=0x0, dwReserved1=0x0, cFileName="Decrypt Instructions.txt", cAlternateFileName="DECRYP~1.TXT")) returned 1 [0123.828] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70007aa2, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70007aa2, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4f92909f, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationLeft_ButtonGraphic.png", cAlternateFileName="")) returned 1 [0123.828] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ffe1945, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6ffe1945, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4fa59b8f, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc3a, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationLeft_SelectionSubpicture.png", cAlternateFileName="")) returned 1 [0123.828] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70007aa2, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70007aa2, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4fa59b8f, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13a1, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationRight_ButtonGraphic.png", cAlternateFileName="")) returned 1 [0123.828] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ff9568b, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6ff9568b, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4faf2107, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc2e, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationRight_SelectionSubpicture.png", cAlternateFileName="")) returned 1 [0123.828] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ff6f52e, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6ff6f52e, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4faf2107, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x135b, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationUp_ButtonGraphic.png", cAlternateFileName="")) returned 1 [0123.828] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ffbb7e8, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6ffbb7e8, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4faf2107, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc09, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationUp_SelectionSubpicture.png", cAlternateFileName="")) returned 1 [0123.828] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ff23274, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6ff23274, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4faf2107, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x547b, dwReserved0=0x0, dwReserved1=0x0, cFileName="shatter.png", cAlternateFileName="")) returned 1 [0123.828] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ff23274, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6ff23274, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4faf2107, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x547b, dwReserved0=0x0, dwReserved1=0x0, cFileName="shatter.png", cAlternateFileName="")) returned 0 [0123.829] FindClose (in: hFindFile=0x26bc80 | out: hFindFile=0x26bc80) returned 1 [0123.829] SetErrorMode (uMode=0x0) returned 0x1 [0123.829] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\SpecialOccasion", nBufferLength=0x105, lpBuffer=0x12d390, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\SpecialOccasion", lpFilePart=0x0) returned 0x3b [0123.829] SetErrorMode (uMode=0x1) returned 0x0 [0123.829] FindFirstFileW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\SpecialOccasion\\*", lpFindFileData=0x12d530 | out: lpFindFileData=0x12d530*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa1a65ec8, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa92ba2a, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa1ad8615, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x26bc80 [0123.831] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa1a65ec8, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa92ba2a, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa1ad8615, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0123.831] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f446eef, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f446eef, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4fc22bf7, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x11da, dwReserved0=0x0, dwReserved1=0x0, cFileName="1047x576black.png", cAlternateFileName="")) returned 1 [0123.831] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f4df463, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f4df463, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4fc22bf7, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xca59, dwReserved0=0x0, dwReserved1=0x0, cFileName="mainscroll.png", cAlternateFileName="")) returned 1 [0123.831] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f5e9dee, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f5e9dee, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4fc22bf7, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationLeft_ButtonGraphic.png", cAlternateFileName="")) returned 1 [0123.831] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f60ff4b, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f60ff4b, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4fc95011, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc3a, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationLeft_SelectionSubpicture.png", cAlternateFileName="")) returned 1 [0123.831] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f60ff4b, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f60ff4b, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4fd536e7, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13a1, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationRight_ButtonGraphic.png", cAlternateFileName="")) returned 1 [0123.831] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f6360a8, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f6360a8, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4fd536e7, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc2e, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationRight_SelectionSubpicture.png", cAlternateFileName="")) returned 1 [0123.832] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f65c205, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f65c205, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4fd536e7, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x135b, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationUp_ButtonGraphic.png", cAlternateFileName="")) returned 1 [0123.832] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f65c205, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f65c205, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4fd536e7, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc09, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationUp_SelectionSubpicture.png", cAlternateFileName="")) returned 1 [0123.832] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f52b71d, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f52b71d, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4fd536e7, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x17719, dwReserved0=0x0, dwReserved1=0x0, cFileName="scenesscroll.png", cAlternateFileName="")) returned 1 [0123.832] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f5055c0, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f5055c0, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4fd536e7, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xb30, dwReserved0=0x0, dwReserved1=0x0, cFileName="specialmainsubpicture.png", cAlternateFileName="")) returned 1 [0123.832] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f5c3c91, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f5c3c91, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4fd536e7, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x12cf, dwReserved0=0x0, dwReserved1=0x0, cFileName="SpecialNavigationLeft_ButtonGraphic.png", cAlternateFileName="")) returned 1 [0123.832] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f5c3c91, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f5c3c91, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4fd79845, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xbd6, dwReserved0=0x0, dwReserved1=0x0, cFileName="SpecialNavigationLeft_SelectionSubpicture.png", cAlternateFileName="")) returned 1 [0123.832] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f59db34, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f59db34, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4fd79845, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x12cf, dwReserved0=0x0, dwReserved1=0x0, cFileName="SpecialNavigationRight_ButtonGraphic.png", cAlternateFileName="")) returned 1 [0123.832] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f59db34, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f59db34, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4fd79845, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xbd0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SpecialNavigationRight_SelectionSubpicture.png", cAlternateFileName="")) returned 1 [0123.832] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f55187a, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f55187a, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4fd79845, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x1302, dwReserved0=0x0, dwReserved1=0x0, cFileName="SpecialNavigationUp_ButtonGraphic.png", cAlternateFileName="")) returned 1 [0123.832] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f5779d7, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f5779d7, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ff1c74f, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xbc3, dwReserved0=0x0, dwReserved1=0x0, cFileName="SpecialNavigationUp_SelectionSubpicture.png", cAlternateFileName="")) returned 1 [0123.832] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f3fac35, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f3fac35, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ff1c74f, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x4aa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="specialoccasion.png", cAlternateFileName="")) returned 1 [0123.832] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f4b9306, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f4b9306, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ff1c74f, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x1917, dwReserved0=0x0, dwReserved1=0x0, cFileName="whitemask1047.png", cAlternateFileName="")) returned 1 [0123.832] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f46d04c, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f46d04c, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ff428ad, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x296fa, dwReserved0=0x0, dwReserved1=0x0, cFileName="whitevignette1047.png", cAlternateFileName="")) returned 1 [0123.832] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f46d04c, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f46d04c, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ff428ad, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x296fa, dwReserved0=0x0, dwReserved1=0x0, cFileName="whitevignette1047.png", cAlternateFileName="")) returned 0 [0123.833] FindClose (in: hFindFile=0x26bc80 | out: hFindFile=0x26bc80) returned 1 [0123.833] SetErrorMode (uMode=0x0) returned 0x1 [0123.834] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\SpecialOccasion\\1047x576black.png", nBufferLength=0x105, lpBuffer=0x12d5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\SpecialOccasion\\1047x576black.png", lpFilePart=0x0) returned 0x4d [0123.834] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\SpecialOccasion\\1047x576black.png", nBufferLength=0x105, lpBuffer=0x12d590, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\SpecialOccasion\\1047x576black.png", lpFilePart=0x0) returned 0x4d [0123.834] SetErrorMode (uMode=0x1) returned 0x0 [0123.834] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\SpecialOccasion\\1047x576black.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\specialoccasion\\1047x576black.png"), fInfoLevelId=0x0, lpFileInformation=0x12d810 | out: lpFileInformation=0x12d810*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f446eef, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f446eef, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4fc22bf7, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x11da)) returned 1 [0123.835] SetErrorMode (uMode=0x0) returned 0x1 [0123.835] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\SpecialOccasion\\1047x576black.png", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\SpecialOccasion\\1047x576black.png", lpFilePart=0x0) returned 0x4d [0123.835] SetErrorMode (uMode=0x1) returned 0x0 [0123.836] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\SpecialOccasion\\1047x576black.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\specialoccasion\\1047x576black.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2e8 [0123.836] SetErrorMode (uMode=0x0) returned 0x1 [0123.836] GetFileType (hFile=0x2e8) returned 0x1 [0123.836] GetFileSize (in: hFile=0x2e8, lpFileSizeHigh=0x12d8c8 | out: lpFileSizeHigh=0x12d8c8*=0x0) returned 0x11da [0123.836] ReadFile (in: hFile=0x2e8, lpBuffer=0x2725c50, nNumberOfBytesToRead=0x11da, lpNumberOfBytesRead=0x12d7a8, lpOverlapped=0x0 | out: lpBuffer=0x2725c50*, lpNumberOfBytesRead=0x12d7a8*=0x11da, lpOverlapped=0x0) returned 1 [0123.851] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\SpecialOccasion\\1047x576black.png", nBufferLength=0x105, lpBuffer=0x12d270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\SpecialOccasion\\1047x576black.png", lpFilePart=0x0) returned 0x4d [0123.852] SetErrorMode (uMode=0x1) returned 0x0 [0123.852] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\SpecialOccasion\\1047x576black.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\specialoccasion\\1047x576black.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0123.852] SetErrorMode (uMode=0x0) returned 0x1 [0123.853] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\SpecialOccasion\\mainscroll.png", nBufferLength=0x105, lpBuffer=0x12d5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\SpecialOccasion\\mainscroll.png", lpFilePart=0x0) returned 0x4a [0123.853] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\SpecialOccasion\\mainscroll.png", nBufferLength=0x105, lpBuffer=0x12d590, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\SpecialOccasion\\mainscroll.png", lpFilePart=0x0) returned 0x4a [0123.853] SetErrorMode (uMode=0x1) returned 0x0 [0123.853] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\SpecialOccasion\\mainscroll.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\specialoccasion\\mainscroll.png"), fInfoLevelId=0x0, lpFileInformation=0x12d810 | out: lpFileInformation=0x12d810*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f4df463, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f4df463, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4fc22bf7, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xca59)) returned 1 [0123.854] SetErrorMode (uMode=0x0) returned 0x1 [0123.854] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\SpecialOccasion\\mainscroll.png", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\SpecialOccasion\\mainscroll.png", lpFilePart=0x0) returned 0x4a [0123.854] SetErrorMode (uMode=0x1) returned 0x0 [0123.854] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\SpecialOccasion\\mainscroll.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\specialoccasion\\mainscroll.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2e8 [0123.854] SetErrorMode (uMode=0x0) returned 0x1 [0123.854] GetFileType (hFile=0x2e8) returned 0x1 [0123.855] GetFileSize (in: hFile=0x2e8, lpFileSizeHigh=0x12d8c8 | out: lpFileSizeHigh=0x12d8c8*=0x0) returned 0xca59 [0123.855] ReadFile (in: hFile=0x2e8, lpBuffer=0x280de30, nNumberOfBytesToRead=0xca59, lpNumberOfBytesRead=0x12d7a8, lpOverlapped=0x0 | out: lpBuffer=0x280de30*, lpNumberOfBytesRead=0x12d7a8*=0xca59, lpOverlapped=0x0) returned 1 [0123.874] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\SpecialOccasion\\mainscroll.png", nBufferLength=0x105, lpBuffer=0x12d270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\SpecialOccasion\\mainscroll.png", lpFilePart=0x0) returned 0x4a [0123.874] SetErrorMode (uMode=0x1) returned 0x0 [0123.874] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\SpecialOccasion\\mainscroll.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\specialoccasion\\mainscroll.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0123.875] SetErrorMode (uMode=0x0) returned 0x1 [0123.875] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\SpecialOccasion\\NavigationLeft_ButtonGraphic.png", nBufferLength=0x105, lpBuffer=0x12d5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\SpecialOccasion\\NavigationLeft_ButtonGraphic.png", lpFilePart=0x0) returned 0x5c [0123.875] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\SpecialOccasion\\NavigationLeft_ButtonGraphic.png", nBufferLength=0x105, lpBuffer=0x12d590, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\SpecialOccasion\\NavigationLeft_ButtonGraphic.png", lpFilePart=0x0) returned 0x5c [0123.876] SetErrorMode (uMode=0x1) returned 0x0 [0123.876] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\SpecialOccasion\\NavigationLeft_ButtonGraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\specialoccasion\\navigationleft_buttongraphic.png"), fInfoLevelId=0x0, lpFileInformation=0x12d810 | out: lpFileInformation=0x12d810*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f5e9dee, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f5e9dee, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4fc22bf7, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13e0)) returned 1 [0123.876] SetErrorMode (uMode=0x0) returned 0x1 [0123.876] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\SpecialOccasion\\NavigationLeft_ButtonGraphic.png", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\SpecialOccasion\\NavigationLeft_ButtonGraphic.png", lpFilePart=0x0) returned 0x5c [0123.876] SetErrorMode (uMode=0x1) returned 0x0 [0123.876] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\SpecialOccasion\\NavigationLeft_ButtonGraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\specialoccasion\\navigationleft_buttongraphic.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2e8 [0123.876] SetErrorMode (uMode=0x0) returned 0x1 [0123.877] GetFileType (hFile=0x2e8) returned 0x1 [0123.877] GetFileSize (in: hFile=0x2e8, lpFileSizeHigh=0x12d8c8 | out: lpFileSizeHigh=0x12d8c8*=0x0) returned 0x13e0 [0123.877] ReadFile (in: hFile=0x2e8, lpBuffer=0x273b2c0, nNumberOfBytesToRead=0x13e0, lpNumberOfBytesRead=0x12d7a8, lpOverlapped=0x0 | out: lpBuffer=0x273b2c0*, lpNumberOfBytesRead=0x12d7a8*=0x13e0, lpOverlapped=0x0) returned 1 [0123.914] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\SpecialOccasion\\NavigationLeft_ButtonGraphic.png", nBufferLength=0x105, lpBuffer=0x12d270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\SpecialOccasion\\NavigationLeft_ButtonGraphic.png", lpFilePart=0x0) returned 0x5c [0123.915] SetErrorMode (uMode=0x1) returned 0x0 [0123.915] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\SpecialOccasion\\NavigationLeft_ButtonGraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\specialoccasion\\navigationleft_buttongraphic.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0123.916] SetErrorMode (uMode=0x0) returned 0x1 [0123.916] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\SpecialOccasion\\NavigationLeft_SelectionSubpicture.png", nBufferLength=0x105, lpBuffer=0x12d5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\SpecialOccasion\\NavigationLeft_SelectionSubpicture.png", lpFilePart=0x0) returned 0x62 [0123.917] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\SpecialOccasion\\NavigationLeft_SelectionSubpicture.png", nBufferLength=0x105, lpBuffer=0x12d590, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\SpecialOccasion\\NavigationLeft_SelectionSubpicture.png", lpFilePart=0x0) returned 0x62 [0123.917] SetErrorMode (uMode=0x1) returned 0x0 [0123.917] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\SpecialOccasion\\NavigationLeft_SelectionSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\specialoccasion\\navigationleft_selectionsubpicture.png"), fInfoLevelId=0x0, lpFileInformation=0x12d810 | out: lpFileInformation=0x12d810*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f60ff4b, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f60ff4b, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4fc95011, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc3a)) returned 1 [0123.917] SetErrorMode (uMode=0x0) returned 0x1 [0123.917] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\SpecialOccasion\\NavigationLeft_SelectionSubpicture.png", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\SpecialOccasion\\NavigationLeft_SelectionSubpicture.png", lpFilePart=0x0) returned 0x62 [0123.917] SetErrorMode (uMode=0x1) returned 0x0 [0123.918] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\SpecialOccasion\\NavigationLeft_SelectionSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\specialoccasion\\navigationleft_selectionsubpicture.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2e8 [0123.918] SetErrorMode (uMode=0x0) returned 0x1 [0123.918] GetFileType (hFile=0x2e8) returned 0x1 [0123.918] GetFileSize (in: hFile=0x2e8, lpFileSizeHigh=0x12d8c8 | out: lpFileSizeHigh=0x12d8c8*=0x0) returned 0xc3a [0123.918] ReadFile (in: hFile=0x2e8, lpBuffer=0x2824ee0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12d7a8, lpOverlapped=0x0 | out: lpBuffer=0x2824ee0*, lpNumberOfBytesRead=0x12d7a8*=0xc3a, lpOverlapped=0x0) returned 1 [0124.036] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\SpecialOccasion\\NavigationLeft_SelectionSubpicture.png", nBufferLength=0x105, lpBuffer=0x12d270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\SpecialOccasion\\NavigationLeft_SelectionSubpicture.png", lpFilePart=0x0) returned 0x62 [0124.036] SetErrorMode (uMode=0x1) returned 0x0 [0124.036] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\SpecialOccasion\\NavigationLeft_SelectionSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\specialoccasion\\navigationleft_selectionsubpicture.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0124.037] SetErrorMode (uMode=0x0) returned 0x1 [0124.038] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\SpecialOccasion\\NavigationRight_ButtonGraphic.png", nBufferLength=0x105, lpBuffer=0x12d5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\SpecialOccasion\\NavigationRight_ButtonGraphic.png", lpFilePart=0x0) returned 0x5d [0124.038] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\SpecialOccasion\\NavigationRight_ButtonGraphic.png", nBufferLength=0x105, lpBuffer=0x12d590, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\SpecialOccasion\\NavigationRight_ButtonGraphic.png", lpFilePart=0x0) returned 0x5d [0124.038] SetErrorMode (uMode=0x1) returned 0x0 [0124.038] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\SpecialOccasion\\NavigationRight_ButtonGraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\specialoccasion\\navigationright_buttongraphic.png"), fInfoLevelId=0x0, lpFileInformation=0x12d810 | out: lpFileInformation=0x12d810*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f60ff4b, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f60ff4b, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4fd536e7, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13a1)) returned 1 [0124.039] SetErrorMode (uMode=0x0) returned 0x1 [0124.039] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\SpecialOccasion\\NavigationRight_ButtonGraphic.png", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\SpecialOccasion\\NavigationRight_ButtonGraphic.png", lpFilePart=0x0) returned 0x5d [0124.039] SetErrorMode (uMode=0x1) returned 0x0 [0124.039] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\SpecialOccasion\\NavigationRight_ButtonGraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\specialoccasion\\navigationright_buttongraphic.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2e8 [0124.039] SetErrorMode (uMode=0x0) returned 0x1 [0124.039] GetFileType (hFile=0x2e8) returned 0x1 [0124.039] GetFileSize (in: hFile=0x2e8, lpFileSizeHigh=0x12d8c8 | out: lpFileSizeHigh=0x12d8c8*=0x0) returned 0x13a1 [0124.040] ReadFile (in: hFile=0x2e8, lpBuffer=0x270c910, nNumberOfBytesToRead=0x13a1, lpNumberOfBytesRead=0x12d7a8, lpOverlapped=0x0 | out: lpBuffer=0x270c910*, lpNumberOfBytesRead=0x12d7a8*=0x13a1, lpOverlapped=0x0) returned 1 [0124.063] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\SpecialOccasion\\NavigationRight_ButtonGraphic.png", nBufferLength=0x105, lpBuffer=0x12d270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\SpecialOccasion\\NavigationRight_ButtonGraphic.png", lpFilePart=0x0) returned 0x5d [0124.063] SetErrorMode (uMode=0x1) returned 0x0 [0124.063] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\SpecialOccasion\\NavigationRight_ButtonGraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\specialoccasion\\navigationright_buttongraphic.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0124.064] SetErrorMode (uMode=0x0) returned 0x1 [0124.065] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\SpecialOccasion\\NavigationRight_SelectionSubpicture.png", nBufferLength=0x105, lpBuffer=0x12d5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\SpecialOccasion\\NavigationRight_SelectionSubpicture.png", lpFilePart=0x0) returned 0x63 [0124.065] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\SpecialOccasion\\NavigationRight_SelectionSubpicture.png", nBufferLength=0x105, lpBuffer=0x12d590, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\SpecialOccasion\\NavigationRight_SelectionSubpicture.png", lpFilePart=0x0) returned 0x63 [0124.065] SetErrorMode (uMode=0x1) returned 0x0 [0124.065] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\SpecialOccasion\\NavigationRight_SelectionSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\specialoccasion\\navigationright_selectionsubpicture.png"), fInfoLevelId=0x0, lpFileInformation=0x12d810 | out: lpFileInformation=0x12d810*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f6360a8, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f6360a8, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4fd536e7, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc2e)) returned 1 [0124.066] SetErrorMode (uMode=0x0) returned 0x1 [0124.066] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\SpecialOccasion\\NavigationRight_SelectionSubpicture.png", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\SpecialOccasion\\NavigationRight_SelectionSubpicture.png", lpFilePart=0x0) returned 0x63 [0124.066] SetErrorMode (uMode=0x1) returned 0x0 [0124.066] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\SpecialOccasion\\NavigationRight_SelectionSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\specialoccasion\\navigationright_selectionsubpicture.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2e8 [0124.066] SetErrorMode (uMode=0x0) returned 0x1 [0124.066] GetFileType (hFile=0x2e8) returned 0x1 [0124.066] GetFileSize (in: hFile=0x2e8, lpFileSizeHigh=0x12d8c8 | out: lpFileSizeHigh=0x12d8c8*=0x0) returned 0xc2e [0124.066] ReadFile (in: hFile=0x2e8, lpBuffer=0x27f63a8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12d7a8, lpOverlapped=0x0 | out: lpBuffer=0x27f63a8*, lpNumberOfBytesRead=0x12d7a8*=0xc2e, lpOverlapped=0x0) returned 1 [0124.088] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\SpecialOccasion\\NavigationRight_SelectionSubpicture.png", nBufferLength=0x105, lpBuffer=0x12d270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\SpecialOccasion\\NavigationRight_SelectionSubpicture.png", lpFilePart=0x0) returned 0x63 [0124.088] SetErrorMode (uMode=0x1) returned 0x0 [0124.088] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\SpecialOccasion\\NavigationRight_SelectionSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\specialoccasion\\navigationright_selectionsubpicture.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0124.090] SetErrorMode (uMode=0x0) returned 0x1 [0124.090] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\SpecialOccasion\\NavigationUp_ButtonGraphic.png", nBufferLength=0x105, lpBuffer=0x12d5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\SpecialOccasion\\NavigationUp_ButtonGraphic.png", lpFilePart=0x0) returned 0x5a [0124.090] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\SpecialOccasion\\NavigationUp_ButtonGraphic.png", nBufferLength=0x105, lpBuffer=0x12d590, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\SpecialOccasion\\NavigationUp_ButtonGraphic.png", lpFilePart=0x0) returned 0x5a [0124.090] SetErrorMode (uMode=0x1) returned 0x0 [0124.090] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\SpecialOccasion\\NavigationUp_ButtonGraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\specialoccasion\\navigationup_buttongraphic.png"), fInfoLevelId=0x0, lpFileInformation=0x12d810 | out: lpFileInformation=0x12d810*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f65c205, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f65c205, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4fd536e7, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x135b)) returned 1 [0124.091] SetErrorMode (uMode=0x0) returned 0x1 [0124.091] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\SpecialOccasion\\NavigationUp_ButtonGraphic.png", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\SpecialOccasion\\NavigationUp_ButtonGraphic.png", lpFilePart=0x0) returned 0x5a [0124.091] SetErrorMode (uMode=0x1) returned 0x0 [0124.091] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\SpecialOccasion\\NavigationUp_ButtonGraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\specialoccasion\\navigationup_buttongraphic.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2e8 [0124.091] SetErrorMode (uMode=0x0) returned 0x1 [0124.091] GetFileType (hFile=0x2e8) returned 0x1 [0124.091] GetFileSize (in: hFile=0x2e8, lpFileSizeHigh=0x12d8c8 | out: lpFileSizeHigh=0x12d8c8*=0x0) returned 0x135b [0124.092] ReadFile (in: hFile=0x2e8, lpBuffer=0x28dc590, nNumberOfBytesToRead=0x135b, lpNumberOfBytesRead=0x12d7a8, lpOverlapped=0x0 | out: lpBuffer=0x28dc590*, lpNumberOfBytesRead=0x12d7a8*=0x135b, lpOverlapped=0x0) returned 1 [0124.117] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\SpecialOccasion\\NavigationUp_ButtonGraphic.png", nBufferLength=0x105, lpBuffer=0x12d270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\SpecialOccasion\\NavigationUp_ButtonGraphic.png", lpFilePart=0x0) returned 0x5a [0124.117] SetErrorMode (uMode=0x1) returned 0x0 [0124.118] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\SpecialOccasion\\NavigationUp_ButtonGraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\specialoccasion\\navigationup_buttongraphic.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0124.119] SetErrorMode (uMode=0x0) returned 0x1 [0124.120] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\SpecialOccasion\\NavigationUp_SelectionSubpicture.png", nBufferLength=0x105, lpBuffer=0x12d5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\SpecialOccasion\\NavigationUp_SelectionSubpicture.png", lpFilePart=0x0) returned 0x60 [0124.120] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\SpecialOccasion\\NavigationUp_SelectionSubpicture.png", nBufferLength=0x105, lpBuffer=0x12d590, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\SpecialOccasion\\NavigationUp_SelectionSubpicture.png", lpFilePart=0x0) returned 0x60 [0124.120] SetErrorMode (uMode=0x1) returned 0x0 [0124.120] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\SpecialOccasion\\NavigationUp_SelectionSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\specialoccasion\\navigationup_selectionsubpicture.png"), fInfoLevelId=0x0, lpFileInformation=0x12d810 | out: lpFileInformation=0x12d810*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f65c205, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f65c205, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4fd536e7, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc09)) returned 1 [0124.120] SetErrorMode (uMode=0x0) returned 0x1 [0124.121] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\SpecialOccasion\\NavigationUp_SelectionSubpicture.png", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\SpecialOccasion\\NavigationUp_SelectionSubpicture.png", lpFilePart=0x0) returned 0x60 [0124.121] SetErrorMode (uMode=0x1) returned 0x0 [0124.121] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\SpecialOccasion\\NavigationUp_SelectionSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\specialoccasion\\navigationup_selectionsubpicture.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2e8 [0124.121] SetErrorMode (uMode=0x0) returned 0x1 [0124.121] GetFileType (hFile=0x2e8) returned 0x1 [0124.121] GetFileSize (in: hFile=0x2e8, lpFileSizeHigh=0x12d8c8 | out: lpFileSizeHigh=0x12d8c8*=0x0) returned 0xc09 [0124.121] ReadFile (in: hFile=0x2e8, lpBuffer=0x27c6420, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12d7a8, lpOverlapped=0x0 | out: lpBuffer=0x27c6420*, lpNumberOfBytesRead=0x12d7a8*=0xc09, lpOverlapped=0x0) returned 1 [0124.143] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\SpecialOccasion\\NavigationUp_SelectionSubpicture.png", nBufferLength=0x105, lpBuffer=0x12d270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\SpecialOccasion\\NavigationUp_SelectionSubpicture.png", lpFilePart=0x0) returned 0x60 [0124.143] SetErrorMode (uMode=0x1) returned 0x0 [0124.144] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\SpecialOccasion\\NavigationUp_SelectionSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\specialoccasion\\navigationup_selectionsubpicture.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0124.145] SetErrorMode (uMode=0x0) returned 0x1 [0124.146] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\SpecialOccasion\\scenesscroll.png", nBufferLength=0x105, lpBuffer=0x12d5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\SpecialOccasion\\scenesscroll.png", lpFilePart=0x0) returned 0x4c [0124.146] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\SpecialOccasion\\scenesscroll.png", nBufferLength=0x105, lpBuffer=0x12d590, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\SpecialOccasion\\scenesscroll.png", lpFilePart=0x0) returned 0x4c [0124.146] SetErrorMode (uMode=0x1) returned 0x0 [0124.146] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\SpecialOccasion\\scenesscroll.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\specialoccasion\\scenesscroll.png"), fInfoLevelId=0x0, lpFileInformation=0x12d810 | out: lpFileInformation=0x12d810*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f52b71d, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f52b71d, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4fd536e7, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x17719)) returned 1 [0124.146] SetErrorMode (uMode=0x0) returned 0x1 [0124.147] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\SpecialOccasion\\scenesscroll.png", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\SpecialOccasion\\scenesscroll.png", lpFilePart=0x0) returned 0x4c [0124.147] SetErrorMode (uMode=0x1) returned 0x0 [0124.147] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\SpecialOccasion\\scenesscroll.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\specialoccasion\\scenesscroll.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2e8 [0124.147] SetErrorMode (uMode=0x0) returned 0x1 [0124.147] GetFileType (hFile=0x2e8) returned 0x1 [0124.147] GetFileSize (in: hFile=0x2e8, lpFileSizeHigh=0x12d8c8 | out: lpFileSizeHigh=0x12d8c8*=0x0) returned 0x17719 [0124.148] ReadFile (in: hFile=0x2e8, lpBuffer=0x128abd10, nNumberOfBytesToRead=0x17719, lpNumberOfBytesRead=0x12d7a8, lpOverlapped=0x0 | out: lpBuffer=0x128abd10*, lpNumberOfBytesRead=0x12d7a8*=0x17719, lpOverlapped=0x0) returned 1 [0124.183] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\SpecialOccasion\\scenesscroll.png", nBufferLength=0x105, lpBuffer=0x12d270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\SpecialOccasion\\scenesscroll.png", lpFilePart=0x0) returned 0x4c [0124.183] SetErrorMode (uMode=0x1) returned 0x0 [0124.183] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\SpecialOccasion\\scenesscroll.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\specialoccasion\\scenesscroll.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0124.185] SetErrorMode (uMode=0x0) returned 0x1 [0124.185] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\SpecialOccasion\\specialmainsubpicture.png", nBufferLength=0x105, lpBuffer=0x12d5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\SpecialOccasion\\specialmainsubpicture.png", lpFilePart=0x0) returned 0x55 [0124.185] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\SpecialOccasion\\specialmainsubpicture.png", nBufferLength=0x105, lpBuffer=0x12d590, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\SpecialOccasion\\specialmainsubpicture.png", lpFilePart=0x0) returned 0x55 [0124.185] SetErrorMode (uMode=0x1) returned 0x0 [0124.185] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\SpecialOccasion\\specialmainsubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\specialoccasion\\specialmainsubpicture.png"), fInfoLevelId=0x0, lpFileInformation=0x12d810 | out: lpFileInformation=0x12d810*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f5055c0, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f5055c0, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4fd536e7, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xb30)) returned 1 [0124.186] SetErrorMode (uMode=0x0) returned 0x1 [0124.186] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\SpecialOccasion\\specialmainsubpicture.png", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\SpecialOccasion\\specialmainsubpicture.png", lpFilePart=0x0) returned 0x55 [0124.186] SetErrorMode (uMode=0x1) returned 0x0 [0124.186] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\SpecialOccasion\\specialmainsubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\specialoccasion\\specialmainsubpicture.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2e8 [0124.186] SetErrorMode (uMode=0x0) returned 0x1 [0124.186] GetFileType (hFile=0x2e8) returned 0x1 [0124.186] GetFileSize (in: hFile=0x2e8, lpFileSizeHigh=0x12d8c8 | out: lpFileSizeHigh=0x12d8c8*=0x0) returned 0xb30 [0124.186] ReadFile (in: hFile=0x2e8, lpBuffer=0x278d198, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12d7a8, lpOverlapped=0x0 | out: lpBuffer=0x278d198*, lpNumberOfBytesRead=0x12d7a8*=0xb30, lpOverlapped=0x0) returned 1 [0124.208] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\SpecialOccasion\\specialmainsubpicture.png", nBufferLength=0x105, lpBuffer=0x12d270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\SpecialOccasion\\specialmainsubpicture.png", lpFilePart=0x0) returned 0x55 [0124.208] SetErrorMode (uMode=0x1) returned 0x0 [0124.208] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\SpecialOccasion\\specialmainsubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\specialoccasion\\specialmainsubpicture.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0124.209] SetErrorMode (uMode=0x0) returned 0x1 [0124.210] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\SpecialOccasion\\SpecialNavigationLeft_ButtonGraphic.png", nBufferLength=0x105, lpBuffer=0x12d5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\SpecialOccasion\\SpecialNavigationLeft_ButtonGraphic.png", lpFilePart=0x0) returned 0x63 [0124.210] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\SpecialOccasion\\SpecialNavigationLeft_ButtonGraphic.png", nBufferLength=0x105, lpBuffer=0x12d590, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\SpecialOccasion\\SpecialNavigationLeft_ButtonGraphic.png", lpFilePart=0x0) returned 0x63 [0124.210] SetErrorMode (uMode=0x1) returned 0x0 [0124.210] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\SpecialOccasion\\SpecialNavigationLeft_ButtonGraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\specialoccasion\\specialnavigationleft_buttongraphic.png"), fInfoLevelId=0x0, lpFileInformation=0x12d810 | out: lpFileInformation=0x12d810*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f5c3c91, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f5c3c91, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4fd536e7, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x12cf)) returned 1 [0124.211] SetErrorMode (uMode=0x0) returned 0x1 [0124.211] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\SpecialOccasion\\SpecialNavigationLeft_ButtonGraphic.png", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\SpecialOccasion\\SpecialNavigationLeft_ButtonGraphic.png", lpFilePart=0x0) returned 0x63 [0124.211] SetErrorMode (uMode=0x1) returned 0x0 [0124.211] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\SpecialOccasion\\SpecialNavigationLeft_ButtonGraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\specialoccasion\\specialnavigationleft_buttongraphic.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2e8 [0124.211] SetErrorMode (uMode=0x0) returned 0x1 [0124.211] GetFileType (hFile=0x2e8) returned 0x1 [0124.211] GetFileSize (in: hFile=0x2e8, lpFileSizeHigh=0x12d8c8 | out: lpFileSizeHigh=0x12d8c8*=0x0) returned 0x12cf [0124.211] ReadFile (in: hFile=0x2e8, lpBuffer=0x28731c0, nNumberOfBytesToRead=0x12cf, lpNumberOfBytesRead=0x12d7a8, lpOverlapped=0x0 | out: lpBuffer=0x28731c0*, lpNumberOfBytesRead=0x12d7a8*=0x12cf, lpOverlapped=0x0) returned 1 [0124.234] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\SpecialOccasion\\SpecialNavigationLeft_ButtonGraphic.png", nBufferLength=0x105, lpBuffer=0x12d270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\SpecialOccasion\\SpecialNavigationLeft_ButtonGraphic.png", lpFilePart=0x0) returned 0x63 [0124.234] SetErrorMode (uMode=0x1) returned 0x0 [0124.235] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\SpecialOccasion\\SpecialNavigationLeft_ButtonGraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\specialoccasion\\specialnavigationleft_buttongraphic.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0124.236] SetErrorMode (uMode=0x0) returned 0x1 [0124.236] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\SpecialOccasion\\SpecialNavigationLeft_SelectionSubpicture.png", nBufferLength=0x105, lpBuffer=0x12d5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\SpecialOccasion\\SpecialNavigationLeft_SelectionSubpicture.png", lpFilePart=0x0) returned 0x69 [0124.236] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\SpecialOccasion\\SpecialNavigationLeft_SelectionSubpicture.png", nBufferLength=0x105, lpBuffer=0x12d590, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\SpecialOccasion\\SpecialNavigationLeft_SelectionSubpicture.png", lpFilePart=0x0) returned 0x69 [0124.236] SetErrorMode (uMode=0x1) returned 0x0 [0124.236] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\SpecialOccasion\\SpecialNavigationLeft_SelectionSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\specialoccasion\\specialnavigationleft_selectionsubpicture.png"), fInfoLevelId=0x0, lpFileInformation=0x12d810 | out: lpFileInformation=0x12d810*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f5c3c91, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f5c3c91, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4fd79845, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xbd6)) returned 1 [0124.237] SetErrorMode (uMode=0x0) returned 0x1 [0124.237] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\SpecialOccasion\\SpecialNavigationLeft_SelectionSubpicture.png", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\SpecialOccasion\\SpecialNavigationLeft_SelectionSubpicture.png", lpFilePart=0x0) returned 0x69 [0124.237] SetErrorMode (uMode=0x1) returned 0x0 [0124.238] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\SpecialOccasion\\SpecialNavigationLeft_SelectionSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\specialoccasion\\specialnavigationleft_selectionsubpicture.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2e8 [0124.238] SetErrorMode (uMode=0x0) returned 0x1 [0124.238] GetFileType (hFile=0x2e8) returned 0x1 [0124.238] GetFileSize (in: hFile=0x2e8, lpFileSizeHigh=0x12d8c8 | out: lpFileSizeHigh=0x12d8c8*=0x0) returned 0xbd6 [0124.238] ReadFile (in: hFile=0x2e8, lpBuffer=0x275d6a0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12d7a8, lpOverlapped=0x0 | out: lpBuffer=0x275d6a0*, lpNumberOfBytesRead=0x12d7a8*=0xbd6, lpOverlapped=0x0) returned 1 [0124.252] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\SpecialOccasion\\SpecialNavigationLeft_SelectionSubpicture.png", nBufferLength=0x105, lpBuffer=0x12d270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\SpecialOccasion\\SpecialNavigationLeft_SelectionSubpicture.png", lpFilePart=0x0) returned 0x69 [0124.253] SetErrorMode (uMode=0x1) returned 0x0 [0124.253] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\SpecialOccasion\\SpecialNavigationLeft_SelectionSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\specialoccasion\\specialnavigationleft_selectionsubpicture.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0124.254] SetErrorMode (uMode=0x0) returned 0x1 [0124.254] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\SpecialOccasion\\SpecialNavigationRight_ButtonGraphic.png", nBufferLength=0x105, lpBuffer=0x12d5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\SpecialOccasion\\SpecialNavigationRight_ButtonGraphic.png", lpFilePart=0x0) returned 0x64 [0124.254] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\SpecialOccasion\\SpecialNavigationRight_ButtonGraphic.png", nBufferLength=0x105, lpBuffer=0x12d590, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\SpecialOccasion\\SpecialNavigationRight_ButtonGraphic.png", lpFilePart=0x0) returned 0x64 [0124.254] SetErrorMode (uMode=0x1) returned 0x0 [0124.254] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\SpecialOccasion\\SpecialNavigationRight_ButtonGraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\specialoccasion\\specialnavigationright_buttongraphic.png"), fInfoLevelId=0x0, lpFileInformation=0x12d810 | out: lpFileInformation=0x12d810*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f59db34, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f59db34, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4fd79845, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x12cf)) returned 1 [0124.255] SetErrorMode (uMode=0x0) returned 0x1 [0124.255] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\SpecialOccasion\\SpecialNavigationRight_ButtonGraphic.png", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\SpecialOccasion\\SpecialNavigationRight_ButtonGraphic.png", lpFilePart=0x0) returned 0x64 [0124.255] SetErrorMode (uMode=0x1) returned 0x0 [0124.255] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\SpecialOccasion\\SpecialNavigationRight_ButtonGraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\specialoccasion\\specialnavigationright_buttongraphic.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2e8 [0124.255] SetErrorMode (uMode=0x0) returned 0x1 [0124.255] GetFileType (hFile=0x2e8) returned 0x1 [0124.255] GetFileSize (in: hFile=0x2e8, lpFileSizeHigh=0x12d8c8 | out: lpFileSizeHigh=0x12d8c8*=0x0) returned 0x12cf [0124.255] ReadFile (in: hFile=0x2e8, lpBuffer=0x2843ad8, nNumberOfBytesToRead=0x12cf, lpNumberOfBytesRead=0x12d7a8, lpOverlapped=0x0 | out: lpBuffer=0x2843ad8*, lpNumberOfBytesRead=0x12d7a8*=0x12cf, lpOverlapped=0x0) returned 1 [0124.277] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\SpecialOccasion\\SpecialNavigationRight_ButtonGraphic.png", nBufferLength=0x105, lpBuffer=0x12d270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\SpecialOccasion\\SpecialNavigationRight_ButtonGraphic.png", lpFilePart=0x0) returned 0x64 [0124.277] SetErrorMode (uMode=0x1) returned 0x0 [0124.277] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\SpecialOccasion\\SpecialNavigationRight_ButtonGraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\specialoccasion\\specialnavigationright_buttongraphic.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0124.278] SetErrorMode (uMode=0x0) returned 0x1 [0124.279] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\SpecialOccasion\\SpecialNavigationRight_SelectionSubpicture.png", nBufferLength=0x105, lpBuffer=0x12d5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\SpecialOccasion\\SpecialNavigationRight_SelectionSubpicture.png", lpFilePart=0x0) returned 0x6a [0124.279] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\SpecialOccasion\\SpecialNavigationRight_SelectionSubpicture.png", nBufferLength=0x105, lpBuffer=0x12d590, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\SpecialOccasion\\SpecialNavigationRight_SelectionSubpicture.png", lpFilePart=0x0) returned 0x6a [0124.279] SetErrorMode (uMode=0x1) returned 0x0 [0124.279] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\SpecialOccasion\\SpecialNavigationRight_SelectionSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\specialoccasion\\specialnavigationright_selectionsubpicture.png"), fInfoLevelId=0x0, lpFileInformation=0x12d810 | out: lpFileInformation=0x12d810*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f59db34, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f59db34, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4fd79845, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xbd0)) returned 1 [0124.279] SetErrorMode (uMode=0x0) returned 0x1 [0124.279] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\SpecialOccasion\\SpecialNavigationRight_SelectionSubpicture.png", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\SpecialOccasion\\SpecialNavigationRight_SelectionSubpicture.png", lpFilePart=0x0) returned 0x6a [0124.279] SetErrorMode (uMode=0x1) returned 0x0 [0124.279] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\SpecialOccasion\\SpecialNavigationRight_SelectionSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\specialoccasion\\specialnavigationright_selectionsubpicture.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2e8 [0124.280] SetErrorMode (uMode=0x0) returned 0x1 [0124.280] GetFileType (hFile=0x2e8) returned 0x1 [0124.280] GetFileSize (in: hFile=0x2e8, lpFileSizeHigh=0x12d8c8 | out: lpFileSizeHigh=0x12d8c8*=0x0) returned 0xbd0 [0124.280] ReadFile (in: hFile=0x2e8, lpBuffer=0x272cdf8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12d7a8, lpOverlapped=0x0 | out: lpBuffer=0x272cdf8*, lpNumberOfBytesRead=0x12d7a8*=0xbd0, lpOverlapped=0x0) returned 1 [0124.294] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\SpecialOccasion\\SpecialNavigationRight_SelectionSubpicture.png", nBufferLength=0x105, lpBuffer=0x12d270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\SpecialOccasion\\SpecialNavigationRight_SelectionSubpicture.png", lpFilePart=0x0) returned 0x6a [0124.294] SetErrorMode (uMode=0x1) returned 0x0 [0124.294] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\SpecialOccasion\\SpecialNavigationRight_SelectionSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\specialoccasion\\specialnavigationright_selectionsubpicture.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0124.295] SetErrorMode (uMode=0x0) returned 0x1 [0124.296] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\SpecialOccasion\\SpecialNavigationUp_ButtonGraphic.png", nBufferLength=0x105, lpBuffer=0x12d5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\SpecialOccasion\\SpecialNavigationUp_ButtonGraphic.png", lpFilePart=0x0) returned 0x61 [0124.296] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\SpecialOccasion\\SpecialNavigationUp_ButtonGraphic.png", nBufferLength=0x105, lpBuffer=0x12d590, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\SpecialOccasion\\SpecialNavigationUp_ButtonGraphic.png", lpFilePart=0x0) returned 0x61 [0124.296] SetErrorMode (uMode=0x1) returned 0x0 [0124.296] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\SpecialOccasion\\SpecialNavigationUp_ButtonGraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\specialoccasion\\specialnavigationup_buttongraphic.png"), fInfoLevelId=0x0, lpFileInformation=0x12d810 | out: lpFileInformation=0x12d810*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f55187a, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f55187a, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4fd79845, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x1302)) returned 1 [0124.296] SetErrorMode (uMode=0x0) returned 0x1 [0124.296] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\SpecialOccasion\\SpecialNavigationUp_ButtonGraphic.png", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\SpecialOccasion\\SpecialNavigationUp_ButtonGraphic.png", lpFilePart=0x0) returned 0x61 [0124.296] SetErrorMode (uMode=0x1) returned 0x0 [0124.297] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\SpecialOccasion\\SpecialNavigationUp_ButtonGraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\specialoccasion\\specialnavigationup_buttongraphic.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2e8 [0124.297] SetErrorMode (uMode=0x0) returned 0x1 [0124.297] GetFileType (hFile=0x2e8) returned 0x1 [0124.297] GetFileSize (in: hFile=0x2e8, lpFileSizeHigh=0x12d8c8 | out: lpFileSizeHigh=0x12d8c8*=0x0) returned 0x1302 [0124.297] ReadFile (in: hFile=0x2e8, lpBuffer=0x2813210, nNumberOfBytesToRead=0x1302, lpNumberOfBytesRead=0x12d7a8, lpOverlapped=0x0 | out: lpBuffer=0x2813210*, lpNumberOfBytesRead=0x12d7a8*=0x1302, lpOverlapped=0x0) returned 1 [0124.319] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\SpecialOccasion\\SpecialNavigationUp_ButtonGraphic.png", nBufferLength=0x105, lpBuffer=0x12d270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\SpecialOccasion\\SpecialNavigationUp_ButtonGraphic.png", lpFilePart=0x0) returned 0x61 [0124.319] SetErrorMode (uMode=0x1) returned 0x0 [0124.319] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\SpecialOccasion\\SpecialNavigationUp_ButtonGraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\specialoccasion\\specialnavigationup_buttongraphic.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0124.321] SetErrorMode (uMode=0x0) returned 0x1 [0124.321] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\SpecialOccasion\\SpecialNavigationUp_SelectionSubpicture.png", nBufferLength=0x105, lpBuffer=0x12d5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\SpecialOccasion\\SpecialNavigationUp_SelectionSubpicture.png", lpFilePart=0x0) returned 0x67 [0124.321] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\SpecialOccasion\\SpecialNavigationUp_SelectionSubpicture.png", nBufferLength=0x105, lpBuffer=0x12d590, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\SpecialOccasion\\SpecialNavigationUp_SelectionSubpicture.png", lpFilePart=0x0) returned 0x67 [0124.321] SetErrorMode (uMode=0x1) returned 0x0 [0124.321] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\SpecialOccasion\\SpecialNavigationUp_SelectionSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\specialoccasion\\specialnavigationup_selectionsubpicture.png"), fInfoLevelId=0x0, lpFileInformation=0x12d810 | out: lpFileInformation=0x12d810*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f5779d7, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f5779d7, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ff1c74f, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xbc3)) returned 1 [0124.322] SetErrorMode (uMode=0x0) returned 0x1 [0124.322] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\SpecialOccasion\\SpecialNavigationUp_SelectionSubpicture.png", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\SpecialOccasion\\SpecialNavigationUp_SelectionSubpicture.png", lpFilePart=0x0) returned 0x67 [0124.323] SetErrorMode (uMode=0x1) returned 0x0 [0124.323] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\SpecialOccasion\\SpecialNavigationUp_SelectionSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\specialoccasion\\specialnavigationup_selectionsubpicture.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2e8 [0124.323] SetErrorMode (uMode=0x0) returned 0x1 [0124.323] GetFileType (hFile=0x2e8) returned 0x1 [0124.323] GetFileSize (in: hFile=0x2e8, lpFileSizeHigh=0x12d8c8 | out: lpFileSizeHigh=0x12d8c8*=0x0) returned 0xbc3 [0124.323] ReadFile (in: hFile=0x2e8, lpBuffer=0x26fc610, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12d7a8, lpOverlapped=0x0 | out: lpBuffer=0x26fc610*, lpNumberOfBytesRead=0x12d7a8*=0xbc3, lpOverlapped=0x0) returned 1 [0124.340] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\SpecialOccasion\\SpecialNavigationUp_SelectionSubpicture.png", nBufferLength=0x105, lpBuffer=0x12d270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\SpecialOccasion\\SpecialNavigationUp_SelectionSubpicture.png", lpFilePart=0x0) returned 0x67 [0124.340] SetErrorMode (uMode=0x1) returned 0x0 [0124.340] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\SpecialOccasion\\SpecialNavigationUp_SelectionSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\specialoccasion\\specialnavigationup_selectionsubpicture.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0124.341] SetErrorMode (uMode=0x0) returned 0x1 [0124.342] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\SpecialOccasion\\specialoccasion.png", nBufferLength=0x105, lpBuffer=0x12d5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\SpecialOccasion\\specialoccasion.png", lpFilePart=0x0) returned 0x4f [0124.342] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\SpecialOccasion\\specialoccasion.png", nBufferLength=0x105, lpBuffer=0x12d590, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\SpecialOccasion\\specialoccasion.png", lpFilePart=0x0) returned 0x4f [0124.342] SetErrorMode (uMode=0x1) returned 0x0 [0124.342] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\SpecialOccasion\\specialoccasion.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\specialoccasion\\specialoccasion.png"), fInfoLevelId=0x0, lpFileInformation=0x12d810 | out: lpFileInformation=0x12d810*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f3fac35, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f3fac35, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ff1c74f, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x4aa8)) returned 1 [0124.343] SetErrorMode (uMode=0x0) returned 0x1 [0124.343] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\SpecialOccasion\\specialoccasion.png", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\SpecialOccasion\\specialoccasion.png", lpFilePart=0x0) returned 0x4f [0124.343] SetErrorMode (uMode=0x1) returned 0x0 [0124.343] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\SpecialOccasion\\specialoccasion.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\specialoccasion\\specialoccasion.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2e8 [0124.343] SetErrorMode (uMode=0x0) returned 0x1 [0124.343] GetFileType (hFile=0x2e8) returned 0x1 [0124.343] GetFileSize (in: hFile=0x2e8, lpFileSizeHigh=0x12d8c8 | out: lpFileSizeHigh=0x12d8c8*=0x0) returned 0x4aa8 [0124.343] ReadFile (in: hFile=0x2e8, lpBuffer=0x27e28e8, nNumberOfBytesToRead=0x4aa8, lpNumberOfBytesRead=0x12d7a8, lpOverlapped=0x0 | out: lpBuffer=0x27e28e8*, lpNumberOfBytesRead=0x12d7a8*=0x4aa8, lpOverlapped=0x0) returned 1 [0124.358] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\SpecialOccasion\\specialoccasion.png", nBufferLength=0x105, lpBuffer=0x12d270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\SpecialOccasion\\specialoccasion.png", lpFilePart=0x0) returned 0x4f [0124.358] SetErrorMode (uMode=0x1) returned 0x0 [0124.358] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\SpecialOccasion\\specialoccasion.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\specialoccasion\\specialoccasion.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0124.360] SetErrorMode (uMode=0x0) returned 0x1 [0124.360] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\SpecialOccasion\\whitemask1047.png", nBufferLength=0x105, lpBuffer=0x12d5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\SpecialOccasion\\whitemask1047.png", lpFilePart=0x0) returned 0x4d [0124.360] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\SpecialOccasion\\whitemask1047.png", nBufferLength=0x105, lpBuffer=0x12d590, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\SpecialOccasion\\whitemask1047.png", lpFilePart=0x0) returned 0x4d [0124.360] SetErrorMode (uMode=0x1) returned 0x0 [0124.360] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\SpecialOccasion\\whitemask1047.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\specialoccasion\\whitemask1047.png"), fInfoLevelId=0x0, lpFileInformation=0x12d810 | out: lpFileInformation=0x12d810*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f4b9306, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f4b9306, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ff1c74f, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x1917)) returned 1 [0124.361] SetErrorMode (uMode=0x0) returned 0x1 [0124.361] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\SpecialOccasion\\whitemask1047.png", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\SpecialOccasion\\whitemask1047.png", lpFilePart=0x0) returned 0x4d [0124.361] SetErrorMode (uMode=0x1) returned 0x0 [0124.361] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\SpecialOccasion\\whitemask1047.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\specialoccasion\\whitemask1047.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2e8 [0124.361] SetErrorMode (uMode=0x0) returned 0x1 [0124.361] GetFileType (hFile=0x2e8) returned 0x1 [0124.361] GetFileSize (in: hFile=0x2e8, lpFileSizeHigh=0x12d8c8 | out: lpFileSizeHigh=0x12d8c8*=0x0) returned 0x1917 [0124.361] ReadFile (in: hFile=0x2e8, lpBuffer=0x28dfcb8, nNumberOfBytesToRead=0x1917, lpNumberOfBytesRead=0x12d7a8, lpOverlapped=0x0 | out: lpBuffer=0x28dfcb8*, lpNumberOfBytesRead=0x12d7a8*=0x1917, lpOverlapped=0x0) returned 1 [0124.381] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\SpecialOccasion\\whitemask1047.png", nBufferLength=0x105, lpBuffer=0x12d270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\SpecialOccasion\\whitemask1047.png", lpFilePart=0x0) returned 0x4d [0124.382] SetErrorMode (uMode=0x1) returned 0x0 [0124.382] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\SpecialOccasion\\whitemask1047.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\specialoccasion\\whitemask1047.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0124.383] SetErrorMode (uMode=0x0) returned 0x1 [0124.384] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\SpecialOccasion\\whitevignette1047.png", nBufferLength=0x105, lpBuffer=0x12d5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\SpecialOccasion\\whitevignette1047.png", lpFilePart=0x0) returned 0x51 [0124.384] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\SpecialOccasion\\whitevignette1047.png", nBufferLength=0x105, lpBuffer=0x12d590, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\SpecialOccasion\\whitevignette1047.png", lpFilePart=0x0) returned 0x51 [0124.384] SetErrorMode (uMode=0x1) returned 0x0 [0124.384] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\SpecialOccasion\\whitevignette1047.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\specialoccasion\\whitevignette1047.png"), fInfoLevelId=0x0, lpFileInformation=0x12d810 | out: lpFileInformation=0x12d810*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f46d04c, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f46d04c, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ff428ad, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x296fa)) returned 1 [0124.384] SetErrorMode (uMode=0x0) returned 0x1 [0124.384] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\SpecialOccasion\\whitevignette1047.png", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\SpecialOccasion\\whitevignette1047.png", lpFilePart=0x0) returned 0x51 [0124.384] SetErrorMode (uMode=0x1) returned 0x0 [0124.384] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\SpecialOccasion\\whitevignette1047.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\specialoccasion\\whitevignette1047.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2e8 [0124.385] SetErrorMode (uMode=0x0) returned 0x1 [0124.385] GetFileType (hFile=0x2e8) returned 0x1 [0124.385] GetFileSize (in: hFile=0x2e8, lpFileSizeHigh=0x12d8c8 | out: lpFileSizeHigh=0x12d8c8*=0x0) returned 0x296fa [0124.386] ReadFile (in: hFile=0x2e8, lpBuffer=0x12938880, nNumberOfBytesToRead=0x296fa, lpNumberOfBytesRead=0x12d7a8, lpOverlapped=0x0 | out: lpBuffer=0x12938880*, lpNumberOfBytesRead=0x12d7a8*=0x296fa, lpOverlapped=0x0) returned 1 [0124.441] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\SpecialOccasion\\whitevignette1047.png", nBufferLength=0x105, lpBuffer=0x12d270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\SpecialOccasion\\whitevignette1047.png", lpFilePart=0x0) returned 0x51 [0124.441] SetErrorMode (uMode=0x1) returned 0x0 [0124.441] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\SpecialOccasion\\whitevignette1047.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\specialoccasion\\whitevignette1047.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0124.443] SetErrorMode (uMode=0x0) returned 0x1 [0124.443] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\SpecialOccasion\\Decrypt Instructions.txt", nBufferLength=0x105, lpBuffer=0x12d240, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\SpecialOccasion\\Decrypt Instructions.txt", lpFilePart=0x0) returned 0x54 [0124.443] SetErrorMode (uMode=0x1) returned 0x0 [0124.443] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\SpecialOccasion\\Decrypt Instructions.txt" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\specialoccasion\\decrypt instructions.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x2e8 [0124.444] SetErrorMode (uMode=0x0) returned 0x1 [0124.444] GetFileType (hFile=0x2e8) returned 0x1 [0124.444] WriteFile (in: hFile=0x2e8, lpBuffer=0x26c7128*, nNumberOfBytesToWrite=0x773, lpNumberOfBytesWritten=0x12d7a8, lpOverlapped=0x0 | out: lpBuffer=0x26c7128*, lpNumberOfBytesWritten=0x12d7a8*=0x773, lpOverlapped=0x0) returned 1 [0124.446] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\SpecialOccasion", nBufferLength=0x105, lpBuffer=0x12d430, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\SpecialOccasion", lpFilePart=0x0) returned 0x3b [0124.446] SetErrorMode (uMode=0x1) returned 0x0 [0124.446] FindFirstFileW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\SpecialOccasion\\*", lpFindFileData=0x12d5d0 | out: lpFindFileData=0x12d5d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa1a65ec8, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x6a3b5970, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x6a3b5970, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x26bc80 [0124.446] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa1a65ec8, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x6a3b5970, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x6a3b5970, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0124.446] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f446eef, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f446eef, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4fc22bf7, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x11da, dwReserved0=0x0, dwReserved1=0x0, cFileName="1047x576black.png", cAlternateFileName="")) returned 1 [0124.446] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a3b5970, ftCreationTime.dwHighDateTime=0x1d5e786, ftLastAccessTime.dwLowDateTime=0x6a3b5970, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x6a3b5970, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x773, dwReserved0=0x0, dwReserved1=0x0, cFileName="Decrypt Instructions.txt", cAlternateFileName="DECRYP~1.TXT")) returned 1 [0124.446] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f4df463, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f4df463, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4fc22bf7, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xca59, dwReserved0=0x0, dwReserved1=0x0, cFileName="mainscroll.png", cAlternateFileName="")) returned 1 [0124.447] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f5e9dee, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f5e9dee, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4fc22bf7, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationLeft_ButtonGraphic.png", cAlternateFileName="")) returned 1 [0124.447] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f60ff4b, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f60ff4b, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4fc95011, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc3a, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationLeft_SelectionSubpicture.png", cAlternateFileName="")) returned 1 [0124.447] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f60ff4b, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f60ff4b, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4fd536e7, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13a1, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationRight_ButtonGraphic.png", cAlternateFileName="")) returned 1 [0124.447] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f6360a8, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f6360a8, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4fd536e7, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc2e, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationRight_SelectionSubpicture.png", cAlternateFileName="")) returned 1 [0124.447] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f65c205, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f65c205, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4fd536e7, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x135b, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationUp_ButtonGraphic.png", cAlternateFileName="")) returned 1 [0124.447] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f65c205, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f65c205, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4fd536e7, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc09, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationUp_SelectionSubpicture.png", cAlternateFileName="")) returned 1 [0124.447] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f52b71d, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f52b71d, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4fd536e7, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x17719, dwReserved0=0x0, dwReserved1=0x0, cFileName="scenesscroll.png", cAlternateFileName="")) returned 1 [0124.447] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f5055c0, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f5055c0, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4fd536e7, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xb30, dwReserved0=0x0, dwReserved1=0x0, cFileName="specialmainsubpicture.png", cAlternateFileName="")) returned 1 [0124.447] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f5c3c91, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f5c3c91, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4fd536e7, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x12cf, dwReserved0=0x0, dwReserved1=0x0, cFileName="SpecialNavigationLeft_ButtonGraphic.png", cAlternateFileName="")) returned 1 [0124.447] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f5c3c91, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f5c3c91, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4fd79845, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xbd6, dwReserved0=0x0, dwReserved1=0x0, cFileName="SpecialNavigationLeft_SelectionSubpicture.png", cAlternateFileName="")) returned 1 [0124.447] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f59db34, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f59db34, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4fd79845, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x12cf, dwReserved0=0x0, dwReserved1=0x0, cFileName="SpecialNavigationRight_ButtonGraphic.png", cAlternateFileName="")) returned 1 [0124.447] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f59db34, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f59db34, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4fd79845, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xbd0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SpecialNavigationRight_SelectionSubpicture.png", cAlternateFileName="")) returned 1 [0124.447] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f55187a, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f55187a, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4fd79845, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x1302, dwReserved0=0x0, dwReserved1=0x0, cFileName="SpecialNavigationUp_ButtonGraphic.png", cAlternateFileName="")) returned 1 [0124.447] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f5779d7, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f5779d7, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ff1c74f, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xbc3, dwReserved0=0x0, dwReserved1=0x0, cFileName="SpecialNavigationUp_SelectionSubpicture.png", cAlternateFileName="")) returned 1 [0124.448] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f3fac35, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f3fac35, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ff1c74f, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x4aa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="specialoccasion.png", cAlternateFileName="")) returned 1 [0124.448] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f4b9306, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f4b9306, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ff1c74f, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x1917, dwReserved0=0x0, dwReserved1=0x0, cFileName="whitemask1047.png", cAlternateFileName="")) returned 1 [0124.448] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f46d04c, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f46d04c, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ff428ad, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x296fa, dwReserved0=0x0, dwReserved1=0x0, cFileName="whitevignette1047.png", cAlternateFileName="")) returned 1 [0124.448] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f46d04c, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f46d04c, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ff428ad, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x296fa, dwReserved0=0x0, dwReserved1=0x0, cFileName="whitevignette1047.png", cAlternateFileName="")) returned 0 [0124.448] FindClose (in: hFindFile=0x26bc80 | out: hFindFile=0x26bc80) returned 1 [0124.448] SetErrorMode (uMode=0x0) returned 0x1 [0124.448] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports", nBufferLength=0x105, lpBuffer=0x12d390, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports", lpFilePart=0x0) returned 0x32 [0124.448] SetErrorMode (uMode=0x1) returned 0x0 [0124.448] FindFirstFileW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\*", lpFindFileData=0x12d530 | out: lpFindFileData=0x12d530*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9fdc8b88, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa86cdff, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa0e2d73a, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x26bc80 [0124.450] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9fdc8b88, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa86cdff, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa0e2d73a, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0124.451] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71ead378, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x71ead378, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ff428ad, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xb5e, dwReserved0=0x0, dwReserved1=0x0, cFileName="CircleSubpicture.png", cAlternateFileName="")) returned 1 [0124.451] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71ed34d5, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x71ed34d5, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ff428ad, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x120d, dwReserved0=0x0, dwReserved1=0x0, cFileName="GoldRing.png", cAlternateFileName="")) returned 1 [0124.451] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71338a7f, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x71338a7f, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ff428ad, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x6d3c, dwReserved0=0x0, dwReserved1=0x0, cFileName="highlight.png", cAlternateFileName="")) returned 1 [0124.451] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71ef9632, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x71ef9632, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ff428ad, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xba2, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationButtonSubpicture.png", cAlternateFileName="")) returned 1 [0124.451] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71ef9632, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x71ef9632, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ff428ad, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xee0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NextMenuButtonIcon.png", cAlternateFileName="")) returned 1 [0124.451] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71f1f78f, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x71f1f78f, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ff428ad, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xee2, dwReserved0=0x0, dwReserved1=0x0, cFileName="ParentMenuButtonIcon.png", cAlternateFileName="")) returned 1 [0124.451] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71f1f78f, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x71f1f78f, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ff428ad, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xeeb, dwReserved0=0x0, dwReserved1=0x0, cFileName="PreviousMenuButtonIcon.png", cAlternateFileName="")) returned 1 [0124.451] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71f458ec, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x71f458ec, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ff68a0b, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc3d, dwReserved0=0x0, dwReserved1=0x0, cFileName="SceneButtonInset_Alpha1.png", cAlternateFileName="")) returned 1 [0124.451] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71f6ba49, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x71f6ba49, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ff68a0b, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xdbe, dwReserved0=0x0, dwReserved1=0x0, cFileName="SceneButtonInset_Alpha2.png", cAlternateFileName="")) returned 1 [0124.452] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71e8721b, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x71e8721b, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ff68a0b, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc2f, dwReserved0=0x0, dwReserved1=0x0, cFileName="SceneButtonSubpicture.png", cAlternateFileName="")) returned 1 [0124.452] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71893b93, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x71893b93, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x500e57b7, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x539540, dwReserved0=0x0, dwReserved1=0x0, cFileName="SportsMainBackground.wmv", cAlternateFileName="")) returned 1 [0124.452] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71aa8ea9, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x71aa8ea9, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x502ae81f, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x57bbc0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SportsMainBackground_PAL.wmv", cAlternateFileName="")) returned 1 [0124.452] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71c25c4b, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x71c25c4b, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x50320c39, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x1beae6, dwReserved0=0x0, dwReserved1=0x0, cFileName="SportsMainToNotesBackground.wmv", cAlternateFileName="")) returned 1 [0124.452] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71cbe1bf, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x71cbe1bf, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x50393053, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x1c0a26, dwReserved0=0x0, dwReserved1=0x0, cFileName="SportsMainToNotesBackground_PAL.wmv", cAlternateFileName="")) returned 1 [0124.452] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71d7c890, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x71d7c890, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x504c3b43, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x184166, dwReserved0=0x0, dwReserved1=0x0, cFileName="SportsMainToScenesBackground.wmv", cAlternateFileName="")) returned 1 [0124.452] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71deeca7, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x71deeca7, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x50add351, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x189f26, dwReserved0=0x0, dwReserved1=0x0, cFileName="SportsMainToScenesBackground_PAL.wmv", cAlternateFileName="")) returned 1 [0124.452] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x713aae96, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x713aae96, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x514fb049, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x6680f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="SportsNotesBackground.wmv", cAlternateFileName="")) returned 1 [0124.452] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71501adb, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x71501adb, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x5206f98f, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x673c74, dwReserved0=0x0, dwReserved1=0x0, cFileName="SportsNotesBackground_PAL.wmv", cAlternateFileName="")) returned 1 [0124.452] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x716a49da, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x716a49da, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x522f70cd, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x2ca474, dwReserved0=0x0, dwReserved1=0x0, cFileName="SportsScenesBackground.wmv", cAlternateFileName="")) returned 1 [0124.452] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71789208, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x71789208, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x524e6293, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x2e59f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="SportsScenesBackground_PAL.wmv", cAlternateFileName="")) returned 1 [0124.453] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71384d39, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x71384d39, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ff68a0b, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x23d2, dwReserved0=0x0, dwReserved1=0x0, cFileName="sports_disc_mask.png", cAlternateFileName="")) returned 1 [0124.453] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71384d39, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x71384d39, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ff68a0b, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x23d2, dwReserved0=0x0, dwReserved1=0x0, cFileName="sports_disc_mask.png", cAlternateFileName="")) returned 0 [0124.453] FindClose (in: hFindFile=0x26bc80 | out: hFindFile=0x26bc80) returned 1 [0124.454] SetErrorMode (uMode=0x0) returned 0x1 [0124.454] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\CircleSubpicture.png", nBufferLength=0x105, lpBuffer=0x12d5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\CircleSubpicture.png", lpFilePart=0x0) returned 0x47 [0124.454] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\CircleSubpicture.png", nBufferLength=0x105, lpBuffer=0x12d590, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\CircleSubpicture.png", lpFilePart=0x0) returned 0x47 [0124.455] SetErrorMode (uMode=0x1) returned 0x0 [0124.455] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\CircleSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\sports\\circlesubpicture.png"), fInfoLevelId=0x0, lpFileInformation=0x12d810 | out: lpFileInformation=0x12d810*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71ead378, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x71ead378, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ff428ad, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xb5e)) returned 1 [0124.456] SetErrorMode (uMode=0x0) returned 0x1 [0124.456] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\CircleSubpicture.png", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\CircleSubpicture.png", lpFilePart=0x0) returned 0x47 [0124.456] SetErrorMode (uMode=0x1) returned 0x0 [0124.456] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\CircleSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\sports\\circlesubpicture.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2e8 [0124.456] SetErrorMode (uMode=0x0) returned 0x1 [0124.456] GetFileType (hFile=0x2e8) returned 0x1 [0124.456] GetFileSize (in: hFile=0x2e8, lpFileSizeHigh=0x12d8c8 | out: lpFileSizeHigh=0x12d8c8*=0x0) returned 0xb5e [0124.456] ReadFile (in: hFile=0x2e8, lpBuffer=0x26cd670, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12d7a8, lpOverlapped=0x0 | out: lpBuffer=0x26cd670*, lpNumberOfBytesRead=0x12d7a8*=0xb5e, lpOverlapped=0x0) returned 1 [0124.475] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\CircleSubpicture.png", nBufferLength=0x105, lpBuffer=0x12d270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\CircleSubpicture.png", lpFilePart=0x0) returned 0x47 [0124.475] SetErrorMode (uMode=0x1) returned 0x0 [0124.475] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\CircleSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\sports\\circlesubpicture.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0124.477] SetErrorMode (uMode=0x0) returned 0x1 [0124.477] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\GoldRing.png", nBufferLength=0x105, lpBuffer=0x12d5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\GoldRing.png", lpFilePart=0x0) returned 0x3f [0124.477] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\GoldRing.png", nBufferLength=0x105, lpBuffer=0x12d590, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\GoldRing.png", lpFilePart=0x0) returned 0x3f [0124.477] SetErrorMode (uMode=0x1) returned 0x0 [0124.477] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\GoldRing.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\sports\\goldring.png"), fInfoLevelId=0x0, lpFileInformation=0x12d810 | out: lpFileInformation=0x12d810*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71ed34d5, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x71ed34d5, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ff428ad, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x120d)) returned 1 [0124.480] SetErrorMode (uMode=0x0) returned 0x1 [0124.480] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\GoldRing.png", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\GoldRing.png", lpFilePart=0x0) returned 0x3f [0124.480] SetErrorMode (uMode=0x1) returned 0x0 [0124.480] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\GoldRing.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\sports\\goldring.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2e8 [0124.480] SetErrorMode (uMode=0x0) returned 0x1 [0124.480] GetFileType (hFile=0x2e8) returned 0x1 [0124.480] GetFileSize (in: hFile=0x2e8, lpFileSizeHigh=0x12d8c8 | out: lpFileSizeHigh=0x12d8c8*=0x0) returned 0x120d [0124.480] ReadFile (in: hFile=0x2e8, lpBuffer=0x27b3578, nNumberOfBytesToRead=0x120d, lpNumberOfBytesRead=0x12d7a8, lpOverlapped=0x0 | out: lpBuffer=0x27b3578*, lpNumberOfBytesRead=0x12d7a8*=0x120d, lpOverlapped=0x0) returned 1 [0124.500] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\GoldRing.png", nBufferLength=0x105, lpBuffer=0x12d270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\GoldRing.png", lpFilePart=0x0) returned 0x3f [0124.500] SetErrorMode (uMode=0x1) returned 0x0 [0124.500] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\GoldRing.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\sports\\goldring.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0124.502] SetErrorMode (uMode=0x0) returned 0x1 [0124.502] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\highlight.png", nBufferLength=0x105, lpBuffer=0x12d5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\highlight.png", lpFilePart=0x0) returned 0x40 [0124.502] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\highlight.png", nBufferLength=0x105, lpBuffer=0x12d590, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\highlight.png", lpFilePart=0x0) returned 0x40 [0124.502] SetErrorMode (uMode=0x1) returned 0x0 [0124.502] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\highlight.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\sports\\highlight.png"), fInfoLevelId=0x0, lpFileInformation=0x12d810 | out: lpFileInformation=0x12d810*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71338a7f, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x71338a7f, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ff428ad, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x6d3c)) returned 1 [0124.503] SetErrorMode (uMode=0x0) returned 0x1 [0124.505] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\highlight.png", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\highlight.png", lpFilePart=0x0) returned 0x40 [0124.505] SetErrorMode (uMode=0x1) returned 0x0 [0124.505] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\highlight.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\sports\\highlight.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2e8 [0124.505] SetErrorMode (uMode=0x0) returned 0x1 [0124.505] GetFileType (hFile=0x2e8) returned 0x1 [0124.506] GetFileSize (in: hFile=0x2e8, lpFileSizeHigh=0x12d8c8 | out: lpFileSizeHigh=0x12d8c8*=0x0) returned 0x6d3c [0124.506] ReadFile (in: hFile=0x2e8, lpBuffer=0x289b4c8, nNumberOfBytesToRead=0x6d3c, lpNumberOfBytesRead=0x12d7a8, lpOverlapped=0x0 | out: lpBuffer=0x289b4c8*, lpNumberOfBytesRead=0x12d7a8*=0x6d3c, lpOverlapped=0x0) returned 1 [0124.527] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\highlight.png", nBufferLength=0x105, lpBuffer=0x12d270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\highlight.png", lpFilePart=0x0) returned 0x40 [0124.527] SetErrorMode (uMode=0x1) returned 0x0 [0124.527] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\highlight.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\sports\\highlight.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0124.529] SetErrorMode (uMode=0x0) returned 0x1 [0124.529] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\NavigationButtonSubpicture.png", nBufferLength=0x105, lpBuffer=0x12d5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\NavigationButtonSubpicture.png", lpFilePart=0x0) returned 0x51 [0124.529] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\NavigationButtonSubpicture.png", nBufferLength=0x105, lpBuffer=0x12d590, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\NavigationButtonSubpicture.png", lpFilePart=0x0) returned 0x51 [0124.530] SetErrorMode (uMode=0x1) returned 0x0 [0124.530] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\NavigationButtonSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\sports\\navigationbuttonsubpicture.png"), fInfoLevelId=0x0, lpFileInformation=0x12d810 | out: lpFileInformation=0x12d810*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71ef9632, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x71ef9632, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ff428ad, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xba2)) returned 1 [0124.530] SetErrorMode (uMode=0x0) returned 0x1 [0124.530] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\NavigationButtonSubpicture.png", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\NavigationButtonSubpicture.png", lpFilePart=0x0) returned 0x51 [0124.530] SetErrorMode (uMode=0x1) returned 0x0 [0124.530] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\NavigationButtonSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\sports\\navigationbuttonsubpicture.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2e8 [0124.530] SetErrorMode (uMode=0x0) returned 0x1 [0124.531] GetFileType (hFile=0x2e8) returned 0x1 [0124.531] GetFileSize (in: hFile=0x2e8, lpFileSizeHigh=0x12d8c8 | out: lpFileSizeHigh=0x12d8c8*=0x0) returned 0xba2 [0124.531] ReadFile (in: hFile=0x2e8, lpBuffer=0x27af418, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12d7a8, lpOverlapped=0x0 | out: lpBuffer=0x27af418*, lpNumberOfBytesRead=0x12d7a8*=0xba2, lpOverlapped=0x0) returned 1 [0124.546] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\NavigationButtonSubpicture.png", nBufferLength=0x105, lpBuffer=0x12d270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\NavigationButtonSubpicture.png", lpFilePart=0x0) returned 0x51 [0124.546] SetErrorMode (uMode=0x1) returned 0x0 [0124.546] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\NavigationButtonSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\sports\\navigationbuttonsubpicture.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0124.547] SetErrorMode (uMode=0x0) returned 0x1 [0124.548] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\NextMenuButtonIcon.png", nBufferLength=0x105, lpBuffer=0x12d5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\NextMenuButtonIcon.png", lpFilePart=0x0) returned 0x49 [0124.548] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\NextMenuButtonIcon.png", nBufferLength=0x105, lpBuffer=0x12d590, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\NextMenuButtonIcon.png", lpFilePart=0x0) returned 0x49 [0124.548] SetErrorMode (uMode=0x1) returned 0x0 [0124.548] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\NextMenuButtonIcon.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\sports\\nextmenubuttonicon.png"), fInfoLevelId=0x0, lpFileInformation=0x12d810 | out: lpFileInformation=0x12d810*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71ef9632, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x71ef9632, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ff428ad, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xee0)) returned 1 [0124.548] SetErrorMode (uMode=0x0) returned 0x1 [0124.548] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\NextMenuButtonIcon.png", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\NextMenuButtonIcon.png", lpFilePart=0x0) returned 0x49 [0124.549] SetErrorMode (uMode=0x1) returned 0x0 [0124.549] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\NextMenuButtonIcon.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\sports\\nextmenubuttonicon.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2e8 [0124.549] SetErrorMode (uMode=0x0) returned 0x1 [0124.549] GetFileType (hFile=0x2e8) returned 0x1 [0124.549] GetFileSize (in: hFile=0x2e8, lpFileSizeHigh=0x12d8c8 | out: lpFileSizeHigh=0x12d8c8*=0x0) returned 0xee0 [0124.549] ReadFile (in: hFile=0x2e8, lpBuffer=0x2896480, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12d7a8, lpOverlapped=0x0 | out: lpBuffer=0x2896480*, lpNumberOfBytesRead=0x12d7a8*=0xee0, lpOverlapped=0x0) returned 1 [0124.569] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\NextMenuButtonIcon.png", nBufferLength=0x105, lpBuffer=0x12d270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\NextMenuButtonIcon.png", lpFilePart=0x0) returned 0x49 [0124.570] SetErrorMode (uMode=0x1) returned 0x0 [0124.570] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\NextMenuButtonIcon.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\sports\\nextmenubuttonicon.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0124.571] SetErrorMode (uMode=0x0) returned 0x1 [0124.571] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\ParentMenuButtonIcon.png", nBufferLength=0x105, lpBuffer=0x12d5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\ParentMenuButtonIcon.png", lpFilePart=0x0) returned 0x4b [0124.572] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\ParentMenuButtonIcon.png", nBufferLength=0x105, lpBuffer=0x12d590, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\ParentMenuButtonIcon.png", lpFilePart=0x0) returned 0x4b [0124.572] SetErrorMode (uMode=0x1) returned 0x0 [0124.572] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\ParentMenuButtonIcon.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\sports\\parentmenubuttonicon.png"), fInfoLevelId=0x0, lpFileInformation=0x12d810 | out: lpFileInformation=0x12d810*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71f1f78f, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x71f1f78f, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ff428ad, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xee2)) returned 1 [0124.573] SetErrorMode (uMode=0x0) returned 0x1 [0124.573] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\ParentMenuButtonIcon.png", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\ParentMenuButtonIcon.png", lpFilePart=0x0) returned 0x4b [0124.573] SetErrorMode (uMode=0x1) returned 0x0 [0124.574] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\ParentMenuButtonIcon.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\sports\\parentmenubuttonicon.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2e8 [0124.574] SetErrorMode (uMode=0x0) returned 0x1 [0124.574] GetFileType (hFile=0x2e8) returned 0x1 [0124.574] GetFileSize (in: hFile=0x2e8, lpFileSizeHigh=0x12d8c8 | out: lpFileSizeHigh=0x12d8c8*=0x0) returned 0xee2 [0124.574] ReadFile (in: hFile=0x2e8, lpBuffer=0x278d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12d7a8, lpOverlapped=0x0 | out: lpBuffer=0x278d648*, lpNumberOfBytesRead=0x12d7a8*=0xee2, lpOverlapped=0x0) returned 1 [0124.589] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\ParentMenuButtonIcon.png", nBufferLength=0x105, lpBuffer=0x12d270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\ParentMenuButtonIcon.png", lpFilePart=0x0) returned 0x4b [0124.589] SetErrorMode (uMode=0x1) returned 0x0 [0124.590] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\ParentMenuButtonIcon.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\sports\\parentmenubuttonicon.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0124.591] SetErrorMode (uMode=0x0) returned 0x1 [0124.591] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\PreviousMenuButtonIcon.png", nBufferLength=0x105, lpBuffer=0x12d5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\PreviousMenuButtonIcon.png", lpFilePart=0x0) returned 0x4d [0124.592] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\PreviousMenuButtonIcon.png", nBufferLength=0x105, lpBuffer=0x12d590, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\PreviousMenuButtonIcon.png", lpFilePart=0x0) returned 0x4d [0124.592] SetErrorMode (uMode=0x1) returned 0x0 [0124.592] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\PreviousMenuButtonIcon.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\sports\\previousmenubuttonicon.png"), fInfoLevelId=0x0, lpFileInformation=0x12d810 | out: lpFileInformation=0x12d810*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71f1f78f, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x71f1f78f, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ff428ad, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xeeb)) returned 1 [0124.592] SetErrorMode (uMode=0x0) returned 0x1 [0124.592] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\PreviousMenuButtonIcon.png", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\PreviousMenuButtonIcon.png", lpFilePart=0x0) returned 0x4d [0124.593] SetErrorMode (uMode=0x1) returned 0x0 [0124.593] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\PreviousMenuButtonIcon.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\sports\\previousmenubuttonicon.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2e8 [0124.593] SetErrorMode (uMode=0x0) returned 0x1 [0124.593] GetFileType (hFile=0x2e8) returned 0x1 [0124.593] GetFileSize (in: hFile=0x2e8, lpFileSizeHigh=0x12d8c8 | out: lpFileSizeHigh=0x12d8c8*=0x0) returned 0xeeb [0124.593] ReadFile (in: hFile=0x2e8, lpBuffer=0x28756e8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12d7a8, lpOverlapped=0x0 | out: lpBuffer=0x28756e8*, lpNumberOfBytesRead=0x12d7a8*=0xeeb, lpOverlapped=0x0) returned 1 [0124.612] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\PreviousMenuButtonIcon.png", nBufferLength=0x105, lpBuffer=0x12d270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\PreviousMenuButtonIcon.png", lpFilePart=0x0) returned 0x4d [0124.612] SetErrorMode (uMode=0x1) returned 0x0 [0124.612] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\PreviousMenuButtonIcon.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\sports\\previousmenubuttonicon.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0124.613] SetErrorMode (uMode=0x0) returned 0x1 [0124.614] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\SceneButtonInset_Alpha1.png", nBufferLength=0x105, lpBuffer=0x12d5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\SceneButtonInset_Alpha1.png", lpFilePart=0x0) returned 0x4e [0124.614] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\SceneButtonInset_Alpha1.png", nBufferLength=0x105, lpBuffer=0x12d590, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\SceneButtonInset_Alpha1.png", lpFilePart=0x0) returned 0x4e [0124.614] SetErrorMode (uMode=0x1) returned 0x0 [0124.614] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\SceneButtonInset_Alpha1.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\sports\\scenebuttoninset_alpha1.png"), fInfoLevelId=0x0, lpFileInformation=0x12d810 | out: lpFileInformation=0x12d810*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71f458ec, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x71f458ec, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ff68a0b, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc3d)) returned 1 [0124.614] SetErrorMode (uMode=0x0) returned 0x1 [0124.615] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\SceneButtonInset_Alpha1.png", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\SceneButtonInset_Alpha1.png", lpFilePart=0x0) returned 0x4e [0124.615] SetErrorMode (uMode=0x1) returned 0x0 [0124.615] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\SceneButtonInset_Alpha1.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\sports\\scenebuttoninset_alpha1.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2e8 [0124.615] SetErrorMode (uMode=0x0) returned 0x1 [0124.615] GetFileType (hFile=0x2e8) returned 0x1 [0124.615] GetFileSize (in: hFile=0x2e8, lpFileSizeHigh=0x12d8c8 | out: lpFileSizeHigh=0x12d8c8*=0x0) returned 0xc3d [0124.615] ReadFile (in: hFile=0x2e8, lpBuffer=0x27609e8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12d7a8, lpOverlapped=0x0 | out: lpBuffer=0x27609e8*, lpNumberOfBytesRead=0x12d7a8*=0xc3d, lpOverlapped=0x0) returned 1 [0124.631] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\SceneButtonInset_Alpha1.png", nBufferLength=0x105, lpBuffer=0x12d270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\SceneButtonInset_Alpha1.png", lpFilePart=0x0) returned 0x4e [0124.631] SetErrorMode (uMode=0x1) returned 0x0 [0124.631] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\SceneButtonInset_Alpha1.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\sports\\scenebuttoninset_alpha1.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0124.633] SetErrorMode (uMode=0x0) returned 0x1 [0124.633] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\SceneButtonInset_Alpha2.png", nBufferLength=0x105, lpBuffer=0x12d5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\SceneButtonInset_Alpha2.png", lpFilePart=0x0) returned 0x4e [0124.633] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\SceneButtonInset_Alpha2.png", nBufferLength=0x105, lpBuffer=0x12d590, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\SceneButtonInset_Alpha2.png", lpFilePart=0x0) returned 0x4e [0124.633] SetErrorMode (uMode=0x1) returned 0x0 [0124.633] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\SceneButtonInset_Alpha2.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\sports\\scenebuttoninset_alpha2.png"), fInfoLevelId=0x0, lpFileInformation=0x12d810 | out: lpFileInformation=0x12d810*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71f6ba49, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x71f6ba49, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ff68a0b, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xdbe)) returned 1 [0124.634] SetErrorMode (uMode=0x0) returned 0x1 [0124.634] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\SceneButtonInset_Alpha2.png", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\SceneButtonInset_Alpha2.png", lpFilePart=0x0) returned 0x4e [0124.634] SetErrorMode (uMode=0x1) returned 0x0 [0124.634] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\SceneButtonInset_Alpha2.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\sports\\scenebuttoninset_alpha2.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2e8 [0124.634] SetErrorMode (uMode=0x0) returned 0x1 [0124.634] GetFileType (hFile=0x2e8) returned 0x1 [0124.634] GetFileSize (in: hFile=0x2e8, lpFileSizeHigh=0x12d8c8 | out: lpFileSizeHigh=0x12d8c8*=0x0) returned 0xdbe [0124.634] ReadFile (in: hFile=0x2e8, lpBuffer=0x2847c00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12d7a8, lpOverlapped=0x0 | out: lpBuffer=0x2847c00*, lpNumberOfBytesRead=0x12d7a8*=0xdbe, lpOverlapped=0x0) returned 1 [0124.655] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\SceneButtonInset_Alpha2.png", nBufferLength=0x105, lpBuffer=0x12d270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\SceneButtonInset_Alpha2.png", lpFilePart=0x0) returned 0x4e [0124.655] SetErrorMode (uMode=0x1) returned 0x0 [0124.655] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\SceneButtonInset_Alpha2.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\sports\\scenebuttoninset_alpha2.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0124.656] SetErrorMode (uMode=0x0) returned 0x1 [0124.657] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\SceneButtonSubpicture.png", nBufferLength=0x105, lpBuffer=0x12d5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\SceneButtonSubpicture.png", lpFilePart=0x0) returned 0x4c [0124.657] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\SceneButtonSubpicture.png", nBufferLength=0x105, lpBuffer=0x12d590, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\SceneButtonSubpicture.png", lpFilePart=0x0) returned 0x4c [0124.657] SetErrorMode (uMode=0x1) returned 0x0 [0124.657] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\SceneButtonSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\sports\\scenebuttonsubpicture.png"), fInfoLevelId=0x0, lpFileInformation=0x12d810 | out: lpFileInformation=0x12d810*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71e8721b, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x71e8721b, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ff68a0b, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc2f)) returned 1 [0124.671] SetErrorMode (uMode=0x0) returned 0x1 [0124.671] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\SceneButtonSubpicture.png", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\SceneButtonSubpicture.png", lpFilePart=0x0) returned 0x4c [0124.671] SetErrorMode (uMode=0x1) returned 0x0 [0124.672] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\SceneButtonSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\sports\\scenebuttonsubpicture.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2e8 [0124.672] SetErrorMode (uMode=0x0) returned 0x1 [0124.672] GetFileType (hFile=0x2e8) returned 0x1 [0124.672] GetFileSize (in: hFile=0x2e8, lpFileSizeHigh=0x12d8c8 | out: lpFileSizeHigh=0x12d8c8*=0x0) returned 0xc2f [0124.672] ReadFile (in: hFile=0x2e8, lpBuffer=0x2732808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12d7a8, lpOverlapped=0x0 | out: lpBuffer=0x2732808*, lpNumberOfBytesRead=0x12d7a8*=0xc2f, lpOverlapped=0x0) returned 1 [0124.688] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\SceneButtonSubpicture.png", nBufferLength=0x105, lpBuffer=0x12d270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\SceneButtonSubpicture.png", lpFilePart=0x0) returned 0x4c [0124.688] SetErrorMode (uMode=0x1) returned 0x0 [0124.688] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\SceneButtonSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\sports\\scenebuttonsubpicture.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0124.689] SetErrorMode (uMode=0x0) returned 0x1 [0124.689] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\SportsMainBackground.wmv", nBufferLength=0x105, lpBuffer=0x12d5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\SportsMainBackground.wmv", lpFilePart=0x0) returned 0x4b [0124.690] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\SportsMainBackground.wmv", nBufferLength=0x105, lpBuffer=0x12d590, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\SportsMainBackground.wmv", lpFilePart=0x0) returned 0x4b [0124.690] SetErrorMode (uMode=0x1) returned 0x0 [0124.690] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\SportsMainBackground.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\sports\\sportsmainbackground.wmv"), fInfoLevelId=0x0, lpFileInformation=0x12d810 | out: lpFileInformation=0x12d810*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71893b93, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x71893b93, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x500e57b7, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x539540)) returned 1 [0124.690] SetErrorMode (uMode=0x0) returned 0x1 [0124.690] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\SportsMainBackground.wmv", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\SportsMainBackground.wmv", lpFilePart=0x0) returned 0x4b [0124.690] SetErrorMode (uMode=0x1) returned 0x0 [0124.690] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\SportsMainBackground.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\sports\\sportsmainbackground.wmv"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2e8 [0124.691] SetErrorMode (uMode=0x0) returned 0x1 [0124.691] GetFileType (hFile=0x2e8) returned 0x1 [0124.691] GetFileSize (in: hFile=0x2e8, lpFileSizeHigh=0x12d8c8 | out: lpFileSizeHigh=0x12d8c8*=0x0) returned 0x539540 [0124.706] ReadFile (in: hFile=0x2e8, lpBuffer=0x1298b6b8, nNumberOfBytesToRead=0x539540, lpNumberOfBytesRead=0x12d7a8, lpOverlapped=0x0 | out: lpBuffer=0x1298b6b8*, lpNumberOfBytesRead=0x12d7a8*=0x539540, lpOverlapped=0x0) returned 1 [0125.480] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\SportsMainBackground.wmv", nBufferLength=0x105, lpBuffer=0x12d270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\SportsMainBackground.wmv", lpFilePart=0x0) returned 0x4b [0125.480] SetErrorMode (uMode=0x1) returned 0x0 [0125.480] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\SportsMainBackground.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\sports\\sportsmainbackground.wmv"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0125.482] SetErrorMode (uMode=0x0) returned 0x1 [0125.483] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\SportsMainBackground_PAL.wmv", nBufferLength=0x105, lpBuffer=0x12d5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\SportsMainBackground_PAL.wmv", lpFilePart=0x0) returned 0x4f [0125.483] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\SportsMainBackground_PAL.wmv", nBufferLength=0x105, lpBuffer=0x12d590, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\SportsMainBackground_PAL.wmv", lpFilePart=0x0) returned 0x4f [0125.483] SetErrorMode (uMode=0x1) returned 0x0 [0125.483] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\SportsMainBackground_PAL.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\sports\\sportsmainbackground_pal.wmv"), fInfoLevelId=0x0, lpFileInformation=0x12d810 | out: lpFileInformation=0x12d810*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71aa8ea9, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x71aa8ea9, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x502ae81f, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x57bbc0)) returned 1 [0125.483] SetErrorMode (uMode=0x0) returned 0x1 [0125.484] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\SportsMainBackground_PAL.wmv", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\SportsMainBackground_PAL.wmv", lpFilePart=0x0) returned 0x4f [0125.484] SetErrorMode (uMode=0x1) returned 0x0 [0125.484] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\SportsMainBackground_PAL.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\sports\\sportsmainbackground_pal.wmv"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2e8 [0125.484] SetErrorMode (uMode=0x0) returned 0x1 [0125.484] GetFileType (hFile=0x2e8) returned 0x1 [0125.484] GetFileSize (in: hFile=0x2e8, lpFileSizeHigh=0x12d8c8 | out: lpFileSizeHigh=0x12d8c8*=0x0) returned 0x57bbc0 [0125.510] ReadFile (in: hFile=0x2e8, lpBuffer=0x12bba120, nNumberOfBytesToRead=0x57bbc0, lpNumberOfBytesRead=0x12d7a8, lpOverlapped=0x0 | out: lpBuffer=0x12bba120*, lpNumberOfBytesRead=0x12d7a8*=0x57bbc0, lpOverlapped=0x0) returned 1 [0126.379] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\SportsMainBackground_PAL.wmv", nBufferLength=0x105, lpBuffer=0x12d270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\SportsMainBackground_PAL.wmv", lpFilePart=0x0) returned 0x4f [0126.379] SetErrorMode (uMode=0x1) returned 0x0 [0126.379] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\SportsMainBackground_PAL.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\sports\\sportsmainbackground_pal.wmv"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0126.381] SetErrorMode (uMode=0x0) returned 0x1 [0126.381] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\SportsMainToNotesBackground.wmv", nBufferLength=0x105, lpBuffer=0x12d5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\SportsMainToNotesBackground.wmv", lpFilePart=0x0) returned 0x52 [0126.381] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\SportsMainToNotesBackground.wmv", nBufferLength=0x105, lpBuffer=0x12d590, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\SportsMainToNotesBackground.wmv", lpFilePart=0x0) returned 0x52 [0126.381] SetErrorMode (uMode=0x1) returned 0x0 [0126.381] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\SportsMainToNotesBackground.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\sports\\sportsmaintonotesbackground.wmv"), fInfoLevelId=0x0, lpFileInformation=0x12d810 | out: lpFileInformation=0x12d810*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71c25c4b, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x71c25c4b, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x50320c39, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x1beae6)) returned 1 [0126.382] SetErrorMode (uMode=0x0) returned 0x1 [0126.382] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\SportsMainToNotesBackground.wmv", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\SportsMainToNotesBackground.wmv", lpFilePart=0x0) returned 0x52 [0126.382] SetErrorMode (uMode=0x1) returned 0x0 [0126.382] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\SportsMainToNotesBackground.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\sports\\sportsmaintonotesbackground.wmv"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2e8 [0126.382] SetErrorMode (uMode=0x0) returned 0x1 [0126.382] GetFileType (hFile=0x2e8) returned 0x1 [0126.382] GetFileSize (in: hFile=0x2e8, lpFileSizeHigh=0x12d8c8 | out: lpFileSizeHigh=0x12d8c8*=0x0) returned 0x1beae6 [0126.388] ReadFile (in: hFile=0x2e8, lpBuffer=0x14ca0870, nNumberOfBytesToRead=0x1beae6, lpNumberOfBytesRead=0x12d7a8, lpOverlapped=0x0 | out: lpBuffer=0x14ca0870*, lpNumberOfBytesRead=0x12d7a8*=0x1beae6, lpOverlapped=0x0) returned 1 [0126.641] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\SportsMainToNotesBackground.wmv", nBufferLength=0x105, lpBuffer=0x12d270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\SportsMainToNotesBackground.wmv", lpFilePart=0x0) returned 0x52 [0126.641] SetErrorMode (uMode=0x1) returned 0x0 [0126.641] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\SportsMainToNotesBackground.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\sports\\sportsmaintonotesbackground.wmv"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0126.642] SetErrorMode (uMode=0x0) returned 0x1 [0126.643] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\SportsMainToNotesBackground_PAL.wmv", nBufferLength=0x105, lpBuffer=0x12d5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\SportsMainToNotesBackground_PAL.wmv", lpFilePart=0x0) returned 0x56 [0126.643] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\SportsMainToNotesBackground_PAL.wmv", nBufferLength=0x105, lpBuffer=0x12d590, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\SportsMainToNotesBackground_PAL.wmv", lpFilePart=0x0) returned 0x56 [0126.643] SetErrorMode (uMode=0x1) returned 0x0 [0126.643] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\SportsMainToNotesBackground_PAL.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\sports\\sportsmaintonotesbackground_pal.wmv"), fInfoLevelId=0x0, lpFileInformation=0x12d810 | out: lpFileInformation=0x12d810*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71cbe1bf, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x71cbe1bf, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x50393053, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x1c0a26)) returned 1 [0126.646] SetErrorMode (uMode=0x0) returned 0x1 [0126.646] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\SportsMainToNotesBackground_PAL.wmv", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\SportsMainToNotesBackground_PAL.wmv", lpFilePart=0x0) returned 0x56 [0126.646] SetErrorMode (uMode=0x1) returned 0x0 [0126.646] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\SportsMainToNotesBackground_PAL.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\sports\\sportsmaintonotesbackground_pal.wmv"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2e8 [0126.646] SetErrorMode (uMode=0x0) returned 0x1 [0126.646] GetFileType (hFile=0x2e8) returned 0x1 [0126.646] GetFileSize (in: hFile=0x2e8, lpFileSizeHigh=0x12d8c8 | out: lpFileSizeHigh=0x12d8c8*=0x0) returned 0x1c0a26 [0126.652] ReadFile (in: hFile=0x2e8, lpBuffer=0x15718ab8, nNumberOfBytesToRead=0x1c0a26, lpNumberOfBytesRead=0x12d7a8, lpOverlapped=0x0 | out: lpBuffer=0x15718ab8*, lpNumberOfBytesRead=0x12d7a8*=0x1c0a26, lpOverlapped=0x0) returned 1 [0127.013] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\SportsMainToNotesBackground_PAL.wmv", nBufferLength=0x105, lpBuffer=0x12d270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\SportsMainToNotesBackground_PAL.wmv", lpFilePart=0x0) returned 0x56 [0127.013] SetErrorMode (uMode=0x1) returned 0x0 [0127.014] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\SportsMainToNotesBackground_PAL.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\sports\\sportsmaintonotesbackground_pal.wmv"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0127.015] SetErrorMode (uMode=0x0) returned 0x1 [0127.015] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\SportsMainToScenesBackground.wmv", nBufferLength=0x105, lpBuffer=0x12d5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\SportsMainToScenesBackground.wmv", lpFilePart=0x0) returned 0x53 [0127.015] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\SportsMainToScenesBackground.wmv", nBufferLength=0x105, lpBuffer=0x12d590, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\SportsMainToScenesBackground.wmv", lpFilePart=0x0) returned 0x53 [0127.015] SetErrorMode (uMode=0x1) returned 0x0 [0127.015] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\SportsMainToScenesBackground.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\sports\\sportsmaintoscenesbackground.wmv"), fInfoLevelId=0x0, lpFileInformation=0x12d810 | out: lpFileInformation=0x12d810*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71d7c890, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x71d7c890, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x504c3b43, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x184166)) returned 1 [0127.016] SetErrorMode (uMode=0x0) returned 0x1 [0127.016] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\SportsMainToScenesBackground.wmv", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\SportsMainToScenesBackground.wmv", lpFilePart=0x0) returned 0x53 [0127.016] SetErrorMode (uMode=0x1) returned 0x0 [0127.016] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\SportsMainToScenesBackground.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\sports\\sportsmaintoscenesbackground.wmv"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2e8 [0127.016] SetErrorMode (uMode=0x0) returned 0x1 [0127.016] GetFileType (hFile=0x2e8) returned 0x1 [0127.016] GetFileSize (in: hFile=0x2e8, lpFileSizeHigh=0x12d8c8 | out: lpFileSizeHigh=0x12d8c8*=0x0) returned 0x184166 [0127.023] ReadFile (in: hFile=0x2e8, lpBuffer=0x12841600, nNumberOfBytesToRead=0x184166, lpNumberOfBytesRead=0x12d7a8, lpOverlapped=0x0 | out: lpBuffer=0x12841600*, lpNumberOfBytesRead=0x12d7a8*=0x184166, lpOverlapped=0x0) returned 1 [0127.573] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\SportsMainToScenesBackground.wmv", nBufferLength=0x105, lpBuffer=0x12d270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\SportsMainToScenesBackground.wmv", lpFilePart=0x0) returned 0x53 [0127.573] SetErrorMode (uMode=0x1) returned 0x0 [0127.573] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\SportsMainToScenesBackground.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\sports\\sportsmaintoscenesbackground.wmv"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0127.575] SetErrorMode (uMode=0x0) returned 0x1 [0127.577] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\SportsMainToScenesBackground_PAL.wmv", nBufferLength=0x105, lpBuffer=0x12d5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\SportsMainToScenesBackground_PAL.wmv", lpFilePart=0x0) returned 0x57 [0127.577] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\SportsMainToScenesBackground_PAL.wmv", nBufferLength=0x105, lpBuffer=0x12d590, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\SportsMainToScenesBackground_PAL.wmv", lpFilePart=0x0) returned 0x57 [0127.578] SetErrorMode (uMode=0x1) returned 0x0 [0127.578] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\SportsMainToScenesBackground_PAL.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\sports\\sportsmaintoscenesbackground_pal.wmv"), fInfoLevelId=0x0, lpFileInformation=0x12d810 | out: lpFileInformation=0x12d810*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71deeca7, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x71deeca7, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x50add351, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x189f26)) returned 1 [0127.578] SetErrorMode (uMode=0x0) returned 0x1 [0127.578] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\SportsMainToScenesBackground_PAL.wmv", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\SportsMainToScenesBackground_PAL.wmv", lpFilePart=0x0) returned 0x57 [0127.579] SetErrorMode (uMode=0x1) returned 0x0 [0127.579] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\SportsMainToScenesBackground_PAL.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\sports\\sportsmaintoscenesbackground_pal.wmv"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2e8 [0127.579] SetErrorMode (uMode=0x0) returned 0x1 [0127.579] GetFileType (hFile=0x2e8) returned 0x1 [0127.579] GetFileSize (in: hFile=0x2e8, lpFileSizeHigh=0x12d8c8 | out: lpFileSizeHigh=0x12d8c8*=0x0) returned 0x189f26 [0127.583] ReadFile (in: hFile=0x2e8, lpBuffer=0x12b0d018, nNumberOfBytesToRead=0x189f26, lpNumberOfBytesRead=0x12d7a8, lpOverlapped=0x0 | out: lpBuffer=0x12b0d018*, lpNumberOfBytesRead=0x12d7a8*=0x189f26, lpOverlapped=0x0) returned 1 [0127.992] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\SportsMainToScenesBackground_PAL.wmv", nBufferLength=0x105, lpBuffer=0x12d270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\SportsMainToScenesBackground_PAL.wmv", lpFilePart=0x0) returned 0x57 [0127.992] SetErrorMode (uMode=0x1) returned 0x0 [0127.992] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\SportsMainToScenesBackground_PAL.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\sports\\sportsmaintoscenesbackground_pal.wmv"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0127.994] SetErrorMode (uMode=0x0) returned 0x1 [0127.995] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\SportsNotesBackground.wmv", nBufferLength=0x105, lpBuffer=0x12d5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\SportsNotesBackground.wmv", lpFilePart=0x0) returned 0x4c [0127.995] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\SportsNotesBackground.wmv", nBufferLength=0x105, lpBuffer=0x12d590, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\SportsNotesBackground.wmv", lpFilePart=0x0) returned 0x4c [0127.995] SetErrorMode (uMode=0x1) returned 0x0 [0127.995] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\SportsNotesBackground.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\sports\\sportsnotesbackground.wmv"), fInfoLevelId=0x0, lpFileInformation=0x12d810 | out: lpFileInformation=0x12d810*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x713aae96, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x713aae96, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x514fb049, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x6680f4)) returned 1 [0127.996] SetErrorMode (uMode=0x0) returned 0x1 [0127.996] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\SportsNotesBackground.wmv", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\SportsNotesBackground.wmv", lpFilePart=0x0) returned 0x4c [0127.996] SetErrorMode (uMode=0x1) returned 0x0 [0127.996] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\SportsNotesBackground.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\sports\\sportsnotesbackground.wmv"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2e8 [0127.996] SetErrorMode (uMode=0x0) returned 0x1 [0127.996] GetFileType (hFile=0x2e8) returned 0x1 [0127.996] GetFileSize (in: hFile=0x2e8, lpFileSizeHigh=0x12d8c8 | out: lpFileSizeHigh=0x12d8c8*=0x0) returned 0x6680f4 [0128.017] ReadFile (in: hFile=0x2e8, lpBuffer=0x12b1e958, nNumberOfBytesToRead=0x6680f4, lpNumberOfBytesRead=0x12d7a8, lpOverlapped=0x0 | out: lpBuffer=0x12b1e958*, lpNumberOfBytesRead=0x12d7a8*=0x6680f4, lpOverlapped=0x0) returned 1 [0129.270] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\SportsNotesBackground.wmv", nBufferLength=0x105, lpBuffer=0x12d270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\SportsNotesBackground.wmv", lpFilePart=0x0) returned 0x4c [0129.271] SetErrorMode (uMode=0x1) returned 0x0 [0129.271] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\SportsNotesBackground.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\sports\\sportsnotesbackground.wmv"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0129.272] SetErrorMode (uMode=0x0) returned 0x1 [0129.272] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\SportsNotesBackground_PAL.wmv", nBufferLength=0x105, lpBuffer=0x12d5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\SportsNotesBackground_PAL.wmv", lpFilePart=0x0) returned 0x50 [0129.273] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\SportsNotesBackground_PAL.wmv", nBufferLength=0x105, lpBuffer=0x12d590, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\SportsNotesBackground_PAL.wmv", lpFilePart=0x0) returned 0x50 [0129.273] SetErrorMode (uMode=0x1) returned 0x0 [0129.273] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\SportsNotesBackground_PAL.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\sports\\sportsnotesbackground_pal.wmv"), fInfoLevelId=0x0, lpFileInformation=0x12d810 | out: lpFileInformation=0x12d810*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71501adb, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x71501adb, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x5206f98f, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x673c74)) returned 1 [0129.283] SetErrorMode (uMode=0x0) returned 0x1 [0129.284] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\SportsNotesBackground_PAL.wmv", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\SportsNotesBackground_PAL.wmv", lpFilePart=0x0) returned 0x50 [0129.285] SetErrorMode (uMode=0x1) returned 0x0 [0129.296] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\SportsNotesBackground_PAL.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\sports\\sportsnotesbackground_pal.wmv"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2e8 [0129.300] SetErrorMode (uMode=0x0) returned 0x1 [0129.300] GetFileType (hFile=0x2e8) returned 0x1 [0129.300] GetFileSize (in: hFile=0x2e8, lpFileSizeHigh=0x12d8c8 | out: lpFileSizeHigh=0x12d8c8*=0x0) returned 0x673c74 [0129.316] ReadFile (in: hFile=0x2e8, lpBuffer=0x1518efd0, nNumberOfBytesToRead=0x673c74, lpNumberOfBytesRead=0x12d7a8, lpOverlapped=0x0 | out: lpBuffer=0x1518efd0*, lpNumberOfBytesRead=0x12d7a8*=0x673c74, lpOverlapped=0x0) returned 1 [0130.405] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\SportsNotesBackground_PAL.wmv", nBufferLength=0x105, lpBuffer=0x12d270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\SportsNotesBackground_PAL.wmv", lpFilePart=0x0) returned 0x50 [0130.405] SetErrorMode (uMode=0x1) returned 0x0 [0130.406] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\SportsNotesBackground_PAL.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\sports\\sportsnotesbackground_pal.wmv"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0130.407] SetErrorMode (uMode=0x0) returned 0x1 [0130.407] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\SportsScenesBackground.wmv", nBufferLength=0x105, lpBuffer=0x12d5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\SportsScenesBackground.wmv", lpFilePart=0x0) returned 0x4d [0130.408] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\SportsScenesBackground.wmv", nBufferLength=0x105, lpBuffer=0x12d590, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\SportsScenesBackground.wmv", lpFilePart=0x0) returned 0x4d [0130.409] SetErrorMode (uMode=0x1) returned 0x0 [0130.409] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\SportsScenesBackground.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\sports\\sportsscenesbackground.wmv"), fInfoLevelId=0x0, lpFileInformation=0x12d810 | out: lpFileInformation=0x12d810*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x716a49da, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x716a49da, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x522f70cd, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x2ca474)) returned 1 [0130.409] SetErrorMode (uMode=0x0) returned 0x1 [0130.409] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\SportsScenesBackground.wmv", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\SportsScenesBackground.wmv", lpFilePart=0x0) returned 0x4d [0130.409] SetErrorMode (uMode=0x1) returned 0x0 [0130.409] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\SportsScenesBackground.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\sports\\sportsscenesbackground.wmv"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2e8 [0130.409] SetErrorMode (uMode=0x0) returned 0x1 [0130.410] GetFileType (hFile=0x2e8) returned 0x1 [0130.410] GetFileSize (in: hFile=0x2e8, lpFileSizeHigh=0x12d8c8 | out: lpFileSizeHigh=0x12d8c8*=0x0) returned 0x2ca474 [0130.813] ReadFile (in: hFile=0x2e8, lpBuffer=0x12680ba0, nNumberOfBytesToRead=0x2ca474, lpNumberOfBytesRead=0x12d7a8, lpOverlapped=0x0 | out: lpBuffer=0x12680ba0*, lpNumberOfBytesRead=0x12d7a8*=0x2ca474, lpOverlapped=0x0) returned 1 [0131.191] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\SportsScenesBackground.wmv", nBufferLength=0x105, lpBuffer=0x12d270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\SportsScenesBackground.wmv", lpFilePart=0x0) returned 0x4d [0131.191] SetErrorMode (uMode=0x1) returned 0x0 [0131.192] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\SportsScenesBackground.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\sports\\sportsscenesbackground.wmv"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0131.193] SetErrorMode (uMode=0x0) returned 0x1 [0131.194] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\SportsScenesBackground_PAL.wmv", nBufferLength=0x105, lpBuffer=0x12d5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\SportsScenesBackground_PAL.wmv", lpFilePart=0x0) returned 0x51 [0131.194] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\SportsScenesBackground_PAL.wmv", nBufferLength=0x105, lpBuffer=0x12d590, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\SportsScenesBackground_PAL.wmv", lpFilePart=0x0) returned 0x51 [0131.194] SetErrorMode (uMode=0x1) returned 0x0 [0131.194] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\SportsScenesBackground_PAL.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\sports\\sportsscenesbackground_pal.wmv"), fInfoLevelId=0x0, lpFileInformation=0x12d810 | out: lpFileInformation=0x12d810*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71789208, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x71789208, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x524e6293, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x2e59f4)) returned 1 [0131.194] SetErrorMode (uMode=0x0) returned 0x1 [0131.194] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\SportsScenesBackground_PAL.wmv", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\SportsScenesBackground_PAL.wmv", lpFilePart=0x0) returned 0x51 [0131.194] SetErrorMode (uMode=0x1) returned 0x0 [0131.195] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\SportsScenesBackground_PAL.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\sports\\sportsscenesbackground_pal.wmv"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2e8 [0131.195] SetErrorMode (uMode=0x0) returned 0x1 [0131.195] GetFileType (hFile=0x2e8) returned 0x1 [0131.195] GetFileSize (in: hFile=0x2e8, lpFileSizeHigh=0x12d8c8 | out: lpFileSizeHigh=0x12d8c8*=0x0) returned 0x2e59f4 [0131.210] ReadFile (in: hFile=0x2e8, lpBuffer=0x1373e730, nNumberOfBytesToRead=0x2e59f4, lpNumberOfBytesRead=0x12d7a8, lpOverlapped=0x0 | out: lpBuffer=0x1373e730*, lpNumberOfBytesRead=0x12d7a8*=0x2e59f4, lpOverlapped=0x0) returned 1 [0131.704] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\SportsScenesBackground_PAL.wmv", nBufferLength=0x105, lpBuffer=0x12d270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\SportsScenesBackground_PAL.wmv", lpFilePart=0x0) returned 0x51 [0131.705] SetErrorMode (uMode=0x1) returned 0x0 [0131.705] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\SportsScenesBackground_PAL.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\sports\\sportsscenesbackground_pal.wmv"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0131.707] SetErrorMode (uMode=0x0) returned 0x1 [0131.707] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\sports_disc_mask.png", nBufferLength=0x105, lpBuffer=0x12d5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\sports_disc_mask.png", lpFilePart=0x0) returned 0x47 [0131.707] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\sports_disc_mask.png", nBufferLength=0x105, lpBuffer=0x12d590, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\sports_disc_mask.png", lpFilePart=0x0) returned 0x47 [0131.707] SetErrorMode (uMode=0x1) returned 0x0 [0131.707] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\sports_disc_mask.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\sports\\sports_disc_mask.png"), fInfoLevelId=0x0, lpFileInformation=0x12d810 | out: lpFileInformation=0x12d810*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71384d39, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x71384d39, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ff68a0b, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x23d2)) returned 1 [0131.708] SetErrorMode (uMode=0x0) returned 0x1 [0131.708] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\sports_disc_mask.png", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\sports_disc_mask.png", lpFilePart=0x0) returned 0x47 [0131.708] SetErrorMode (uMode=0x1) returned 0x0 [0131.708] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\sports_disc_mask.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\sports\\sports_disc_mask.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2e8 [0131.708] SetErrorMode (uMode=0x0) returned 0x1 [0131.708] GetFileType (hFile=0x2e8) returned 0x1 [0131.708] GetFileSize (in: hFile=0x2e8, lpFileSizeHigh=0x12d8c8 | out: lpFileSizeHigh=0x12d8c8*=0x0) returned 0x23d2 [0131.708] ReadFile (in: hFile=0x2e8, lpBuffer=0x26c3c88, nNumberOfBytesToRead=0x23d2, lpNumberOfBytesRead=0x12d7a8, lpOverlapped=0x0 | out: lpBuffer=0x26c3c88*, lpNumberOfBytesRead=0x12d7a8*=0x23d2, lpOverlapped=0x0) returned 1 [0131.723] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\sports_disc_mask.png", nBufferLength=0x105, lpBuffer=0x12d270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\sports_disc_mask.png", lpFilePart=0x0) returned 0x47 [0131.723] SetErrorMode (uMode=0x1) returned 0x0 [0131.723] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\sports_disc_mask.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\sports\\sports_disc_mask.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0131.725] SetErrorMode (uMode=0x0) returned 0x1 [0131.725] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\Decrypt Instructions.txt", nBufferLength=0x105, lpBuffer=0x12d240, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\Decrypt Instructions.txt", lpFilePart=0x0) returned 0x4b [0131.725] SetErrorMode (uMode=0x1) returned 0x0 [0131.725] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\Decrypt Instructions.txt" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\sports\\decrypt instructions.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x2e8 [0131.726] SetErrorMode (uMode=0x0) returned 0x1 [0131.726] GetFileType (hFile=0x2e8) returned 0x1 [0131.726] WriteFile (in: hFile=0x2e8, lpBuffer=0x27b5818*, nNumberOfBytesToWrite=0x773, lpNumberOfBytesWritten=0x12d7a8, lpOverlapped=0x0 | out: lpBuffer=0x27b5818*, lpNumberOfBytesWritten=0x12d7a8*=0x773, lpOverlapped=0x0) returned 1 [0131.728] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports", nBufferLength=0x105, lpBuffer=0x12d430, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports", lpFilePart=0x0) returned 0x32 [0131.728] SetErrorMode (uMode=0x1) returned 0x0 [0131.728] FindFirstFileW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\*", lpFindFileData=0x12d5d0 | out: lpFindFileData=0x12d5d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9fdc8b88, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x6e909a30, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x6e909a30, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x26bc80 [0131.728] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9fdc8b88, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x6e909a30, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x6e909a30, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0131.728] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71ead378, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x71ead378, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ff428ad, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xb5e, dwReserved0=0x0, dwReserved1=0x0, cFileName="CircleSubpicture.png", cAlternateFileName="")) returned 1 [0131.728] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6e909a30, ftCreationTime.dwHighDateTime=0x1d5e786, ftLastAccessTime.dwLowDateTime=0x6e909a30, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x6e909a30, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x773, dwReserved0=0x0, dwReserved1=0x0, cFileName="Decrypt Instructions.txt", cAlternateFileName="DECRYP~1.TXT")) returned 1 [0131.728] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71ed34d5, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x71ed34d5, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ff428ad, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x120d, dwReserved0=0x0, dwReserved1=0x0, cFileName="GoldRing.png", cAlternateFileName="")) returned 1 [0131.728] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71338a7f, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x71338a7f, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ff428ad, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x6d3c, dwReserved0=0x0, dwReserved1=0x0, cFileName="highlight.png", cAlternateFileName="")) returned 1 [0131.728] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71ef9632, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x71ef9632, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ff428ad, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xba2, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationButtonSubpicture.png", cAlternateFileName="")) returned 1 [0131.728] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71ef9632, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x71ef9632, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ff428ad, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xee0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NextMenuButtonIcon.png", cAlternateFileName="")) returned 1 [0131.729] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71f1f78f, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x71f1f78f, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ff428ad, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xee2, dwReserved0=0x0, dwReserved1=0x0, cFileName="ParentMenuButtonIcon.png", cAlternateFileName="")) returned 1 [0131.729] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71f1f78f, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x71f1f78f, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ff428ad, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xeeb, dwReserved0=0x0, dwReserved1=0x0, cFileName="PreviousMenuButtonIcon.png", cAlternateFileName="")) returned 1 [0131.729] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71f458ec, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x71f458ec, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ff68a0b, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc3d, dwReserved0=0x0, dwReserved1=0x0, cFileName="SceneButtonInset_Alpha1.png", cAlternateFileName="")) returned 1 [0131.729] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71f6ba49, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x71f6ba49, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ff68a0b, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xdbe, dwReserved0=0x0, dwReserved1=0x0, cFileName="SceneButtonInset_Alpha2.png", cAlternateFileName="")) returned 1 [0131.729] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71e8721b, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x71e8721b, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ff68a0b, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc2f, dwReserved0=0x0, dwReserved1=0x0, cFileName="SceneButtonSubpicture.png", cAlternateFileName="")) returned 1 [0131.729] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71893b93, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x71893b93, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x500e57b7, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x539540, dwReserved0=0x0, dwReserved1=0x0, cFileName="SportsMainBackground.wmv", cAlternateFileName="")) returned 1 [0131.729] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71aa8ea9, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x71aa8ea9, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x502ae81f, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x57bbc0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SportsMainBackground_PAL.wmv", cAlternateFileName="")) returned 1 [0131.729] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71c25c4b, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x71c25c4b, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x50320c39, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x1beae6, dwReserved0=0x0, dwReserved1=0x0, cFileName="SportsMainToNotesBackground.wmv", cAlternateFileName="")) returned 1 [0131.729] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71cbe1bf, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x71cbe1bf, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x50393053, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x1c0a26, dwReserved0=0x0, dwReserved1=0x0, cFileName="SportsMainToNotesBackground_PAL.wmv", cAlternateFileName="")) returned 1 [0131.729] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71d7c890, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x71d7c890, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x504c3b43, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x184166, dwReserved0=0x0, dwReserved1=0x0, cFileName="SportsMainToScenesBackground.wmv", cAlternateFileName="")) returned 1 [0131.729] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71deeca7, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x71deeca7, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x50add351, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x189f26, dwReserved0=0x0, dwReserved1=0x0, cFileName="SportsMainToScenesBackground_PAL.wmv", cAlternateFileName="")) returned 1 [0131.729] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x713aae96, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x713aae96, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x514fb049, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x6680f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="SportsNotesBackground.wmv", cAlternateFileName="")) returned 1 [0131.730] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71501adb, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x71501adb, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x5206f98f, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x673c74, dwReserved0=0x0, dwReserved1=0x0, cFileName="SportsNotesBackground_PAL.wmv", cAlternateFileName="")) returned 1 [0131.730] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x716a49da, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x716a49da, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x522f70cd, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x2ca474, dwReserved0=0x0, dwReserved1=0x0, cFileName="SportsScenesBackground.wmv", cAlternateFileName="")) returned 1 [0131.730] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71789208, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x71789208, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x524e6293, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x2e59f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="SportsScenesBackground_PAL.wmv", cAlternateFileName="")) returned 1 [0131.730] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71384d39, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x71384d39, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ff68a0b, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x23d2, dwReserved0=0x0, dwReserved1=0x0, cFileName="sports_disc_mask.png", cAlternateFileName="")) returned 1 [0131.730] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71384d39, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x71384d39, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ff68a0b, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x23d2, dwReserved0=0x0, dwReserved1=0x0, cFileName="sports_disc_mask.png", cAlternateFileName="")) returned 0 [0131.730] FindClose (in: hFindFile=0x26bc80 | out: hFindFile=0x26bc80) returned 1 [0131.730] SetErrorMode (uMode=0x0) returned 0x1 [0131.730] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Stacking", nBufferLength=0x105, lpBuffer=0x12d390, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Stacking", lpFilePart=0x0) returned 0x34 [0131.730] SetErrorMode (uMode=0x1) returned 0x0 [0131.731] FindFirstFileW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Stacking\\*", lpFindFileData=0x12d530 | out: lpFindFileData=0x12d530*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa198102e, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa9057bb, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa19a729d, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x26bc80 [0131.734] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa198102e, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa9057bb, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa19a729d, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0131.734] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f740a33, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f740a33, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x540920df, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x11da, dwReserved0=0x0, dwReserved1=0x0, cFileName="1047x576black.png", cAlternateFileName="")) returned 1 [0131.735] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f71a8d6, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f71a8d6, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x5396df3f, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x1928, dwReserved0=0x0, dwReserved1=0x0, cFileName="1047x576_91n92.png", cAlternateFileName="")) returned 1 [0131.735] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f6ce61c, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f6ce61c, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x544241af, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xb05, dwReserved0=0x0, dwReserved1=0x0, cFileName="15x15dot.png", cAlternateFileName="")) returned 1 [0131.735] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f740a33, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f740a33, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x5444a30d, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x15f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="720x480icongraphic.png", cAlternateFileName="")) returned 1 [0131.735] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f6ce61c, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f6ce61c, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x5444a30d, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x143e, dwReserved0=0x0, dwReserved1=0x0, cFileName="720_480shadow.png", cAlternateFileName="")) returned 1 [0131.735] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f7ff104, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f7ff104, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x54613375, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationLeft_ButtonGraphic.png", cAlternateFileName="")) returned 1 [0131.735] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f7b2e4a, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f7b2e4a, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x54e68005, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc3a, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationLeft_SelectionSubpicture.png", cAlternateFileName="")) returned 1 [0131.735] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f7d8fa7, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f7d8fa7, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x54f98af5, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13a1, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationRight_ButtonGraphic.png", cAlternateFileName="")) returned 1 [0131.735] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f78cced, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f78cced, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x5529264d, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc2e, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationRight_SelectionSubpicture.png", cAlternateFileName="")) returned 1 [0131.735] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f766b90, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f766b90, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x5529264d, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x135b, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationUp_ButtonGraphic.png", cAlternateFileName="")) returned 1 [0131.735] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f7b2e4a, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f7b2e4a, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x552b87ab, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc09, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationUp_SelectionSubpicture.png", cAlternateFileName="")) returned 1 [0131.735] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f6a84bf, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f6a84bf, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x552b87ab, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x60d7, dwReserved0=0x0, dwReserved1=0x0, cFileName="photograph.png", cAlternateFileName="")) returned 1 [0131.735] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f6a84bf, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f6a84bf, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x552b87ab, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x60d7, dwReserved0=0x0, dwReserved1=0x0, cFileName="photograph.png", cAlternateFileName="")) returned 0 [0131.735] FindClose (in: hFindFile=0x26bc80 | out: hFindFile=0x26bc80) returned 1 [0131.736] SetErrorMode (uMode=0x0) returned 0x1 [0131.737] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Stacking\\1047x576black.png", nBufferLength=0x105, lpBuffer=0x12d5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Stacking\\1047x576black.png", lpFilePart=0x0) returned 0x46 [0131.737] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Stacking\\1047x576black.png", nBufferLength=0x105, lpBuffer=0x12d590, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Stacking\\1047x576black.png", lpFilePart=0x0) returned 0x46 [0131.737] SetErrorMode (uMode=0x1) returned 0x0 [0131.737] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Stacking\\1047x576black.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\stacking\\1047x576black.png"), fInfoLevelId=0x0, lpFileInformation=0x12d810 | out: lpFileInformation=0x12d810*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f740a33, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f740a33, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x540920df, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x11da)) returned 1 [0131.738] SetErrorMode (uMode=0x0) returned 0x1 [0131.738] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Stacking\\1047x576black.png", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Stacking\\1047x576black.png", lpFilePart=0x0) returned 0x46 [0131.738] SetErrorMode (uMode=0x1) returned 0x0 [0131.738] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Stacking\\1047x576black.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\stacking\\1047x576black.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2e8 [0131.739] SetErrorMode (uMode=0x0) returned 0x1 [0131.739] GetFileType (hFile=0x2e8) returned 0x1 [0131.739] GetFileSize (in: hFile=0x2e8, lpFileSizeHigh=0x12d8c8 | out: lpFileSizeHigh=0x12d8c8*=0x0) returned 0x11da [0131.739] ReadFile (in: hFile=0x2e8, lpBuffer=0x27ba4a0, nNumberOfBytesToRead=0x11da, lpNumberOfBytesRead=0x12d7a8, lpOverlapped=0x0 | out: lpBuffer=0x27ba4a0*, lpNumberOfBytesRead=0x12d7a8*=0x11da, lpOverlapped=0x0) returned 1 [0131.753] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Stacking\\1047x576black.png", nBufferLength=0x105, lpBuffer=0x12d270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Stacking\\1047x576black.png", lpFilePart=0x0) returned 0x46 [0131.753] SetErrorMode (uMode=0x1) returned 0x0 [0131.753] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Stacking\\1047x576black.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\stacking\\1047x576black.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0131.755] SetErrorMode (uMode=0x0) returned 0x1 [0131.755] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Stacking\\1047x576_91n92.png", nBufferLength=0x105, lpBuffer=0x12d5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Stacking\\1047x576_91n92.png", lpFilePart=0x0) returned 0x47 [0131.755] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Stacking\\1047x576_91n92.png", nBufferLength=0x105, lpBuffer=0x12d590, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Stacking\\1047x576_91n92.png", lpFilePart=0x0) returned 0x47 [0131.755] SetErrorMode (uMode=0x1) returned 0x0 [0131.755] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Stacking\\1047x576_91n92.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\stacking\\1047x576_91n92.png"), fInfoLevelId=0x0, lpFileInformation=0x12d810 | out: lpFileInformation=0x12d810*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f71a8d6, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f71a8d6, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x5396df3f, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x1928)) returned 1 [0131.756] SetErrorMode (uMode=0x0) returned 0x1 [0131.756] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Stacking\\1047x576_91n92.png", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Stacking\\1047x576_91n92.png", lpFilePart=0x0) returned 0x47 [0131.756] SetErrorMode (uMode=0x1) returned 0x0 [0131.756] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Stacking\\1047x576_91n92.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\stacking\\1047x576_91n92.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2e8 [0131.756] SetErrorMode (uMode=0x0) returned 0x1 [0131.756] GetFileType (hFile=0x2e8) returned 0x1 [0131.756] GetFileSize (in: hFile=0x2e8, lpFileSizeHigh=0x12d8c8 | out: lpFileSizeHigh=0x12d8c8*=0x0) returned 0x1928 [0131.756] ReadFile (in: hFile=0x2e8, lpBuffer=0x28a2328, nNumberOfBytesToRead=0x1928, lpNumberOfBytesRead=0x12d7a8, lpOverlapped=0x0 | out: lpBuffer=0x28a2328*, lpNumberOfBytesRead=0x12d7a8*=0x1928, lpOverlapped=0x0) returned 1 [0131.779] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Stacking\\1047x576_91n92.png", nBufferLength=0x105, lpBuffer=0x12d270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Stacking\\1047x576_91n92.png", lpFilePart=0x0) returned 0x47 [0131.779] SetErrorMode (uMode=0x1) returned 0x0 [0131.779] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Stacking\\1047x576_91n92.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\stacking\\1047x576_91n92.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0131.781] SetErrorMode (uMode=0x0) returned 0x1 [0131.781] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Stacking\\15x15dot.png", nBufferLength=0x105, lpBuffer=0x12d5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Stacking\\15x15dot.png", lpFilePart=0x0) returned 0x41 [0131.781] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Stacking\\15x15dot.png", nBufferLength=0x105, lpBuffer=0x12d590, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Stacking\\15x15dot.png", lpFilePart=0x0) returned 0x41 [0131.782] SetErrorMode (uMode=0x1) returned 0x0 [0131.782] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Stacking\\15x15dot.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\stacking\\15x15dot.png"), fInfoLevelId=0x0, lpFileInformation=0x12d810 | out: lpFileInformation=0x12d810*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f6ce61c, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f6ce61c, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x544241af, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xb05)) returned 1 [0131.782] SetErrorMode (uMode=0x0) returned 0x1 [0131.782] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Stacking\\15x15dot.png", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Stacking\\15x15dot.png", lpFilePart=0x0) returned 0x41 [0131.782] SetErrorMode (uMode=0x1) returned 0x0 [0131.783] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Stacking\\15x15dot.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\stacking\\15x15dot.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2e8 [0131.783] SetErrorMode (uMode=0x0) returned 0x1 [0131.783] GetFileType (hFile=0x2e8) returned 0x1 [0131.783] GetFileSize (in: hFile=0x2e8, lpFileSizeHigh=0x12d8c8 | out: lpFileSizeHigh=0x12d8c8*=0x0) returned 0xb05 [0131.783] ReadFile (in: hFile=0x2e8, lpBuffer=0x2790e90, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12d7a8, lpOverlapped=0x0 | out: lpBuffer=0x2790e90*, lpNumberOfBytesRead=0x12d7a8*=0xb05, lpOverlapped=0x0) returned 1 [0131.798] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Stacking\\15x15dot.png", nBufferLength=0x105, lpBuffer=0x12d270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Stacking\\15x15dot.png", lpFilePart=0x0) returned 0x41 [0131.798] SetErrorMode (uMode=0x1) returned 0x0 [0131.798] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Stacking\\15x15dot.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\stacking\\15x15dot.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0131.800] SetErrorMode (uMode=0x0) returned 0x1 [0131.800] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Stacking\\720x480icongraphic.png", nBufferLength=0x105, lpBuffer=0x12d5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Stacking\\720x480icongraphic.png", lpFilePart=0x0) returned 0x4b [0131.800] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Stacking\\720x480icongraphic.png", nBufferLength=0x105, lpBuffer=0x12d590, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Stacking\\720x480icongraphic.png", lpFilePart=0x0) returned 0x4b [0131.800] SetErrorMode (uMode=0x1) returned 0x0 [0131.800] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Stacking\\720x480icongraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\stacking\\720x480icongraphic.png"), fInfoLevelId=0x0, lpFileInformation=0x12d810 | out: lpFileInformation=0x12d810*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f740a33, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f740a33, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x5444a30d, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x15f4)) returned 1 [0131.801] SetErrorMode (uMode=0x0) returned 0x1 [0131.801] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Stacking\\720x480icongraphic.png", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Stacking\\720x480icongraphic.png", lpFilePart=0x0) returned 0x4b [0131.802] SetErrorMode (uMode=0x1) returned 0x0 [0131.802] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Stacking\\720x480icongraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\stacking\\720x480icongraphic.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2e8 [0131.802] SetErrorMode (uMode=0x0) returned 0x1 [0131.802] GetFileType (hFile=0x2e8) returned 0x1 [0131.802] GetFileSize (in: hFile=0x2e8, lpFileSizeHigh=0x12d8c8 | out: lpFileSizeHigh=0x12d8c8*=0x0) returned 0x15f4 [0131.802] ReadFile (in: hFile=0x2e8, lpBuffer=0x2876c48, nNumberOfBytesToRead=0x15f4, lpNumberOfBytesRead=0x12d7a8, lpOverlapped=0x0 | out: lpBuffer=0x2876c48*, lpNumberOfBytesRead=0x12d7a8*=0x15f4, lpOverlapped=0x0) returned 1 [0131.824] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Stacking\\720x480icongraphic.png", nBufferLength=0x105, lpBuffer=0x12d270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Stacking\\720x480icongraphic.png", lpFilePart=0x0) returned 0x4b [0131.825] SetErrorMode (uMode=0x1) returned 0x0 [0131.825] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Stacking\\720x480icongraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\stacking\\720x480icongraphic.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0131.826] SetErrorMode (uMode=0x0) returned 0x1 [0131.827] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Stacking\\720_480shadow.png", nBufferLength=0x105, lpBuffer=0x12d5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Stacking\\720_480shadow.png", lpFilePart=0x0) returned 0x46 [0131.827] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Stacking\\720_480shadow.png", nBufferLength=0x105, lpBuffer=0x12d590, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Stacking\\720_480shadow.png", lpFilePart=0x0) returned 0x46 [0131.827] SetErrorMode (uMode=0x1) returned 0x0 [0131.827] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Stacking\\720_480shadow.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\stacking\\720_480shadow.png"), fInfoLevelId=0x0, lpFileInformation=0x12d810 | out: lpFileInformation=0x12d810*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f6ce61c, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f6ce61c, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x5444a30d, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x143e)) returned 1 [0131.827] SetErrorMode (uMode=0x0) returned 0x1 [0131.827] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Stacking\\720_480shadow.png", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Stacking\\720_480shadow.png", lpFilePart=0x0) returned 0x46 [0131.827] SetErrorMode (uMode=0x1) returned 0x0 [0131.827] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Stacking\\720_480shadow.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\stacking\\720_480shadow.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2e8 [0131.828] SetErrorMode (uMode=0x0) returned 0x1 [0131.828] GetFileType (hFile=0x2e8) returned 0x1 [0131.828] GetFileSize (in: hFile=0x2e8, lpFileSizeHigh=0x12d8c8 | out: lpFileSizeHigh=0x12d8c8*=0x0) returned 0x143e [0131.828] ReadFile (in: hFile=0x2e8, lpBuffer=0x27656e8, nNumberOfBytesToRead=0x143e, lpNumberOfBytesRead=0x12d7a8, lpOverlapped=0x0 | out: lpBuffer=0x27656e8*, lpNumberOfBytesRead=0x12d7a8*=0x143e, lpOverlapped=0x0) returned 1 [0131.843] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Stacking\\720_480shadow.png", nBufferLength=0x105, lpBuffer=0x12d270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Stacking\\720_480shadow.png", lpFilePart=0x0) returned 0x46 [0131.843] SetErrorMode (uMode=0x1) returned 0x0 [0131.843] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Stacking\\720_480shadow.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\stacking\\720_480shadow.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0131.845] SetErrorMode (uMode=0x0) returned 0x1 [0131.845] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Stacking\\NavigationLeft_ButtonGraphic.png", nBufferLength=0x105, lpBuffer=0x12d5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Stacking\\NavigationLeft_ButtonGraphic.png", lpFilePart=0x0) returned 0x55 [0131.846] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Stacking\\NavigationLeft_ButtonGraphic.png", nBufferLength=0x105, lpBuffer=0x12d590, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Stacking\\NavigationLeft_ButtonGraphic.png", lpFilePart=0x0) returned 0x55 [0131.846] SetErrorMode (uMode=0x1) returned 0x0 [0131.846] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Stacking\\NavigationLeft_ButtonGraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\stacking\\navigationleft_buttongraphic.png"), fInfoLevelId=0x0, lpFileInformation=0x12d810 | out: lpFileInformation=0x12d810*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f7ff104, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f7ff104, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x54613375, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13e0)) returned 1 [0131.846] SetErrorMode (uMode=0x0) returned 0x1 [0131.846] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Stacking\\NavigationLeft_ButtonGraphic.png", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Stacking\\NavigationLeft_ButtonGraphic.png", lpFilePart=0x0) returned 0x55 [0131.846] SetErrorMode (uMode=0x1) returned 0x0 [0131.847] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Stacking\\NavigationLeft_ButtonGraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\stacking\\navigationleft_buttongraphic.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2e8 [0131.847] SetErrorMode (uMode=0x0) returned 0x1 [0131.847] GetFileType (hFile=0x2e8) returned 0x1 [0131.847] GetFileSize (in: hFile=0x2e8, lpFileSizeHigh=0x12d8c8 | out: lpFileSizeHigh=0x12d8c8*=0x0) returned 0x13e0 [0131.847] ReadFile (in: hFile=0x2e8, lpBuffer=0x284e768, nNumberOfBytesToRead=0x13e0, lpNumberOfBytesRead=0x12d7a8, lpOverlapped=0x0 | out: lpBuffer=0x284e768*, lpNumberOfBytesRead=0x12d7a8*=0x13e0, lpOverlapped=0x0) returned 1 [0131.901] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Stacking\\NavigationLeft_ButtonGraphic.png", nBufferLength=0x105, lpBuffer=0x12d270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Stacking\\NavigationLeft_ButtonGraphic.png", lpFilePart=0x0) returned 0x55 [0131.901] SetErrorMode (uMode=0x1) returned 0x0 [0131.901] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Stacking\\NavigationLeft_ButtonGraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\stacking\\navigationleft_buttongraphic.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0131.903] SetErrorMode (uMode=0x0) returned 0x1 [0131.904] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Stacking\\NavigationLeft_SelectionSubpicture.png", nBufferLength=0x105, lpBuffer=0x12d5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Stacking\\NavigationLeft_SelectionSubpicture.png", lpFilePart=0x0) returned 0x5b [0131.904] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Stacking\\NavigationLeft_SelectionSubpicture.png", nBufferLength=0x105, lpBuffer=0x12d590, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Stacking\\NavigationLeft_SelectionSubpicture.png", lpFilePart=0x0) returned 0x5b [0131.904] SetErrorMode (uMode=0x1) returned 0x0 [0131.904] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Stacking\\NavigationLeft_SelectionSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\stacking\\navigationleft_selectionsubpicture.png"), fInfoLevelId=0x0, lpFileInformation=0x12d810 | out: lpFileInformation=0x12d810*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f7b2e4a, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f7b2e4a, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x54e68005, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc3a)) returned 1 [0131.904] SetErrorMode (uMode=0x0) returned 0x1 [0131.904] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Stacking\\NavigationLeft_SelectionSubpicture.png", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Stacking\\NavigationLeft_SelectionSubpicture.png", lpFilePart=0x0) returned 0x5b [0131.904] SetErrorMode (uMode=0x1) returned 0x0 [0131.905] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Stacking\\NavigationLeft_SelectionSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\stacking\\navigationleft_selectionsubpicture.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2e8 [0131.905] SetErrorMode (uMode=0x0) returned 0x1 [0131.905] GetFileType (hFile=0x2e8) returned 0x1 [0131.905] GetFileSize (in: hFile=0x2e8, lpFileSizeHigh=0x12d8c8 | out: lpFileSizeHigh=0x12d8c8*=0x0) returned 0xc3a [0131.905] ReadFile (in: hFile=0x2e8, lpBuffer=0x273cb10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12d7a8, lpOverlapped=0x0 | out: lpBuffer=0x273cb10*, lpNumberOfBytesRead=0x12d7a8*=0xc3a, lpOverlapped=0x0) returned 1 [0131.926] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Stacking\\NavigationLeft_SelectionSubpicture.png", nBufferLength=0x105, lpBuffer=0x12d270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Stacking\\NavigationLeft_SelectionSubpicture.png", lpFilePart=0x0) returned 0x5b [0131.926] SetErrorMode (uMode=0x1) returned 0x0 [0131.926] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Stacking\\NavigationLeft_SelectionSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\stacking\\navigationleft_selectionsubpicture.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0131.928] SetErrorMode (uMode=0x0) returned 0x1 [0131.928] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Stacking\\NavigationRight_ButtonGraphic.png", nBufferLength=0x105, lpBuffer=0x12d5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Stacking\\NavigationRight_ButtonGraphic.png", lpFilePart=0x0) returned 0x56 [0131.928] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Stacking\\NavigationRight_ButtonGraphic.png", nBufferLength=0x105, lpBuffer=0x12d590, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Stacking\\NavigationRight_ButtonGraphic.png", lpFilePart=0x0) returned 0x56 [0131.928] SetErrorMode (uMode=0x1) returned 0x0 [0131.928] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Stacking\\NavigationRight_ButtonGraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\stacking\\navigationright_buttongraphic.png"), fInfoLevelId=0x0, lpFileInformation=0x12d810 | out: lpFileInformation=0x12d810*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f7d8fa7, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f7d8fa7, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x54f98af5, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13a1)) returned 1 [0131.929] SetErrorMode (uMode=0x0) returned 0x1 [0131.929] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Stacking\\NavigationRight_ButtonGraphic.png", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Stacking\\NavigationRight_ButtonGraphic.png", lpFilePart=0x0) returned 0x56 [0131.929] SetErrorMode (uMode=0x1) returned 0x0 [0131.929] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Stacking\\NavigationRight_ButtonGraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\stacking\\navigationright_buttongraphic.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2e8 [0131.929] SetErrorMode (uMode=0x0) returned 0x1 [0131.929] GetFileType (hFile=0x2e8) returned 0x1 [0131.929] GetFileSize (in: hFile=0x2e8, lpFileSizeHigh=0x12d8c8 | out: lpFileSizeHigh=0x12d8c8*=0x0) returned 0x13a1 [0131.929] ReadFile (in: hFile=0x2e8, lpBuffer=0x2823018, nNumberOfBytesToRead=0x13a1, lpNumberOfBytesRead=0x12d7a8, lpOverlapped=0x0 | out: lpBuffer=0x2823018*, lpNumberOfBytesRead=0x12d7a8*=0x13a1, lpOverlapped=0x0) returned 1 [0131.999] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Stacking\\NavigationRight_ButtonGraphic.png", nBufferLength=0x105, lpBuffer=0x12d270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Stacking\\NavigationRight_ButtonGraphic.png", lpFilePart=0x0) returned 0x56 [0131.999] SetErrorMode (uMode=0x1) returned 0x0 [0132.000] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Stacking\\NavigationRight_ButtonGraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\stacking\\navigationright_buttongraphic.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0132.001] SetErrorMode (uMode=0x0) returned 0x1 [0132.002] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Stacking\\NavigationRight_SelectionSubpicture.png", nBufferLength=0x105, lpBuffer=0x12d5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Stacking\\NavigationRight_SelectionSubpicture.png", lpFilePart=0x0) returned 0x5c [0132.002] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Stacking\\NavigationRight_SelectionSubpicture.png", nBufferLength=0x105, lpBuffer=0x12d590, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Stacking\\NavigationRight_SelectionSubpicture.png", lpFilePart=0x0) returned 0x5c [0132.002] SetErrorMode (uMode=0x1) returned 0x0 [0132.002] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Stacking\\NavigationRight_SelectionSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\stacking\\navigationright_selectionsubpicture.png"), fInfoLevelId=0x0, lpFileInformation=0x12d810 | out: lpFileInformation=0x12d810*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f78cced, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f78cced, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x5529264d, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc2e)) returned 1 [0132.002] SetErrorMode (uMode=0x0) returned 0x1 [0132.002] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Stacking\\NavigationRight_SelectionSubpicture.png", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Stacking\\NavigationRight_SelectionSubpicture.png", lpFilePart=0x0) returned 0x5c [0132.003] SetErrorMode (uMode=0x1) returned 0x0 [0132.003] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Stacking\\NavigationRight_SelectionSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\stacking\\navigationright_selectionsubpicture.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2e8 [0132.003] SetErrorMode (uMode=0x0) returned 0x1 [0132.003] GetFileType (hFile=0x2e8) returned 0x1 [0132.003] GetFileSize (in: hFile=0x2e8, lpFileSizeHigh=0x12d8c8 | out: lpFileSizeHigh=0x12d8c8*=0x0) returned 0xc2e [0132.003] ReadFile (in: hFile=0x2e8, lpBuffer=0x2710ea0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12d7a8, lpOverlapped=0x0 | out: lpBuffer=0x2710ea0*, lpNumberOfBytesRead=0x12d7a8*=0xc2e, lpOverlapped=0x0) returned 1 [0132.026] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Stacking\\NavigationRight_SelectionSubpicture.png", nBufferLength=0x105, lpBuffer=0x12d270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Stacking\\NavigationRight_SelectionSubpicture.png", lpFilePart=0x0) returned 0x5c [0132.026] SetErrorMode (uMode=0x1) returned 0x0 [0132.026] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Stacking\\NavigationRight_SelectionSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\stacking\\navigationright_selectionsubpicture.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0132.028] SetErrorMode (uMode=0x0) returned 0x1 [0132.028] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Stacking\\NavigationUp_ButtonGraphic.png", nBufferLength=0x105, lpBuffer=0x12d5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Stacking\\NavigationUp_ButtonGraphic.png", lpFilePart=0x0) returned 0x53 [0132.028] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Stacking\\NavigationUp_ButtonGraphic.png", nBufferLength=0x105, lpBuffer=0x12d590, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Stacking\\NavigationUp_ButtonGraphic.png", lpFilePart=0x0) returned 0x53 [0132.028] SetErrorMode (uMode=0x1) returned 0x0 [0132.028] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Stacking\\NavigationUp_ButtonGraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\stacking\\navigationup_buttongraphic.png"), fInfoLevelId=0x0, lpFileInformation=0x12d810 | out: lpFileInformation=0x12d810*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f766b90, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f766b90, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x5529264d, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x135b)) returned 1 [0132.029] SetErrorMode (uMode=0x0) returned 0x1 [0132.029] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Stacking\\NavigationUp_ButtonGraphic.png", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Stacking\\NavigationUp_ButtonGraphic.png", lpFilePart=0x0) returned 0x53 [0132.029] SetErrorMode (uMode=0x1) returned 0x0 [0132.029] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Stacking\\NavigationUp_ButtonGraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\stacking\\navigationup_buttongraphic.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2e8 [0132.029] SetErrorMode (uMode=0x0) returned 0x1 [0132.029] GetFileType (hFile=0x2e8) returned 0x1 [0132.029] GetFileSize (in: hFile=0x2e8, lpFileSizeHigh=0x12d8c8 | out: lpFileSizeHigh=0x12d8c8*=0x0) returned 0x135b [0132.029] ReadFile (in: hFile=0x2e8, lpBuffer=0x27f7348, nNumberOfBytesToRead=0x135b, lpNumberOfBytesRead=0x12d7a8, lpOverlapped=0x0 | out: lpBuffer=0x27f7348*, lpNumberOfBytesRead=0x12d7a8*=0x135b, lpOverlapped=0x0) returned 1 [0132.056] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Stacking\\NavigationUp_ButtonGraphic.png", nBufferLength=0x105, lpBuffer=0x12d270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Stacking\\NavigationUp_ButtonGraphic.png", lpFilePart=0x0) returned 0x53 [0132.056] SetErrorMode (uMode=0x1) returned 0x0 [0132.056] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Stacking\\NavigationUp_ButtonGraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\stacking\\navigationup_buttongraphic.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0132.058] SetErrorMode (uMode=0x0) returned 0x1 [0132.058] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Stacking\\NavigationUp_SelectionSubpicture.png", nBufferLength=0x105, lpBuffer=0x12d5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Stacking\\NavigationUp_SelectionSubpicture.png", lpFilePart=0x0) returned 0x59 [0132.058] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Stacking\\NavigationUp_SelectionSubpicture.png", nBufferLength=0x105, lpBuffer=0x12d590, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Stacking\\NavigationUp_SelectionSubpicture.png", lpFilePart=0x0) returned 0x59 [0132.059] SetErrorMode (uMode=0x1) returned 0x0 [0132.059] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Stacking\\NavigationUp_SelectionSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\stacking\\navigationup_selectionsubpicture.png"), fInfoLevelId=0x0, lpFileInformation=0x12d810 | out: lpFileInformation=0x12d810*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f7b2e4a, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f7b2e4a, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x552b87ab, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc09)) returned 1 [0132.059] SetErrorMode (uMode=0x0) returned 0x1 [0132.059] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Stacking\\NavigationUp_SelectionSubpicture.png", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Stacking\\NavigationUp_SelectionSubpicture.png", lpFilePart=0x0) returned 0x59 [0132.059] SetErrorMode (uMode=0x1) returned 0x0 [0132.059] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Stacking\\NavigationUp_SelectionSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\stacking\\navigationup_selectionsubpicture.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2e8 [0132.059] SetErrorMode (uMode=0x0) returned 0x1 [0132.060] GetFileType (hFile=0x2e8) returned 0x1 [0132.060] GetFileSize (in: hFile=0x2e8, lpFileSizeHigh=0x12d8c8 | out: lpFileSizeHigh=0x12d8c8*=0x0) returned 0xc09 [0132.060] ReadFile (in: hFile=0x2e8, lpBuffer=0x26e4eb0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12d7a8, lpOverlapped=0x0 | out: lpBuffer=0x26e4eb0*, lpNumberOfBytesRead=0x12d7a8*=0xc09, lpOverlapped=0x0) returned 1 [0132.081] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Stacking\\NavigationUp_SelectionSubpicture.png", nBufferLength=0x105, lpBuffer=0x12d270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Stacking\\NavigationUp_SelectionSubpicture.png", lpFilePart=0x0) returned 0x59 [0132.081] SetErrorMode (uMode=0x1) returned 0x0 [0132.081] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Stacking\\NavigationUp_SelectionSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\stacking\\navigationup_selectionsubpicture.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0132.082] SetErrorMode (uMode=0x0) returned 0x1 [0132.083] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Stacking\\photograph.png", nBufferLength=0x105, lpBuffer=0x12d5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Stacking\\photograph.png", lpFilePart=0x0) returned 0x43 [0132.083] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Stacking\\photograph.png", nBufferLength=0x105, lpBuffer=0x12d590, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Stacking\\photograph.png", lpFilePart=0x0) returned 0x43 [0132.083] SetErrorMode (uMode=0x1) returned 0x0 [0132.083] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Stacking\\photograph.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\stacking\\photograph.png"), fInfoLevelId=0x0, lpFileInformation=0x12d810 | out: lpFileInformation=0x12d810*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f6a84bf, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f6a84bf, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x552b87ab, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x60d7)) returned 1 [0132.083] SetErrorMode (uMode=0x0) returned 0x1 [0132.083] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Stacking\\photograph.png", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Stacking\\photograph.png", lpFilePart=0x0) returned 0x43 [0132.084] SetErrorMode (uMode=0x1) returned 0x0 [0132.084] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Stacking\\photograph.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\stacking\\photograph.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2e8 [0132.084] SetErrorMode (uMode=0x0) returned 0x1 [0132.084] GetFileType (hFile=0x2e8) returned 0x1 [0132.084] GetFileSize (in: hFile=0x2e8, lpFileSizeHigh=0x12d8c8 | out: lpFileSizeHigh=0x12d8c8*=0x0) returned 0x60d7 [0132.084] ReadFile (in: hFile=0x2e8, lpBuffer=0x27cb1f8, nNumberOfBytesToRead=0x60d7, lpNumberOfBytesRead=0x12d7a8, lpOverlapped=0x0 | out: lpBuffer=0x27cb1f8*, lpNumberOfBytesRead=0x12d7a8*=0x60d7, lpOverlapped=0x0) returned 1 [0132.102] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Stacking\\photograph.png", nBufferLength=0x105, lpBuffer=0x12d270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Stacking\\photograph.png", lpFilePart=0x0) returned 0x43 [0132.102] SetErrorMode (uMode=0x1) returned 0x0 [0132.103] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Stacking\\photograph.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\stacking\\photograph.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0132.104] SetErrorMode (uMode=0x0) returned 0x1 [0132.104] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Stacking\\Decrypt Instructions.txt", nBufferLength=0x105, lpBuffer=0x12d240, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Stacking\\Decrypt Instructions.txt", lpFilePart=0x0) returned 0x4d [0132.104] SetErrorMode (uMode=0x1) returned 0x0 [0132.105] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Stacking\\Decrypt Instructions.txt" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\stacking\\decrypt instructions.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x2e8 [0132.105] SetErrorMode (uMode=0x0) returned 0x1 [0132.105] GetFileType (hFile=0x2e8) returned 0x1 [0132.106] WriteFile (in: hFile=0x2e8, lpBuffer=0x28d3850*, nNumberOfBytesToWrite=0x773, lpNumberOfBytesWritten=0x12d7a8, lpOverlapped=0x0 | out: lpBuffer=0x28d3850*, lpNumberOfBytesWritten=0x12d7a8*=0x773, lpOverlapped=0x0) returned 1 [0132.107] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Stacking", nBufferLength=0x105, lpBuffer=0x12d430, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Stacking", lpFilePart=0x0) returned 0x34 [0132.107] SetErrorMode (uMode=0x1) returned 0x0 [0132.107] FindFirstFileW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Stacking\\*", lpFindFileData=0x12d5d0 | out: lpFindFileData=0x12d5d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa198102e, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x6ec759d0, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x6ec759d0, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x26bc80 [0132.107] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa198102e, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x6ec759d0, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x6ec759d0, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0132.107] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f740a33, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f740a33, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x540920df, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x11da, dwReserved0=0x0, dwReserved1=0x0, cFileName="1047x576black.png", cAlternateFileName="")) returned 1 [0132.107] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f71a8d6, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f71a8d6, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x5396df3f, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x1928, dwReserved0=0x0, dwReserved1=0x0, cFileName="1047x576_91n92.png", cAlternateFileName="")) returned 1 [0132.107] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f6ce61c, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f6ce61c, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x544241af, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xb05, dwReserved0=0x0, dwReserved1=0x0, cFileName="15x15dot.png", cAlternateFileName="")) returned 1 [0132.108] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f740a33, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f740a33, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x5444a30d, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x15f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="720x480icongraphic.png", cAlternateFileName="")) returned 1 [0132.108] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f6ce61c, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f6ce61c, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x5444a30d, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x143e, dwReserved0=0x0, dwReserved1=0x0, cFileName="720_480shadow.png", cAlternateFileName="")) returned 1 [0132.108] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ec759d0, ftCreationTime.dwHighDateTime=0x1d5e786, ftLastAccessTime.dwLowDateTime=0x6ec759d0, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x6ec759d0, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x773, dwReserved0=0x0, dwReserved1=0x0, cFileName="Decrypt Instructions.txt", cAlternateFileName="DECRYP~1.TXT")) returned 1 [0132.108] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f7ff104, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f7ff104, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x54613375, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationLeft_ButtonGraphic.png", cAlternateFileName="")) returned 1 [0132.108] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f7b2e4a, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f7b2e4a, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x54e68005, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc3a, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationLeft_SelectionSubpicture.png", cAlternateFileName="")) returned 1 [0132.108] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f7d8fa7, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f7d8fa7, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x54f98af5, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13a1, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationRight_ButtonGraphic.png", cAlternateFileName="")) returned 1 [0132.108] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f78cced, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f78cced, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x5529264d, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc2e, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationRight_SelectionSubpicture.png", cAlternateFileName="")) returned 1 [0132.108] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f766b90, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f766b90, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x5529264d, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x135b, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationUp_ButtonGraphic.png", cAlternateFileName="")) returned 1 [0132.108] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f7b2e4a, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f7b2e4a, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x552b87ab, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc09, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationUp_SelectionSubpicture.png", cAlternateFileName="")) returned 1 [0132.108] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f6a84bf, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f6a84bf, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x552b87ab, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x60d7, dwReserved0=0x0, dwReserved1=0x0, cFileName="photograph.png", cAlternateFileName="")) returned 1 [0132.108] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f6a84bf, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f6a84bf, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x552b87ab, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x60d7, dwReserved0=0x0, dwReserved1=0x0, cFileName="photograph.png", cAlternateFileName="")) returned 0 [0132.108] FindClose (in: hFindFile=0x26bc80 | out: hFindFile=0x26bc80) returned 1 [0132.109] SetErrorMode (uMode=0x0) returned 0x1 [0132.109] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel", nBufferLength=0x105, lpBuffer=0x12d390, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel", lpFilePart=0x0) returned 0x32 [0132.109] SetErrorMode (uMode=0x1) returned 0x0 [0132.109] FindFirstFileW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\*", lpFindFileData=0x12d530 | out: lpFindFileData=0x12d530*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa108fe2a, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa8b92dd, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa11287e6, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x26bc80 [0132.111] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa108fe2a, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa8b92dd, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa11287e6, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0132.111] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x726438ff, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x726438ff, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x552b87ab, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x701d, dwReserved0=0x0, dwReserved1=0x0, cFileName="16_9-frame-background.png", cAlternateFileName="")) returned 1 [0132.111] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x726438ff, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x726438ff, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x552b87ab, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x609, dwReserved0=0x0, dwReserved1=0x0, cFileName="16_9-frame-highlight.png", cAlternateFileName="")) returned 1 [0132.111] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72669a5c, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x72669a5c, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x553c313d, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc57, dwReserved0=0x0, dwReserved1=0x0, cFileName="16_9-frame-image-inset.png", cAlternateFileName="")) returned 1 [0132.111] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7268fbb9, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x7268fbb9, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x553e929b, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x213d, dwReserved0=0x0, dwReserved1=0x0, cFileName="btn-back-static.png", cAlternateFileName="")) returned 1 [0132.111] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7268fbb9, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x7268fbb9, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x553e929b, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x1fb8, dwReserved0=0x0, dwReserved1=0x0, cFileName="btn-next-static.png", cAlternateFileName="")) returned 1 [0132.111] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7268fbb9, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x7268fbb9, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x553e929b, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x20d6, dwReserved0=0x0, dwReserved1=0x0, cFileName="btn-previous-static.png", cAlternateFileName="")) returned 1 [0132.111] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x726b5d16, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x726b5d16, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x553e929b, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x3c2, dwReserved0=0x0, dwReserved1=0x0, cFileName="button-bullet.png", cAlternateFileName="")) returned 1 [0132.111] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x726b5d16, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x726b5d16, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x553e929b, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x2cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="button-highlight.png", cAlternateFileName="")) returned 1 [0132.111] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x726dbe73, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x726dbe73, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x5540f3f9, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x47c1d, dwReserved0=0x0, dwReserved1=0x0, cFileName="content-background.png", cAlternateFileName="")) returned 1 [0132.111] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72701fd0, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x72701fd0, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x5540f3f9, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x11276, dwReserved0=0x0, dwReserved1=0x0, cFileName="header-background.png", cAlternateFileName="")) returned 1 [0132.111] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72701fd0, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x72701fd0, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x55435557, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x3126b, dwReserved0=0x0, dwReserved1=0x0, cFileName="passport.png", cAlternateFileName="")) returned 1 [0132.111] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7272812d, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x7272812d, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x55435557, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x10e94, dwReserved0=0x0, dwReserved1=0x0, cFileName="Passport.wmv", cAlternateFileName="")) returned 1 [0132.111] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x727e67fe, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x727e67fe, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x5545b6b5, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x58bf8, dwReserved0=0x0, dwReserved1=0x0, cFileName="passportcover.png", cAlternateFileName="")) returned 1 [0132.111] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7279a544, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x7279a544, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x5545b6b5, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x7254, dwReserved0=0x0, dwReserved1=0x0, cFileName="PassportMask.wmv", cAlternateFileName="")) returned 1 [0132.112] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7279a544, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x7279a544, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x5545b6b5, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x7254, dwReserved0=0x0, dwReserved1=0x0, cFileName="PassportMask_PAL.wmv", cAlternateFileName="")) returned 1 [0132.112] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x727c06a1, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x727c06a1, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x55435557, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x12b9, dwReserved0=0x0, dwReserved1=0x0, cFileName="passport_mask_left.png", cAlternateFileName="")) returned 1 [0132.112] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x727e67fe, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x727e67fe, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x55435557, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x12cd, dwReserved0=0x0, dwReserved1=0x0, cFileName="passport_mask_right.png", cAlternateFileName="")) returned 1 [0132.112] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7274e28a, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x7274e28a, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x55435557, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x1aaec, dwReserved0=0x0, dwReserved1=0x0, cFileName="Passport_PAL.wmv", cAlternateFileName="")) returned 1 [0132.112] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72538f74, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x72538f74, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x5545b6b5, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x18337, dwReserved0=0x0, dwReserved1=0x0, cFileName="play-background.png", cAlternateFileName="")) returned 1 [0132.112] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72512e17, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x72512e17, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x5545b6b5, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xbf1, dwReserved0=0x0, dwReserved1=0x0, cFileName="selection_subpicture.png", cAlternateFileName="")) returned 1 [0132.112] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x725f7645, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x725f7645, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x5545b6b5, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x658e, dwReserved0=0x0, dwReserved1=0x0, cFileName="travel.png", cAlternateFileName="")) returned 1 [0132.112] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7258522e, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x7258522e, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x55481813, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x321a4, dwReserved0=0x0, dwReserved1=0x0, cFileName="TravelIntroToMain.wmv", cAlternateFileName="")) returned 1 [0132.112] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x725d14e8, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x725d14e8, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x554a7971, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xef24, dwReserved0=0x0, dwReserved1=0x0, cFileName="TravelIntroToMainMask.wmv", cAlternateFileName="")) returned 1 [0132.112] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x725f7645, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x725f7645, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x554a7971, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xef24, dwReserved0=0x0, dwReserved1=0x0, cFileName="TravelIntroToMainMask_PAL.wmv", cAlternateFileName="")) returned 1 [0132.112] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x725ab38b, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x725ab38b, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x55481813, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x37f64, dwReserved0=0x0, dwReserved1=0x0, cFileName="TravelIntroToMain_PAL.wmv", cAlternateFileName="")) returned 1 [0132.112] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x725ab38b, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x725ab38b, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x55481813, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x37f64, dwReserved0=0x0, dwReserved1=0x0, cFileName="TravelIntroToMain_PAL.wmv", cAlternateFileName="")) returned 0 [0132.112] FindClose (in: hFindFile=0x26bc80 | out: hFindFile=0x26bc80) returned 1 [0132.113] SetErrorMode (uMode=0x0) returned 0x1 [0132.117] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\16_9-frame-background.png", nBufferLength=0x105, lpBuffer=0x12d5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\16_9-frame-background.png", lpFilePart=0x0) returned 0x4c [0132.117] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\16_9-frame-background.png", nBufferLength=0x105, lpBuffer=0x12d590, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\16_9-frame-background.png", lpFilePart=0x0) returned 0x4c [0132.118] SetErrorMode (uMode=0x1) returned 0x0 [0132.118] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\16_9-frame-background.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\travel\\16_9-frame-background.png"), fInfoLevelId=0x0, lpFileInformation=0x12d810 | out: lpFileInformation=0x12d810*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x726438ff, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x726438ff, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x552b87ab, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x701d)) returned 1 [0132.119] SetErrorMode (uMode=0x0) returned 0x1 [0132.119] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\16_9-frame-background.png", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\16_9-frame-background.png", lpFilePart=0x0) returned 0x4c [0132.119] SetErrorMode (uMode=0x1) returned 0x0 [0132.119] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\16_9-frame-background.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\travel\\16_9-frame-background.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2e8 [0132.120] SetErrorMode (uMode=0x0) returned 0x1 [0132.120] GetFileType (hFile=0x2e8) returned 0x1 [0132.120] GetFileSize (in: hFile=0x2e8, lpFileSizeHigh=0x12d8c8 | out: lpFileSizeHigh=0x12d8c8*=0x0) returned 0x701d [0132.120] ReadFile (in: hFile=0x2e8, lpBuffer=0x26ddc60, nNumberOfBytesToRead=0x701d, lpNumberOfBytesRead=0x12d7a8, lpOverlapped=0x0 | out: lpBuffer=0x26ddc60*, lpNumberOfBytesRead=0x12d7a8*=0x701d, lpOverlapped=0x0) returned 1 [0132.136] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\16_9-frame-background.png", nBufferLength=0x105, lpBuffer=0x12d270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\16_9-frame-background.png", lpFilePart=0x0) returned 0x4c [0132.137] SetErrorMode (uMode=0x1) returned 0x0 [0132.137] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\16_9-frame-background.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\travel\\16_9-frame-background.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0132.138] SetErrorMode (uMode=0x0) returned 0x1 [0132.139] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\16_9-frame-highlight.png", nBufferLength=0x105, lpBuffer=0x12d5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\16_9-frame-highlight.png", lpFilePart=0x0) returned 0x4b [0132.139] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\16_9-frame-highlight.png", nBufferLength=0x105, lpBuffer=0x12d590, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\16_9-frame-highlight.png", lpFilePart=0x0) returned 0x4b [0132.139] SetErrorMode (uMode=0x1) returned 0x0 [0132.139] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\16_9-frame-highlight.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\travel\\16_9-frame-highlight.png"), fInfoLevelId=0x0, lpFileInformation=0x12d810 | out: lpFileInformation=0x12d810*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x726438ff, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x726438ff, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x552b87ab, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x609)) returned 1 [0132.139] SetErrorMode (uMode=0x0) returned 0x1 [0132.139] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\16_9-frame-highlight.png", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\16_9-frame-highlight.png", lpFilePart=0x0) returned 0x4b [0132.139] SetErrorMode (uMode=0x1) returned 0x0 [0132.140] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\16_9-frame-highlight.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\travel\\16_9-frame-highlight.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2e8 [0132.140] SetErrorMode (uMode=0x0) returned 0x1 [0132.140] GetFileType (hFile=0x2e8) returned 0x1 [0132.140] GetFileSize (in: hFile=0x2e8, lpFileSizeHigh=0x12d8c8 | out: lpFileSizeHigh=0x12d8c8*=0x0) returned 0x609 [0132.140] ReadFile (in: hFile=0x2e8, lpBuffer=0x27e9a28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12d7a8, lpOverlapped=0x0 | out: lpBuffer=0x27e9a28*, lpNumberOfBytesRead=0x12d7a8*=0x609, lpOverlapped=0x0) returned 1 [0132.157] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\16_9-frame-highlight.png", nBufferLength=0x105, lpBuffer=0x12d270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\16_9-frame-highlight.png", lpFilePart=0x0) returned 0x4b [0132.157] SetErrorMode (uMode=0x1) returned 0x0 [0132.157] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\16_9-frame-highlight.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\travel\\16_9-frame-highlight.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0132.159] SetErrorMode (uMode=0x0) returned 0x1 [0132.160] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\16_9-frame-image-inset.png", nBufferLength=0x105, lpBuffer=0x12d5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\16_9-frame-image-inset.png", lpFilePart=0x0) returned 0x4d [0132.160] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\16_9-frame-image-inset.png", nBufferLength=0x105, lpBuffer=0x12d590, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\16_9-frame-image-inset.png", lpFilePart=0x0) returned 0x4d [0132.160] SetErrorMode (uMode=0x1) returned 0x0 [0132.160] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\16_9-frame-image-inset.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\travel\\16_9-frame-image-inset.png"), fInfoLevelId=0x0, lpFileInformation=0x12d810 | out: lpFileInformation=0x12d810*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72669a5c, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x72669a5c, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x553c313d, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc57)) returned 1 [0132.160] SetErrorMode (uMode=0x0) returned 0x1 [0132.161] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\16_9-frame-image-inset.png", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\16_9-frame-image-inset.png", lpFilePart=0x0) returned 0x4d [0132.161] SetErrorMode (uMode=0x1) returned 0x0 [0132.161] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\16_9-frame-image-inset.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\travel\\16_9-frame-image-inset.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2e8 [0132.161] SetErrorMode (uMode=0x0) returned 0x1 [0132.161] GetFileType (hFile=0x2e8) returned 0x1 [0132.161] GetFileSize (in: hFile=0x2e8, lpFileSizeHigh=0x12d8c8 | out: lpFileSizeHigh=0x12d8c8*=0x0) returned 0xc57 [0132.161] ReadFile (in: hFile=0x2e8, lpBuffer=0x28ce8b0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12d7a8, lpOverlapped=0x0 | out: lpBuffer=0x28ce8b0*, lpNumberOfBytesRead=0x12d7a8*=0xc57, lpOverlapped=0x0) returned 1 [0132.185] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\16_9-frame-image-inset.png", nBufferLength=0x105, lpBuffer=0x12d270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\16_9-frame-image-inset.png", lpFilePart=0x0) returned 0x4d [0132.185] SetErrorMode (uMode=0x1) returned 0x0 [0132.185] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\16_9-frame-image-inset.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\travel\\16_9-frame-image-inset.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0132.187] SetErrorMode (uMode=0x0) returned 0x1 [0132.187] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\btn-back-static.png", nBufferLength=0x105, lpBuffer=0x12d5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\btn-back-static.png", lpFilePart=0x0) returned 0x46 [0132.187] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\btn-back-static.png", nBufferLength=0x105, lpBuffer=0x12d590, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\btn-back-static.png", lpFilePart=0x0) returned 0x46 [0132.187] SetErrorMode (uMode=0x1) returned 0x0 [0132.187] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\btn-back-static.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\travel\\btn-back-static.png"), fInfoLevelId=0x0, lpFileInformation=0x12d810 | out: lpFileInformation=0x12d810*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7268fbb9, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x7268fbb9, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x553e929b, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x213d)) returned 1 [0132.188] SetErrorMode (uMode=0x0) returned 0x1 [0132.188] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\btn-back-static.png", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\btn-back-static.png", lpFilePart=0x0) returned 0x46 [0132.188] SetErrorMode (uMode=0x1) returned 0x0 [0132.188] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\btn-back-static.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\travel\\btn-back-static.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2e8 [0132.188] SetErrorMode (uMode=0x0) returned 0x1 [0132.188] GetFileType (hFile=0x2e8) returned 0x1 [0132.188] GetFileSize (in: hFile=0x2e8, lpFileSizeHigh=0x12d8c8 | out: lpFileSizeHigh=0x12d8c8*=0x0) returned 0x213d [0132.188] ReadFile (in: hFile=0x2e8, lpBuffer=0x27b6340, nNumberOfBytesToRead=0x213d, lpNumberOfBytesRead=0x12d7a8, lpOverlapped=0x0 | out: lpBuffer=0x27b6340*, lpNumberOfBytesRead=0x12d7a8*=0x213d, lpOverlapped=0x0) returned 1 [0132.207] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\btn-back-static.png", nBufferLength=0x105, lpBuffer=0x12d270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\btn-back-static.png", lpFilePart=0x0) returned 0x46 [0132.208] SetErrorMode (uMode=0x1) returned 0x0 [0132.208] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\btn-back-static.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\travel\\btn-back-static.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0132.209] SetErrorMode (uMode=0x0) returned 0x1 [0132.209] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\btn-next-static.png", nBufferLength=0x105, lpBuffer=0x12d5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\btn-next-static.png", lpFilePart=0x0) returned 0x46 [0132.209] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\btn-next-static.png", nBufferLength=0x105, lpBuffer=0x12d590, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\btn-next-static.png", lpFilePart=0x0) returned 0x46 [0132.209] SetErrorMode (uMode=0x1) returned 0x0 [0132.210] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\btn-next-static.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\travel\\btn-next-static.png"), fInfoLevelId=0x0, lpFileInformation=0x12d810 | out: lpFileInformation=0x12d810*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7268fbb9, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x7268fbb9, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x553e929b, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x1fb8)) returned 1 [0132.211] SetErrorMode (uMode=0x0) returned 0x1 [0132.211] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\btn-next-static.png", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\btn-next-static.png", lpFilePart=0x0) returned 0x46 [0132.211] SetErrorMode (uMode=0x1) returned 0x0 [0132.211] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\btn-next-static.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\travel\\btn-next-static.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2e8 [0132.211] SetErrorMode (uMode=0x0) returned 0x1 [0132.211] GetFileType (hFile=0x2e8) returned 0x1 [0132.211] GetFileSize (in: hFile=0x2e8, lpFileSizeHigh=0x12d8c8 | out: lpFileSizeHigh=0x12d8c8*=0x0) returned 0x1fb8 [0132.211] ReadFile (in: hFile=0x2e8, lpBuffer=0x28a4120, nNumberOfBytesToRead=0x1fb8, lpNumberOfBytesRead=0x12d7a8, lpOverlapped=0x0 | out: lpBuffer=0x28a4120*, lpNumberOfBytesRead=0x12d7a8*=0x1fb8, lpOverlapped=0x0) returned 1 [0132.235] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\btn-next-static.png", nBufferLength=0x105, lpBuffer=0x12d270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\btn-next-static.png", lpFilePart=0x0) returned 0x46 [0132.235] SetErrorMode (uMode=0x1) returned 0x0 [0132.235] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\btn-next-static.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\travel\\btn-next-static.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0132.237] SetErrorMode (uMode=0x0) returned 0x1 [0132.237] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\btn-previous-static.png", nBufferLength=0x105, lpBuffer=0x12d5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\btn-previous-static.png", lpFilePart=0x0) returned 0x4a [0132.238] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\btn-previous-static.png", nBufferLength=0x105, lpBuffer=0x12d590, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\btn-previous-static.png", lpFilePart=0x0) returned 0x4a [0132.238] SetErrorMode (uMode=0x1) returned 0x0 [0132.238] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\btn-previous-static.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\travel\\btn-previous-static.png"), fInfoLevelId=0x0, lpFileInformation=0x12d810 | out: lpFileInformation=0x12d810*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7268fbb9, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x7268fbb9, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x553e929b, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x20d6)) returned 1 [0132.238] SetErrorMode (uMode=0x0) returned 0x1 [0132.238] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\btn-previous-static.png", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\btn-previous-static.png", lpFilePart=0x0) returned 0x4a [0132.238] SetErrorMode (uMode=0x1) returned 0x0 [0132.238] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\btn-previous-static.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\travel\\btn-previous-static.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2e8 [0132.238] SetErrorMode (uMode=0x0) returned 0x1 [0132.238] GetFileType (hFile=0x2e8) returned 0x1 [0132.238] GetFileSize (in: hFile=0x2e8, lpFileSizeHigh=0x12d8c8 | out: lpFileSizeHigh=0x12d8c8*=0x0) returned 0x20d6 [0132.239] ReadFile (in: hFile=0x2e8, lpBuffer=0x2795678, nNumberOfBytesToRead=0x20d6, lpNumberOfBytesRead=0x12d7a8, lpOverlapped=0x0 | out: lpBuffer=0x2795678*, lpNumberOfBytesRead=0x12d7a8*=0x20d6, lpOverlapped=0x0) returned 1 [0132.255] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\btn-previous-static.png", nBufferLength=0x105, lpBuffer=0x12d270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\btn-previous-static.png", lpFilePart=0x0) returned 0x4a [0132.255] SetErrorMode (uMode=0x1) returned 0x0 [0132.255] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\btn-previous-static.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\travel\\btn-previous-static.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0132.256] SetErrorMode (uMode=0x0) returned 0x1 [0132.257] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\button-bullet.png", nBufferLength=0x105, lpBuffer=0x12d5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\button-bullet.png", lpFilePart=0x0) returned 0x44 [0132.257] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\button-bullet.png", nBufferLength=0x105, lpBuffer=0x12d590, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\button-bullet.png", lpFilePart=0x0) returned 0x44 [0132.257] SetErrorMode (uMode=0x1) returned 0x0 [0132.257] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\button-bullet.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\travel\\button-bullet.png"), fInfoLevelId=0x0, lpFileInformation=0x12d810 | out: lpFileInformation=0x12d810*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x726b5d16, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x726b5d16, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x553e929b, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x3c2)) returned 1 [0132.257] SetErrorMode (uMode=0x0) returned 0x1 [0132.258] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\button-bullet.png", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\button-bullet.png", lpFilePart=0x0) returned 0x44 [0132.258] SetErrorMode (uMode=0x1) returned 0x0 [0132.258] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\button-bullet.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\travel\\button-bullet.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2e8 [0132.258] SetErrorMode (uMode=0x0) returned 0x1 [0132.258] GetFileType (hFile=0x2e8) returned 0x1 [0132.258] GetFileSize (in: hFile=0x2e8, lpFileSizeHigh=0x12d8c8 | out: lpFileSizeHigh=0x12d8c8*=0x0) returned 0x3c2 [0132.258] ReadFile (in: hFile=0x2e8, lpBuffer=0x2883620, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12d7a8, lpOverlapped=0x0 | out: lpBuffer=0x2883620*, lpNumberOfBytesRead=0x12d7a8*=0x3c2, lpOverlapped=0x0) returned 1 [0132.276] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\button-bullet.png", nBufferLength=0x105, lpBuffer=0x12d270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\button-bullet.png", lpFilePart=0x0) returned 0x44 [0132.276] SetErrorMode (uMode=0x1) returned 0x0 [0132.276] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\button-bullet.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\travel\\button-bullet.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0132.278] SetErrorMode (uMode=0x0) returned 0x1 [0132.278] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\button-highlight.png", nBufferLength=0x105, lpBuffer=0x12d5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\button-highlight.png", lpFilePart=0x0) returned 0x47 [0132.278] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\button-highlight.png", nBufferLength=0x105, lpBuffer=0x12d590, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\button-highlight.png", lpFilePart=0x0) returned 0x47 [0132.278] SetErrorMode (uMode=0x1) returned 0x0 [0132.278] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\button-highlight.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\travel\\button-highlight.png"), fInfoLevelId=0x0, lpFileInformation=0x12d810 | out: lpFileInformation=0x12d810*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x726b5d16, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x726b5d16, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x553e929b, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x2cc)) returned 1 [0132.279] SetErrorMode (uMode=0x0) returned 0x1 [0132.279] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\button-highlight.png", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\button-highlight.png", lpFilePart=0x0) returned 0x47 [0132.279] SetErrorMode (uMode=0x1) returned 0x0 [0132.279] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\button-highlight.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\travel\\button-highlight.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2e8 [0132.279] SetErrorMode (uMode=0x0) returned 0x1 [0132.279] GetFileType (hFile=0x2e8) returned 0x1 [0132.279] GetFileSize (in: hFile=0x2e8, lpFileSizeHigh=0x12d8c8 | out: lpFileSizeHigh=0x12d8c8*=0x0) returned 0x2cc [0132.279] ReadFile (in: hFile=0x2e8, lpBuffer=0x276bdb0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12d7a8, lpOverlapped=0x0 | out: lpBuffer=0x276bdb0*, lpNumberOfBytesRead=0x12d7a8*=0x2cc, lpOverlapped=0x0) returned 1 [0132.302] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\button-highlight.png", nBufferLength=0x105, lpBuffer=0x12d270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\button-highlight.png", lpFilePart=0x0) returned 0x47 [0132.302] SetErrorMode (uMode=0x1) returned 0x0 [0132.302] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\button-highlight.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\travel\\button-highlight.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0132.303] SetErrorMode (uMode=0x0) returned 0x1 [0132.304] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\content-background.png", nBufferLength=0x105, lpBuffer=0x12d5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\content-background.png", lpFilePart=0x0) returned 0x49 [0132.304] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\content-background.png", nBufferLength=0x105, lpBuffer=0x12d590, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\content-background.png", lpFilePart=0x0) returned 0x49 [0132.304] SetErrorMode (uMode=0x1) returned 0x0 [0132.304] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\content-background.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\travel\\content-background.png"), fInfoLevelId=0x0, lpFileInformation=0x12d810 | out: lpFileInformation=0x12d810*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x726dbe73, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x726dbe73, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x5540f3f9, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x47c1d)) returned 1 [0132.305] SetErrorMode (uMode=0x0) returned 0x1 [0132.305] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\content-background.png", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\content-background.png", lpFilePart=0x0) returned 0x49 [0132.305] SetErrorMode (uMode=0x1) returned 0x0 [0132.306] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\content-background.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\travel\\content-background.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2e8 [0132.306] SetErrorMode (uMode=0x0) returned 0x1 [0132.306] GetFileType (hFile=0x2e8) returned 0x1 [0132.306] GetFileSize (in: hFile=0x2e8, lpFileSizeHigh=0x12d8c8 | out: lpFileSizeHigh=0x12d8c8*=0x0) returned 0x47c1d [0132.307] ReadFile (in: hFile=0x2e8, lpBuffer=0x12f319c8, nNumberOfBytesToRead=0x47c1d, lpNumberOfBytesRead=0x12d7a8, lpOverlapped=0x0 | out: lpBuffer=0x12f319c8*, lpNumberOfBytesRead=0x12d7a8*=0x47c1d, lpOverlapped=0x0) returned 1 [0132.377] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\content-background.png", nBufferLength=0x105, lpBuffer=0x12d270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\content-background.png", lpFilePart=0x0) returned 0x49 [0132.377] SetErrorMode (uMode=0x1) returned 0x0 [0132.378] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\content-background.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\travel\\content-background.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0132.379] SetErrorMode (uMode=0x0) returned 0x1 [0132.379] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\header-background.png", nBufferLength=0x105, lpBuffer=0x12d5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\header-background.png", lpFilePart=0x0) returned 0x48 [0132.380] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\header-background.png", nBufferLength=0x105, lpBuffer=0x12d590, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\header-background.png", lpFilePart=0x0) returned 0x48 [0132.380] SetErrorMode (uMode=0x1) returned 0x0 [0132.380] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\header-background.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\travel\\header-background.png"), fInfoLevelId=0x0, lpFileInformation=0x12d810 | out: lpFileInformation=0x12d810*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72701fd0, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x72701fd0, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x5540f3f9, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x11276)) returned 1 [0132.380] SetErrorMode (uMode=0x0) returned 0x1 [0132.380] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\header-background.png", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\header-background.png", lpFilePart=0x0) returned 0x48 [0132.380] SetErrorMode (uMode=0x1) returned 0x0 [0132.380] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\header-background.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\travel\\header-background.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2e8 [0132.381] SetErrorMode (uMode=0x0) returned 0x1 [0132.381] GetFileType (hFile=0x2e8) returned 0x1 [0132.381] GetFileSize (in: hFile=0x2e8, lpFileSizeHigh=0x12d8c8 | out: lpFileSizeHigh=0x12d8c8*=0x0) returned 0x11276 [0132.381] ReadFile (in: hFile=0x2e8, lpBuffer=0x27301e8, nNumberOfBytesToRead=0x11276, lpNumberOfBytesRead=0x12d7a8, lpOverlapped=0x0 | out: lpBuffer=0x27301e8*, lpNumberOfBytesRead=0x12d7a8*=0x11276, lpOverlapped=0x0) returned 1 [0132.520] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\header-background.png", nBufferLength=0x105, lpBuffer=0x12d270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\header-background.png", lpFilePart=0x0) returned 0x48 [0132.520] SetErrorMode (uMode=0x1) returned 0x0 [0132.520] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\header-background.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\travel\\header-background.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0132.522] SetErrorMode (uMode=0x0) returned 0x1 [0132.522] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\passport.png", nBufferLength=0x105, lpBuffer=0x12d5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\passport.png", lpFilePart=0x0) returned 0x3f [0132.522] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\passport.png", nBufferLength=0x105, lpBuffer=0x12d590, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\passport.png", lpFilePart=0x0) returned 0x3f [0132.522] SetErrorMode (uMode=0x1) returned 0x0 [0132.522] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\passport.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\travel\\passport.png"), fInfoLevelId=0x0, lpFileInformation=0x12d810 | out: lpFileInformation=0x12d810*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72701fd0, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x72701fd0, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x55435557, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x3126b)) returned 1 [0132.523] SetErrorMode (uMode=0x0) returned 0x1 [0132.523] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\passport.png", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\passport.png", lpFilePart=0x0) returned 0x3f [0132.523] SetErrorMode (uMode=0x1) returned 0x0 [0132.523] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\passport.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\travel\\passport.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2e8 [0132.523] SetErrorMode (uMode=0x0) returned 0x1 [0132.523] GetFileType (hFile=0x2e8) returned 0x1 [0132.523] GetFileSize (in: hFile=0x2e8, lpFileSizeHigh=0x12d8c8 | out: lpFileSizeHigh=0x12d8c8*=0x0) returned 0x3126b [0132.524] ReadFile (in: hFile=0x2e8, lpBuffer=0x13102848, nNumberOfBytesToRead=0x3126b, lpNumberOfBytesRead=0x12d7a8, lpOverlapped=0x0 | out: lpBuffer=0x13102848*, lpNumberOfBytesRead=0x12d7a8*=0x3126b, lpOverlapped=0x0) returned 1 [0132.582] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\passport.png", nBufferLength=0x105, lpBuffer=0x12d270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\passport.png", lpFilePart=0x0) returned 0x3f [0132.583] SetErrorMode (uMode=0x1) returned 0x0 [0132.583] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\passport.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\travel\\passport.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0132.584] SetErrorMode (uMode=0x0) returned 0x1 [0132.585] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\Passport.wmv", nBufferLength=0x105, lpBuffer=0x12d5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\Passport.wmv", lpFilePart=0x0) returned 0x3f [0132.585] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\Passport.wmv", nBufferLength=0x105, lpBuffer=0x12d590, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\Passport.wmv", lpFilePart=0x0) returned 0x3f [0132.585] SetErrorMode (uMode=0x1) returned 0x0 [0132.585] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\Passport.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\travel\\passport.wmv"), fInfoLevelId=0x0, lpFileInformation=0x12d810 | out: lpFileInformation=0x12d810*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7272812d, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x7272812d, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x55435557, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x10e94)) returned 1 [0132.585] SetErrorMode (uMode=0x0) returned 0x1 [0132.585] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\Passport.wmv", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\Passport.wmv", lpFilePart=0x0) returned 0x3f [0132.585] SetErrorMode (uMode=0x1) returned 0x0 [0132.585] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\Passport.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\travel\\passport.wmv"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2e8 [0132.586] SetErrorMode (uMode=0x0) returned 0x1 [0132.586] GetFileType (hFile=0x2e8) returned 0x1 [0132.586] GetFileSize (in: hFile=0x2e8, lpFileSizeHigh=0x12d8c8 | out: lpFileSizeHigh=0x12d8c8*=0x0) returned 0x10e94 [0132.586] ReadFile (in: hFile=0x2e8, lpBuffer=0x27374d8, nNumberOfBytesToRead=0x10e94, lpNumberOfBytesRead=0x12d7a8, lpOverlapped=0x0 | out: lpBuffer=0x27374d8*, lpNumberOfBytesRead=0x12d7a8*=0x10e94, lpOverlapped=0x0) returned 1 [0132.608] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\Passport.wmv", nBufferLength=0x105, lpBuffer=0x12d270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\Passport.wmv", lpFilePart=0x0) returned 0x3f [0132.608] SetErrorMode (uMode=0x1) returned 0x0 [0132.608] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\Passport.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\travel\\passport.wmv"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0132.609] SetErrorMode (uMode=0x0) returned 0x1 [0132.609] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\passportcover.png", nBufferLength=0x105, lpBuffer=0x12d5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\passportcover.png", lpFilePart=0x0) returned 0x44 [0132.609] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\passportcover.png", nBufferLength=0x105, lpBuffer=0x12d590, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\passportcover.png", lpFilePart=0x0) returned 0x44 [0132.610] SetErrorMode (uMode=0x1) returned 0x0 [0132.610] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\passportcover.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\travel\\passportcover.png"), fInfoLevelId=0x0, lpFileInformation=0x12d810 | out: lpFileInformation=0x12d810*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x727e67fe, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x727e67fe, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x5545b6b5, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x58bf8)) returned 1 [0132.611] SetErrorMode (uMode=0x0) returned 0x1 [0132.611] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\passportcover.png", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\passportcover.png", lpFilePart=0x0) returned 0x44 [0132.611] SetErrorMode (uMode=0x1) returned 0x0 [0132.611] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\passportcover.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\travel\\passportcover.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2e8 [0132.612] SetErrorMode (uMode=0x0) returned 0x1 [0132.612] GetFileType (hFile=0x2e8) returned 0x1 [0132.612] GetFileSize (in: hFile=0x2e8, lpFileSizeHigh=0x12d8c8 | out: lpFileSizeHigh=0x12d8c8*=0x0) returned 0x58bf8 [0132.613] ReadFile (in: hFile=0x2e8, lpBuffer=0x1324b4e8, nNumberOfBytesToRead=0x58bf8, lpNumberOfBytesRead=0x12d7a8, lpOverlapped=0x0 | out: lpBuffer=0x1324b4e8*, lpNumberOfBytesRead=0x12d7a8*=0x58bf8, lpOverlapped=0x0) returned 1 [0132.679] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\passportcover.png", nBufferLength=0x105, lpBuffer=0x12d270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\passportcover.png", lpFilePart=0x0) returned 0x44 [0132.679] SetErrorMode (uMode=0x1) returned 0x0 [0132.680] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\passportcover.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\travel\\passportcover.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0132.681] SetErrorMode (uMode=0x0) returned 0x1 [0132.681] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\PassportMask.wmv", nBufferLength=0x105, lpBuffer=0x12d5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\PassportMask.wmv", lpFilePart=0x0) returned 0x43 [0132.681] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\PassportMask.wmv", nBufferLength=0x105, lpBuffer=0x12d590, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\PassportMask.wmv", lpFilePart=0x0) returned 0x43 [0132.681] SetErrorMode (uMode=0x1) returned 0x0 [0132.681] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\PassportMask.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\travel\\passportmask.wmv"), fInfoLevelId=0x0, lpFileInformation=0x12d810 | out: lpFileInformation=0x12d810*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7279a544, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x7279a544, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x5545b6b5, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x7254)) returned 1 [0132.682] SetErrorMode (uMode=0x0) returned 0x1 [0132.682] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\PassportMask.wmv", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\PassportMask.wmv", lpFilePart=0x0) returned 0x43 [0132.682] SetErrorMode (uMode=0x1) returned 0x0 [0132.682] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\PassportMask.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\travel\\passportmask.wmv"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2e8 [0132.682] SetErrorMode (uMode=0x0) returned 0x1 [0132.682] GetFileType (hFile=0x2e8) returned 0x1 [0132.682] GetFileSize (in: hFile=0x2e8, lpFileSizeHigh=0x12d8c8 | out: lpFileSizeHigh=0x12d8c8*=0x0) returned 0x7254 [0132.682] ReadFile (in: hFile=0x2e8, lpBuffer=0x273d830, nNumberOfBytesToRead=0x7254, lpNumberOfBytesRead=0x12d7a8, lpOverlapped=0x0 | out: lpBuffer=0x273d830*, lpNumberOfBytesRead=0x12d7a8*=0x7254, lpOverlapped=0x0) returned 1 [0132.702] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\PassportMask.wmv", nBufferLength=0x105, lpBuffer=0x12d270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\PassportMask.wmv", lpFilePart=0x0) returned 0x43 [0132.702] SetErrorMode (uMode=0x1) returned 0x0 [0132.702] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\PassportMask.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\travel\\passportmask.wmv"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0132.703] SetErrorMode (uMode=0x0) returned 0x1 [0132.704] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\PassportMask_PAL.wmv", nBufferLength=0x105, lpBuffer=0x12d5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\PassportMask_PAL.wmv", lpFilePart=0x0) returned 0x47 [0132.704] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\PassportMask_PAL.wmv", nBufferLength=0x105, lpBuffer=0x12d590, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\PassportMask_PAL.wmv", lpFilePart=0x0) returned 0x47 [0132.704] SetErrorMode (uMode=0x1) returned 0x0 [0132.704] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\PassportMask_PAL.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\travel\\passportmask_pal.wmv"), fInfoLevelId=0x0, lpFileInformation=0x12d810 | out: lpFileInformation=0x12d810*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7279a544, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x7279a544, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x5545b6b5, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x7254)) returned 1 [0132.704] SetErrorMode (uMode=0x0) returned 0x1 [0132.704] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\PassportMask_PAL.wmv", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\PassportMask_PAL.wmv", lpFilePart=0x0) returned 0x47 [0132.704] SetErrorMode (uMode=0x1) returned 0x0 [0132.705] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\PassportMask_PAL.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\travel\\passportmask_pal.wmv"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2e8 [0132.705] SetErrorMode (uMode=0x0) returned 0x1 [0132.705] GetFileType (hFile=0x2e8) returned 0x1 [0132.705] GetFileSize (in: hFile=0x2e8, lpFileSizeHigh=0x12d8c8 | out: lpFileSizeHigh=0x12d8c8*=0x0) returned 0x7254 [0132.705] ReadFile (in: hFile=0x2e8, lpBuffer=0x2849cc0, nNumberOfBytesToRead=0x7254, lpNumberOfBytesRead=0x12d7a8, lpOverlapped=0x0 | out: lpBuffer=0x2849cc0*, lpNumberOfBytesRead=0x12d7a8*=0x7254, lpOverlapped=0x0) returned 1 [0132.726] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\PassportMask_PAL.wmv", nBufferLength=0x105, lpBuffer=0x12d270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\PassportMask_PAL.wmv", lpFilePart=0x0) returned 0x47 [0132.726] SetErrorMode (uMode=0x1) returned 0x0 [0132.726] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\PassportMask_PAL.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\travel\\passportmask_pal.wmv"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0132.728] SetErrorMode (uMode=0x0) returned 0x1 [0132.728] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\passport_mask_left.png", nBufferLength=0x105, lpBuffer=0x12d5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\passport_mask_left.png", lpFilePart=0x0) returned 0x49 [0132.728] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\passport_mask_left.png", nBufferLength=0x105, lpBuffer=0x12d590, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\passport_mask_left.png", lpFilePart=0x0) returned 0x49 [0132.728] SetErrorMode (uMode=0x1) returned 0x0 [0132.728] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\passport_mask_left.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\travel\\passport_mask_left.png"), fInfoLevelId=0x0, lpFileInformation=0x12d810 | out: lpFileInformation=0x12d810*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x727c06a1, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x727c06a1, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x55435557, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x12b9)) returned 1 [0132.729] SetErrorMode (uMode=0x0) returned 0x1 [0132.729] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\passport_mask_left.png", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\passport_mask_left.png", lpFilePart=0x0) returned 0x49 [0132.729] SetErrorMode (uMode=0x1) returned 0x0 [0132.729] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\passport_mask_left.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\travel\\passport_mask_left.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2e8 [0132.729] SetErrorMode (uMode=0x0) returned 0x1 [0132.729] GetFileType (hFile=0x2e8) returned 0x1 [0132.729] GetFileSize (in: hFile=0x2e8, lpFileSizeHigh=0x12d8c8 | out: lpFileSizeHigh=0x12d8c8*=0x0) returned 0x12b9 [0132.729] ReadFile (in: hFile=0x2e8, lpBuffer=0x275d110, nNumberOfBytesToRead=0x12b9, lpNumberOfBytesRead=0x12d7a8, lpOverlapped=0x0 | out: lpBuffer=0x275d110*, lpNumberOfBytesRead=0x12d7a8*=0x12b9, lpOverlapped=0x0) returned 1 [0133.257] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\passport_mask_left.png", nBufferLength=0x105, lpBuffer=0x12d270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\passport_mask_left.png", lpFilePart=0x0) returned 0x49 [0133.257] SetErrorMode (uMode=0x1) returned 0x0 [0133.257] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\passport_mask_left.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\travel\\passport_mask_left.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0133.259] SetErrorMode (uMode=0x0) returned 0x1 [0133.259] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\passport_mask_right.png", nBufferLength=0x105, lpBuffer=0x12d5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\passport_mask_right.png", lpFilePart=0x0) returned 0x4a [0133.259] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\passport_mask_right.png", nBufferLength=0x105, lpBuffer=0x12d590, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\passport_mask_right.png", lpFilePart=0x0) returned 0x4a [0133.259] SetErrorMode (uMode=0x1) returned 0x0 [0133.260] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\passport_mask_right.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\travel\\passport_mask_right.png"), fInfoLevelId=0x0, lpFileInformation=0x12d810 | out: lpFileInformation=0x12d810*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x727e67fe, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x727e67fe, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x55435557, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x12cd)) returned 1 [0133.261] SetErrorMode (uMode=0x0) returned 0x1 [0133.261] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\passport_mask_right.png", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\passport_mask_right.png", lpFilePart=0x0) returned 0x4a [0133.261] SetErrorMode (uMode=0x1) returned 0x0 [0133.261] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\passport_mask_right.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\travel\\passport_mask_right.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2e8 [0133.261] SetErrorMode (uMode=0x0) returned 0x1 [0133.261] GetFileType (hFile=0x2e8) returned 0x1 [0133.261] GetFileSize (in: hFile=0x2e8, lpFileSizeHigh=0x12d8c8 | out: lpFileSizeHigh=0x12d8c8*=0x0) returned 0x12cd [0133.261] ReadFile (in: hFile=0x2e8, lpBuffer=0x2845838, nNumberOfBytesToRead=0x12cd, lpNumberOfBytesRead=0x12d7a8, lpOverlapped=0x0 | out: lpBuffer=0x2845838*, lpNumberOfBytesRead=0x12d7a8*=0x12cd, lpOverlapped=0x0) returned 1 [0133.293] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\passport_mask_right.png", nBufferLength=0x105, lpBuffer=0x12d270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\passport_mask_right.png", lpFilePart=0x0) returned 0x4a [0133.293] SetErrorMode (uMode=0x1) returned 0x0 [0133.293] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\passport_mask_right.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\travel\\passport_mask_right.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0133.295] SetErrorMode (uMode=0x0) returned 0x1 [0133.295] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\Passport_PAL.wmv", nBufferLength=0x105, lpBuffer=0x12d5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\Passport_PAL.wmv", lpFilePart=0x0) returned 0x43 [0133.296] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\Passport_PAL.wmv", nBufferLength=0x105, lpBuffer=0x12d590, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\Passport_PAL.wmv", lpFilePart=0x0) returned 0x43 [0133.296] SetErrorMode (uMode=0x1) returned 0x0 [0133.296] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\Passport_PAL.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\travel\\passport_pal.wmv"), fInfoLevelId=0x0, lpFileInformation=0x12d810 | out: lpFileInformation=0x12d810*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7274e28a, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x7274e28a, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x55435557, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x1aaec)) returned 1 [0133.296] SetErrorMode (uMode=0x0) returned 0x1 [0133.296] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\Passport_PAL.wmv", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\Passport_PAL.wmv", lpFilePart=0x0) returned 0x43 [0133.296] SetErrorMode (uMode=0x1) returned 0x0 [0133.296] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\Passport_PAL.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\travel\\passport_pal.wmv"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2e8 [0133.298] SetErrorMode (uMode=0x0) returned 0x1 [0133.298] GetFileType (hFile=0x2e8) returned 0x1 [0133.298] GetFileSize (in: hFile=0x2e8, lpFileSizeHigh=0x12d8c8 | out: lpFileSizeHigh=0x12d8c8*=0x0) returned 0x1aaec [0133.299] ReadFile (in: hFile=0x2e8, lpBuffer=0x1345fd90, nNumberOfBytesToRead=0x1aaec, lpNumberOfBytesRead=0x12d7a8, lpOverlapped=0x0 | out: lpBuffer=0x1345fd90*, lpNumberOfBytesRead=0x12d7a8*=0x1aaec, lpOverlapped=0x0) returned 1 [0133.337] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\Passport_PAL.wmv", nBufferLength=0x105, lpBuffer=0x12d270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\Passport_PAL.wmv", lpFilePart=0x0) returned 0x43 [0133.338] SetErrorMode (uMode=0x1) returned 0x0 [0133.338] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\Passport_PAL.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\travel\\passport_pal.wmv"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0133.339] SetErrorMode (uMode=0x0) returned 0x1 [0133.340] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\play-background.png", nBufferLength=0x105, lpBuffer=0x12d5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\play-background.png", lpFilePart=0x0) returned 0x46 [0133.340] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\play-background.png", nBufferLength=0x105, lpBuffer=0x12d590, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\play-background.png", lpFilePart=0x0) returned 0x46 [0133.340] SetErrorMode (uMode=0x1) returned 0x0 [0133.340] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\play-background.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\travel\\play-background.png"), fInfoLevelId=0x0, lpFileInformation=0x12d810 | out: lpFileInformation=0x12d810*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72538f74, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x72538f74, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x5545b6b5, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x18337)) returned 1 [0133.340] SetErrorMode (uMode=0x0) returned 0x1 [0133.341] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\play-background.png", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\play-background.png", lpFilePart=0x0) returned 0x46 [0133.341] SetErrorMode (uMode=0x1) returned 0x0 [0133.341] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\play-background.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\travel\\play-background.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2e8 [0133.341] SetErrorMode (uMode=0x0) returned 0x1 [0133.341] GetFileType (hFile=0x2e8) returned 0x1 [0133.341] GetFileSize (in: hFile=0x2e8, lpFileSizeHigh=0x12d8c8 | out: lpFileSizeHigh=0x12d8c8*=0x0) returned 0x18337 [0133.342] ReadFile (in: hFile=0x2e8, lpBuffer=0x134fffe0, nNumberOfBytesToRead=0x18337, lpNumberOfBytesRead=0x12d7a8, lpOverlapped=0x0 | out: lpBuffer=0x134fffe0*, lpNumberOfBytesRead=0x12d7a8*=0x18337, lpOverlapped=0x0) returned 1 [0133.426] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\play-background.png", nBufferLength=0x105, lpBuffer=0x12d270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\play-background.png", lpFilePart=0x0) returned 0x46 [0133.426] SetErrorMode (uMode=0x1) returned 0x0 [0133.426] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\play-background.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\travel\\play-background.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0133.428] SetErrorMode (uMode=0x0) returned 0x1 [0133.429] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\selection_subpicture.png", nBufferLength=0x105, lpBuffer=0x12d5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\selection_subpicture.png", lpFilePart=0x0) returned 0x4b [0133.429] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\selection_subpicture.png", nBufferLength=0x105, lpBuffer=0x12d590, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\selection_subpicture.png", lpFilePart=0x0) returned 0x4b [0133.429] SetErrorMode (uMode=0x1) returned 0x0 [0133.429] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\selection_subpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\travel\\selection_subpicture.png"), fInfoLevelId=0x0, lpFileInformation=0x12d810 | out: lpFileInformation=0x12d810*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72512e17, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x72512e17, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x5545b6b5, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xbf1)) returned 1 [0133.429] SetErrorMode (uMode=0x0) returned 0x1 [0133.429] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\selection_subpicture.png", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\selection_subpicture.png", lpFilePart=0x0) returned 0x4b [0133.429] SetErrorMode (uMode=0x1) returned 0x0 [0133.429] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\selection_subpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\travel\\selection_subpicture.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2e8 [0133.429] SetErrorMode (uMode=0x0) returned 0x1 [0133.430] GetFileType (hFile=0x2e8) returned 0x1 [0133.430] GetFileSize (in: hFile=0x2e8, lpFileSizeHigh=0x12d8c8 | out: lpFileSizeHigh=0x12d8c8*=0x0) returned 0xbf1 [0133.430] ReadFile (in: hFile=0x2e8, lpBuffer=0x26e9ea8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12d7a8, lpOverlapped=0x0 | out: lpBuffer=0x26e9ea8*, lpNumberOfBytesRead=0x12d7a8*=0xbf1, lpOverlapped=0x0) returned 1 [0133.451] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\selection_subpicture.png", nBufferLength=0x105, lpBuffer=0x12d270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\selection_subpicture.png", lpFilePart=0x0) returned 0x4b [0133.452] SetErrorMode (uMode=0x1) returned 0x0 [0133.452] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\selection_subpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\travel\\selection_subpicture.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0133.453] SetErrorMode (uMode=0x0) returned 0x1 [0133.454] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\travel.png", nBufferLength=0x105, lpBuffer=0x12d5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\travel.png", lpFilePart=0x0) returned 0x3d [0133.454] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\travel.png", nBufferLength=0x105, lpBuffer=0x12d590, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\travel.png", lpFilePart=0x0) returned 0x3d [0133.454] SetErrorMode (uMode=0x1) returned 0x0 [0133.454] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\travel.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\travel\\travel.png"), fInfoLevelId=0x0, lpFileInformation=0x12d810 | out: lpFileInformation=0x12d810*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x725f7645, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x725f7645, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x5545b6b5, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x658e)) returned 1 [0133.458] SetErrorMode (uMode=0x0) returned 0x1 [0133.458] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\travel.png", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\travel.png", lpFilePart=0x0) returned 0x3d [0133.458] SetErrorMode (uMode=0x1) returned 0x0 [0133.458] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\travel.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\travel\\travel.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2e8 [0133.458] SetErrorMode (uMode=0x0) returned 0x1 [0133.459] GetFileType (hFile=0x2e8) returned 0x1 [0133.459] GetFileSize (in: hFile=0x2e8, lpFileSizeHigh=0x12d8c8 | out: lpFileSizeHigh=0x12d8c8*=0x0) returned 0x658e [0133.459] ReadFile (in: hFile=0x2e8, lpBuffer=0x27d00f0, nNumberOfBytesToRead=0x658e, lpNumberOfBytesRead=0x12d7a8, lpOverlapped=0x0 | out: lpBuffer=0x27d00f0*, lpNumberOfBytesRead=0x12d7a8*=0x658e, lpOverlapped=0x0) returned 1 [0133.481] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\travel.png", nBufferLength=0x105, lpBuffer=0x12d270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\travel.png", lpFilePart=0x0) returned 0x3d [0133.481] SetErrorMode (uMode=0x1) returned 0x0 [0133.481] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\travel.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\travel\\travel.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0133.483] SetErrorMode (uMode=0x0) returned 0x1 [0133.483] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\TravelIntroToMain.wmv", nBufferLength=0x105, lpBuffer=0x12d5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\TravelIntroToMain.wmv", lpFilePart=0x0) returned 0x48 [0133.483] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\TravelIntroToMain.wmv", nBufferLength=0x105, lpBuffer=0x12d590, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\TravelIntroToMain.wmv", lpFilePart=0x0) returned 0x48 [0133.484] SetErrorMode (uMode=0x1) returned 0x0 [0133.484] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\TravelIntroToMain.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\travel\\travelintrotomain.wmv"), fInfoLevelId=0x0, lpFileInformation=0x12d810 | out: lpFileInformation=0x12d810*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7258522e, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x7258522e, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x55481813, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x321a4)) returned 1 [0133.484] SetErrorMode (uMode=0x0) returned 0x1 [0133.484] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\TravelIntroToMain.wmv", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\TravelIntroToMain.wmv", lpFilePart=0x0) returned 0x48 [0133.484] SetErrorMode (uMode=0x1) returned 0x0 [0133.484] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\TravelIntroToMain.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\travel\\travelintrotomain.wmv"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2e8 [0133.484] SetErrorMode (uMode=0x0) returned 0x1 [0133.485] GetFileType (hFile=0x2e8) returned 0x1 [0133.485] GetFileSize (in: hFile=0x2e8, lpFileSizeHigh=0x12d8c8 | out: lpFileSizeHigh=0x12d8c8*=0x0) returned 0x321a4 [0133.486] ReadFile (in: hFile=0x2e8, lpBuffer=0x126c95a0, nNumberOfBytesToRead=0x321a4, lpNumberOfBytesRead=0x12d7a8, lpOverlapped=0x0 | out: lpBuffer=0x126c95a0*, lpNumberOfBytesRead=0x12d7a8*=0x321a4, lpOverlapped=0x0) returned 1 [0133.544] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\TravelIntroToMain.wmv", nBufferLength=0x105, lpBuffer=0x12d270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\TravelIntroToMain.wmv", lpFilePart=0x0) returned 0x48 [0133.544] SetErrorMode (uMode=0x1) returned 0x0 [0133.544] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\TravelIntroToMain.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\travel\\travelintrotomain.wmv"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0133.546] SetErrorMode (uMode=0x0) returned 0x1 [0133.547] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\TravelIntroToMainMask.wmv", nBufferLength=0x105, lpBuffer=0x12d5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\TravelIntroToMainMask.wmv", lpFilePart=0x0) returned 0x4c [0133.547] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\TravelIntroToMainMask.wmv", nBufferLength=0x105, lpBuffer=0x12d590, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\TravelIntroToMainMask.wmv", lpFilePart=0x0) returned 0x4c [0133.547] SetErrorMode (uMode=0x1) returned 0x0 [0133.547] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\TravelIntroToMainMask.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\travel\\travelintrotomainmask.wmv"), fInfoLevelId=0x0, lpFileInformation=0x12d810 | out: lpFileInformation=0x12d810*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x725d14e8, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x725d14e8, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x554a7971, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xef24)) returned 1 [0133.547] SetErrorMode (uMode=0x0) returned 0x1 [0133.547] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\TravelIntroToMainMask.wmv", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\TravelIntroToMainMask.wmv", lpFilePart=0x0) returned 0x4c [0133.547] SetErrorMode (uMode=0x1) returned 0x0 [0133.547] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\TravelIntroToMainMask.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\travel\\travelintrotomainmask.wmv"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2e8 [0133.548] SetErrorMode (uMode=0x0) returned 0x1 [0133.548] GetFileType (hFile=0x2e8) returned 0x1 [0133.548] GetFileSize (in: hFile=0x2e8, lpFileSizeHigh=0x12d8c8 | out: lpFileSizeHigh=0x12d8c8*=0x0) returned 0xef24 [0133.548] ReadFile (in: hFile=0x2e8, lpBuffer=0x27b88e8, nNumberOfBytesToRead=0xef24, lpNumberOfBytesRead=0x12d7a8, lpOverlapped=0x0 | out: lpBuffer=0x27b88e8*, lpNumberOfBytesRead=0x12d7a8*=0xef24, lpOverlapped=0x0) returned 1 [0133.581] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\TravelIntroToMainMask.wmv", nBufferLength=0x105, lpBuffer=0x12d270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\TravelIntroToMainMask.wmv", lpFilePart=0x0) returned 0x4c [0133.581] SetErrorMode (uMode=0x1) returned 0x0 [0133.582] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\TravelIntroToMainMask.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\travel\\travelintrotomainmask.wmv"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0133.583] SetErrorMode (uMode=0x0) returned 0x1 [0133.584] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\TravelIntroToMainMask_PAL.wmv", nBufferLength=0x105, lpBuffer=0x12d5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\TravelIntroToMainMask_PAL.wmv", lpFilePart=0x0) returned 0x50 [0133.584] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\TravelIntroToMainMask_PAL.wmv", nBufferLength=0x105, lpBuffer=0x12d590, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\TravelIntroToMainMask_PAL.wmv", lpFilePart=0x0) returned 0x50 [0133.584] SetErrorMode (uMode=0x1) returned 0x0 [0133.584] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\TravelIntroToMainMask_PAL.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\travel\\travelintrotomainmask_pal.wmv"), fInfoLevelId=0x0, lpFileInformation=0x12d810 | out: lpFileInformation=0x12d810*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x725f7645, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x725f7645, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x554a7971, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xef24)) returned 1 [0133.584] SetErrorMode (uMode=0x0) returned 0x1 [0133.584] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\TravelIntroToMainMask_PAL.wmv", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\TravelIntroToMainMask_PAL.wmv", lpFilePart=0x0) returned 0x50 [0133.584] SetErrorMode (uMode=0x1) returned 0x0 [0133.585] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\TravelIntroToMainMask_PAL.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\travel\\travelintrotomainmask_pal.wmv"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2e8 [0133.585] SetErrorMode (uMode=0x0) returned 0x1 [0133.585] GetFileType (hFile=0x2e8) returned 0x1 [0133.585] GetFileSize (in: hFile=0x2e8, lpFileSizeHigh=0x12d8c8 | out: lpFileSizeHigh=0x12d8c8*=0x0) returned 0xef24 [0133.585] ReadFile (in: hFile=0x2e8, lpBuffer=0x28d5cd0, nNumberOfBytesToRead=0xef24, lpNumberOfBytesRead=0x12d7a8, lpOverlapped=0x0 | out: lpBuffer=0x28d5cd0*, lpNumberOfBytesRead=0x12d7a8*=0xef24, lpOverlapped=0x0) returned 1 [0133.618] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\TravelIntroToMainMask_PAL.wmv", nBufferLength=0x105, lpBuffer=0x12d270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\TravelIntroToMainMask_PAL.wmv", lpFilePart=0x0) returned 0x50 [0133.618] SetErrorMode (uMode=0x1) returned 0x0 [0133.618] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\TravelIntroToMainMask_PAL.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\travel\\travelintrotomainmask_pal.wmv"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0133.620] SetErrorMode (uMode=0x0) returned 0x1 [0133.620] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\TravelIntroToMain_PAL.wmv", nBufferLength=0x105, lpBuffer=0x12d5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\TravelIntroToMain_PAL.wmv", lpFilePart=0x0) returned 0x4c [0133.620] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\TravelIntroToMain_PAL.wmv", nBufferLength=0x105, lpBuffer=0x12d590, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\TravelIntroToMain_PAL.wmv", lpFilePart=0x0) returned 0x4c [0133.620] SetErrorMode (uMode=0x1) returned 0x0 [0133.620] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\TravelIntroToMain_PAL.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\travel\\travelintrotomain_pal.wmv"), fInfoLevelId=0x0, lpFileInformation=0x12d810 | out: lpFileInformation=0x12d810*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x725ab38b, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x725ab38b, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x55481813, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x37f64)) returned 1 [0133.621] SetErrorMode (uMode=0x0) returned 0x1 [0133.622] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\TravelIntroToMain_PAL.wmv", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\TravelIntroToMain_PAL.wmv", lpFilePart=0x0) returned 0x4c [0133.622] SetErrorMode (uMode=0x1) returned 0x0 [0133.622] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\TravelIntroToMain_PAL.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\travel\\travelintrotomain_pal.wmv"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2e8 [0133.622] SetErrorMode (uMode=0x0) returned 0x1 [0133.622] GetFileType (hFile=0x2e8) returned 0x1 [0133.622] GetFileSize (in: hFile=0x2e8, lpFileSizeHigh=0x12d8c8 | out: lpFileSizeHigh=0x12d8c8*=0x0) returned 0x37f64 [0133.623] ReadFile (in: hFile=0x2e8, lpBuffer=0x12831d48, nNumberOfBytesToRead=0x37f64, lpNumberOfBytesRead=0x12d7a8, lpOverlapped=0x0 | out: lpBuffer=0x12831d48*, lpNumberOfBytesRead=0x12d7a8*=0x37f64, lpOverlapped=0x0) returned 1 [0133.662] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\TravelIntroToMain_PAL.wmv", nBufferLength=0x105, lpBuffer=0x12d270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\TravelIntroToMain_PAL.wmv", lpFilePart=0x0) returned 0x4c [0133.662] SetErrorMode (uMode=0x1) returned 0x0 [0133.662] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\TravelIntroToMain_PAL.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\travel\\travelintrotomain_pal.wmv"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0133.664] SetErrorMode (uMode=0x0) returned 0x1 [0133.664] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\Decrypt Instructions.txt", nBufferLength=0x105, lpBuffer=0x12d240, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\Decrypt Instructions.txt", lpFilePart=0x0) returned 0x4b [0133.664] SetErrorMode (uMode=0x1) returned 0x0 [0133.664] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\Decrypt Instructions.txt" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\travel\\decrypt instructions.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x2e8 [0133.665] SetErrorMode (uMode=0x0) returned 0x1 [0133.665] GetFileType (hFile=0x2e8) returned 0x1 [0133.665] WriteFile (in: hFile=0x2e8, lpBuffer=0x28e6548*, nNumberOfBytesToWrite=0x773, lpNumberOfBytesWritten=0x12d7a8, lpOverlapped=0x0 | out: lpBuffer=0x28e6548*, lpNumberOfBytesWritten=0x12d7a8*=0x773, lpOverlapped=0x0) returned 1 [0133.667] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel", nBufferLength=0x105, lpBuffer=0x12d430, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel", lpFilePart=0x0) returned 0x32 [0133.667] SetErrorMode (uMode=0x1) returned 0x0 [0133.667] FindFirstFileW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\*", lpFindFileData=0x12d5d0 | out: lpFindFileData=0x12d5d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa108fe2a, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x6fb301f0, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x6fb301f0, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x26bc80 [0133.667] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa108fe2a, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x6fb301f0, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x6fb301f0, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0133.667] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x726438ff, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x726438ff, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x552b87ab, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x701d, dwReserved0=0x0, dwReserved1=0x0, cFileName="16_9-frame-background.png", cAlternateFileName="")) returned 1 [0133.667] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x726438ff, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x726438ff, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x552b87ab, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x609, dwReserved0=0x0, dwReserved1=0x0, cFileName="16_9-frame-highlight.png", cAlternateFileName="")) returned 1 [0133.667] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72669a5c, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x72669a5c, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x553c313d, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc57, dwReserved0=0x0, dwReserved1=0x0, cFileName="16_9-frame-image-inset.png", cAlternateFileName="")) returned 1 [0133.667] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7268fbb9, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x7268fbb9, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x553e929b, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x213d, dwReserved0=0x0, dwReserved1=0x0, cFileName="btn-back-static.png", cAlternateFileName="")) returned 1 [0133.668] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7268fbb9, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x7268fbb9, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x553e929b, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x1fb8, dwReserved0=0x0, dwReserved1=0x0, cFileName="btn-next-static.png", cAlternateFileName="")) returned 1 [0133.668] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7268fbb9, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x7268fbb9, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x553e929b, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x20d6, dwReserved0=0x0, dwReserved1=0x0, cFileName="btn-previous-static.png", cAlternateFileName="")) returned 1 [0133.668] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x726b5d16, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x726b5d16, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x553e929b, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x3c2, dwReserved0=0x0, dwReserved1=0x0, cFileName="button-bullet.png", cAlternateFileName="")) returned 1 [0133.668] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x726b5d16, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x726b5d16, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x553e929b, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x2cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="button-highlight.png", cAlternateFileName="")) returned 1 [0133.668] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x726dbe73, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x726dbe73, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x5540f3f9, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x47c1d, dwReserved0=0x0, dwReserved1=0x0, cFileName="content-background.png", cAlternateFileName="")) returned 1 [0133.668] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fb301f0, ftCreationTime.dwHighDateTime=0x1d5e786, ftLastAccessTime.dwLowDateTime=0x6fb301f0, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x6fb301f0, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x773, dwReserved0=0x0, dwReserved1=0x0, cFileName="Decrypt Instructions.txt", cAlternateFileName="DECRYP~1.TXT")) returned 1 [0133.668] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72701fd0, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x72701fd0, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x5540f3f9, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x11276, dwReserved0=0x0, dwReserved1=0x0, cFileName="header-background.png", cAlternateFileName="")) returned 1 [0133.668] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72701fd0, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x72701fd0, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x55435557, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x3126b, dwReserved0=0x0, dwReserved1=0x0, cFileName="passport.png", cAlternateFileName="")) returned 1 [0133.668] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7272812d, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x7272812d, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x55435557, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x10e94, dwReserved0=0x0, dwReserved1=0x0, cFileName="Passport.wmv", cAlternateFileName="")) returned 1 [0133.668] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x727e67fe, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x727e67fe, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x5545b6b5, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x58bf8, dwReserved0=0x0, dwReserved1=0x0, cFileName="passportcover.png", cAlternateFileName="")) returned 1 [0133.668] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7279a544, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x7279a544, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x5545b6b5, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x7254, dwReserved0=0x0, dwReserved1=0x0, cFileName="PassportMask.wmv", cAlternateFileName="")) returned 1 [0133.668] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7279a544, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x7279a544, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x5545b6b5, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x7254, dwReserved0=0x0, dwReserved1=0x0, cFileName="PassportMask_PAL.wmv", cAlternateFileName="")) returned 1 [0133.668] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x727c06a1, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x727c06a1, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x55435557, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x12b9, dwReserved0=0x0, dwReserved1=0x0, cFileName="passport_mask_left.png", cAlternateFileName="")) returned 1 [0133.668] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x727e67fe, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x727e67fe, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x55435557, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x12cd, dwReserved0=0x0, dwReserved1=0x0, cFileName="passport_mask_right.png", cAlternateFileName="")) returned 1 [0133.669] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7274e28a, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x7274e28a, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x55435557, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x1aaec, dwReserved0=0x0, dwReserved1=0x0, cFileName="Passport_PAL.wmv", cAlternateFileName="")) returned 1 [0133.669] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72538f74, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x72538f74, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x5545b6b5, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x18337, dwReserved0=0x0, dwReserved1=0x0, cFileName="play-background.png", cAlternateFileName="")) returned 1 [0133.669] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72512e17, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x72512e17, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x5545b6b5, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xbf1, dwReserved0=0x0, dwReserved1=0x0, cFileName="selection_subpicture.png", cAlternateFileName="")) returned 1 [0133.669] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x725f7645, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x725f7645, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x5545b6b5, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x658e, dwReserved0=0x0, dwReserved1=0x0, cFileName="travel.png", cAlternateFileName="")) returned 1 [0133.669] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7258522e, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x7258522e, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x55481813, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x321a4, dwReserved0=0x0, dwReserved1=0x0, cFileName="TravelIntroToMain.wmv", cAlternateFileName="")) returned 1 [0133.669] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x725d14e8, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x725d14e8, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x554a7971, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xef24, dwReserved0=0x0, dwReserved1=0x0, cFileName="TravelIntroToMainMask.wmv", cAlternateFileName="")) returned 1 [0133.669] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x725f7645, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x725f7645, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x554a7971, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xef24, dwReserved0=0x0, dwReserved1=0x0, cFileName="TravelIntroToMainMask_PAL.wmv", cAlternateFileName="")) returned 1 [0133.669] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x725ab38b, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x725ab38b, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x55481813, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x37f64, dwReserved0=0x0, dwReserved1=0x0, cFileName="TravelIntroToMain_PAL.wmv", cAlternateFileName="")) returned 1 [0133.669] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x725ab38b, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x725ab38b, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x55481813, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x37f64, dwReserved0=0x0, dwReserved1=0x0, cFileName="TravelIntroToMain_PAL.wmv", cAlternateFileName="")) returned 0 [0133.669] FindClose (in: hFindFile=0x26bc80 | out: hFindFile=0x26bc80) returned 1 [0133.669] SetErrorMode (uMode=0x0) returned 0x1 [0133.670] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\VideoWall", nBufferLength=0x105, lpBuffer=0x12d390, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\VideoWall", lpFilePart=0x0) returned 0x35 [0133.670] SetErrorMode (uMode=0x1) returned 0x0 [0133.670] FindFirstFileW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\VideoWall\\*", lpFindFileData=0x12d530 | out: lpFindFileData=0x12d530*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa1ad8615, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa820921, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa1ad8615, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x26bc80 [0133.670] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa1ad8615, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa820921, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa1ad8615, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0133.670] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f2a3ff0, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f2a3ff0, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x554a7971, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xb04, dwReserved0=0x0, dwReserved1=0x0, cFileName="203x8subpicture.png", cAlternateFileName="")) returned 1 [0133.670] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f27de93, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f27de93, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x554a7971, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x4d86, dwReserved0=0x0, dwReserved1=0x0, cFileName="videowall.png", cAlternateFileName="")) returned 1 [0133.670] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f27de93, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f27de93, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x554a7971, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x4d86, dwReserved0=0x0, dwReserved1=0x0, cFileName="videowall.png", cAlternateFileName="")) returned 0 [0133.670] FindClose (in: hFindFile=0x26bc80 | out: hFindFile=0x26bc80) returned 1 [0133.671] SetErrorMode (uMode=0x0) returned 0x1 [0133.703] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\VideoWall\\203x8subpicture.png", nBufferLength=0x105, lpBuffer=0x12d5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\VideoWall\\203x8subpicture.png", lpFilePart=0x0) returned 0x49 [0133.704] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\VideoWall\\203x8subpicture.png", nBufferLength=0x105, lpBuffer=0x12d590, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\VideoWall\\203x8subpicture.png", lpFilePart=0x0) returned 0x49 [0133.704] SetErrorMode (uMode=0x1) returned 0x0 [0133.704] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\VideoWall\\203x8subpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\videowall\\203x8subpicture.png"), fInfoLevelId=0x0, lpFileInformation=0x12d810 | out: lpFileInformation=0x12d810*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f2a3ff0, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f2a3ff0, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x554a7971, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xb04)) returned 1 [0133.704] SetErrorMode (uMode=0x0) returned 0x1 [0133.704] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\VideoWall\\203x8subpicture.png", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\VideoWall\\203x8subpicture.png", lpFilePart=0x0) returned 0x49 [0133.704] SetErrorMode (uMode=0x1) returned 0x0 [0133.704] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\VideoWall\\203x8subpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\videowall\\203x8subpicture.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2e8 [0133.705] SetErrorMode (uMode=0x0) returned 0x1 [0133.705] GetFileType (hFile=0x2e8) returned 0x1 [0133.705] GetFileSize (in: hFile=0x2e8, lpFileSizeHigh=0x12d8c8 | out: lpFileSizeHigh=0x12d8c8*=0x0) returned 0xb04 [0133.705] ReadFile (in: hFile=0x2e8, lpBuffer=0x28eaf50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12d7a8, lpOverlapped=0x0 | out: lpBuffer=0x28eaf50*, lpNumberOfBytesRead=0x12d7a8*=0xb04, lpOverlapped=0x0) returned 1 [0134.253] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\VideoWall\\203x8subpicture.png", nBufferLength=0x105, lpBuffer=0x12d270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\VideoWall\\203x8subpicture.png", lpFilePart=0x0) returned 0x49 [0134.253] SetErrorMode (uMode=0x1) returned 0x0 [0134.254] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\VideoWall\\203x8subpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\videowall\\203x8subpicture.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0134.255] SetErrorMode (uMode=0x0) returned 0x1 [0134.256] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\VideoWall\\videowall.png", nBufferLength=0x105, lpBuffer=0x12d5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\VideoWall\\videowall.png", lpFilePart=0x0) returned 0x43 [0134.256] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\VideoWall\\videowall.png", nBufferLength=0x105, lpBuffer=0x12d590, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\VideoWall\\videowall.png", lpFilePart=0x0) returned 0x43 [0134.256] SetErrorMode (uMode=0x1) returned 0x0 [0134.256] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\VideoWall\\videowall.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\videowall\\videowall.png"), fInfoLevelId=0x0, lpFileInformation=0x12d810 | out: lpFileInformation=0x12d810*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f27de93, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f27de93, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x554a7971, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x4d86)) returned 1 [0134.257] SetErrorMode (uMode=0x0) returned 0x1 [0134.257] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\VideoWall\\videowall.png", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\VideoWall\\videowall.png", lpFilePart=0x0) returned 0x43 [0134.257] SetErrorMode (uMode=0x1) returned 0x0 [0134.257] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\VideoWall\\videowall.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\videowall\\videowall.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2e8 [0134.257] SetErrorMode (uMode=0x0) returned 0x1 [0134.257] GetFileType (hFile=0x2e8) returned 0x1 [0134.257] GetFileSize (in: hFile=0x2e8, lpFileSizeHigh=0x12d8c8 | out: lpFileSizeHigh=0x12d8c8*=0x0) returned 0x4d86 [0134.258] ReadFile (in: hFile=0x2e8, lpBuffer=0x279c230, nNumberOfBytesToRead=0x4d86, lpNumberOfBytesRead=0x12d7a8, lpOverlapped=0x0 | out: lpBuffer=0x279c230*, lpNumberOfBytesRead=0x12d7a8*=0x4d86, lpOverlapped=0x0) returned 1 [0134.280] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\VideoWall\\videowall.png", nBufferLength=0x105, lpBuffer=0x12d270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\VideoWall\\videowall.png", lpFilePart=0x0) returned 0x43 [0134.280] SetErrorMode (uMode=0x1) returned 0x0 [0134.281] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\VideoWall\\videowall.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\videowall\\videowall.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0134.282] SetErrorMode (uMode=0x0) returned 0x1 [0134.283] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\VideoWall\\Decrypt Instructions.txt", nBufferLength=0x105, lpBuffer=0x12d240, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\VideoWall\\Decrypt Instructions.txt", lpFilePart=0x0) returned 0x4e [0134.283] SetErrorMode (uMode=0x1) returned 0x0 [0134.283] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\VideoWall\\Decrypt Instructions.txt" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\videowall\\decrypt instructions.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x2e8 [0134.284] SetErrorMode (uMode=0x0) returned 0x1 [0134.284] GetFileType (hFile=0x2e8) returned 0x1 [0134.284] WriteFile (in: hFile=0x2e8, lpBuffer=0x289d7c0*, nNumberOfBytesToWrite=0x773, lpNumberOfBytesWritten=0x12d7a8, lpOverlapped=0x0 | out: lpBuffer=0x289d7c0*, lpNumberOfBytesWritten=0x12d7a8*=0x773, lpOverlapped=0x0) returned 1 [0134.285] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\VideoWall", nBufferLength=0x105, lpBuffer=0x12d430, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\VideoWall", lpFilePart=0x0) returned 0x35 [0134.285] SetErrorMode (uMode=0x1) returned 0x0 [0134.285] FindFirstFileW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\VideoWall\\*", lpFindFileData=0x12d5d0 | out: lpFindFileData=0x12d5d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa1ad8615, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x701238f0, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x701238f0, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x26bc80 [0134.286] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa1ad8615, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x701238f0, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x701238f0, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0134.286] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f2a3ff0, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f2a3ff0, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x554a7971, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xb04, dwReserved0=0x0, dwReserved1=0x0, cFileName="203x8subpicture.png", cAlternateFileName="")) returned 1 [0134.286] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x701238f0, ftCreationTime.dwHighDateTime=0x1d5e786, ftLastAccessTime.dwLowDateTime=0x701238f0, ftLastAccessTime.dwHighDateTime=0x1d5e786, ftLastWriteTime.dwLowDateTime=0x701238f0, ftLastWriteTime.dwHighDateTime=0x1d5e786, nFileSizeHigh=0x0, nFileSizeLow=0x773, dwReserved0=0x0, dwReserved1=0x0, cFileName="Decrypt Instructions.txt", cAlternateFileName="DECRYP~1.TXT")) returned 1 [0134.286] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f27de93, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f27de93, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x554a7971, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x4d86, dwReserved0=0x0, dwReserved1=0x0, cFileName="videowall.png", cAlternateFileName="")) returned 1 [0134.286] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f27de93, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f27de93, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x554a7971, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x4d86, dwReserved0=0x0, dwReserved1=0x0, cFileName="videowall.png", cAlternateFileName="")) returned 0 [0134.286] FindClose (in: hFindFile=0x26bc80 | out: hFindFile=0x26bc80) returned 1 [0134.286] SetErrorMode (uMode=0x0) returned 0x1 [0134.286] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Vignette", nBufferLength=0x105, lpBuffer=0x12d390, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Vignette", lpFilePart=0x0) returned 0x34 [0134.287] SetErrorMode (uMode=0x1) returned 0x0 [0134.287] FindFirstFileW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Vignette\\*", lpFindFileData=0x12d530 | out: lpFindFileData=0x12d530*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa1ad8615, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa761cf6, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa1afe884, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x26bc80 [0134.289] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa1ad8615, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa761cf6, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa1afe884, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0134.289] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f84b3be, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f84b3be, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x554a7971, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x11da, dwReserved0=0x0, dwReserved1=0x0, cFileName="1047x576black.png", cAlternateFileName="")) returned 1 [0134.289] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f87151b, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f87151b, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x554a7971, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xb05, dwReserved0=0x0, dwReserved1=0x0, cFileName="15x15dot.png", cAlternateFileName="")) returned 1 [0134.289] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f8bd7d5, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f8bd7d5, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x554a7971, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationLeft_ButtonGraphic.png", cAlternateFileName="")) returned 1 [0134.289] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f8e3932, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f8e3932, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x554a7971, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc3a, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationLeft_SelectionSubpicture.png", cAlternateFileName="")) returned 1 [0134.289] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f909a8f, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f909a8f, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x554a7971, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13a1, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationRight_ButtonGraphic.png", cAlternateFileName="")) returned 1 [0134.289] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f909a8f, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f909a8f, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x554cdacf, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc2e, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationRight_SelectionSubpicture.png", cAlternateFileName="")) returned 1 [0134.289] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f897678, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f897678, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x554cdacf, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x135b, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationUp_ButtonGraphic.png", cAlternateFileName="")) returned 1 [0134.289] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f8bd7d5, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f8bd7d5, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x554cdacf, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc09, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationUp_SelectionSubpicture.png", cAlternateFileName="")) returned 1 [0134.289] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f84b3be, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f84b3be, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x554cdacf, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x6c2b, dwReserved0=0x0, dwReserved1=0x0, cFileName="softedges.png", cAlternateFileName="")) returned 1 [0134.289] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f897678, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f897678, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x554cdacf, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xdcdf, dwReserved0=0x0, dwReserved1=0x0, cFileName="vignettemask25.png", cAlternateFileName="")) returned 1 [0134.290] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f87151b, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f87151b, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x554cdacf, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x1c5d, dwReserved0=0x0, dwReserved1=0x0, cFileName="whiteband.png", cAlternateFileName="")) returned 1 [0134.290] FindNextFileW (in: hFindFile=0x26bc80, lpFindFileData=0x12d540 | out: lpFindFileData=0x12d540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f87151b, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f87151b, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x554cdacf, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x1c5d, dwReserved0=0x0, dwReserved1=0x0, cFileName="whiteband.png", cAlternateFileName="")) returned 0 [0134.290] FindClose (in: hFindFile=0x26bc80 | out: hFindFile=0x26bc80) returned 1 [0134.291] SetErrorMode (uMode=0x0) returned 0x1 [0134.291] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Vignette\\1047x576black.png", nBufferLength=0x105, lpBuffer=0x12d5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Vignette\\1047x576black.png", lpFilePart=0x0) returned 0x46 [0134.291] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Vignette\\1047x576black.png", nBufferLength=0x105, lpBuffer=0x12d590, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Vignette\\1047x576black.png", lpFilePart=0x0) returned 0x46 [0134.292] SetErrorMode (uMode=0x1) returned 0x0 [0134.292] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Vignette\\1047x576black.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\vignette\\1047x576black.png"), fInfoLevelId=0x0, lpFileInformation=0x12d810 | out: lpFileInformation=0x12d810*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f84b3be, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f84b3be, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x554a7971, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x11da)) returned 1 [0134.293] SetErrorMode (uMode=0x0) returned 0x1 [0134.293] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Vignette\\1047x576black.png", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Vignette\\1047x576black.png", lpFilePart=0x0) returned 0x46 [0134.293] SetErrorMode (uMode=0x1) returned 0x0 [0134.293] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Vignette\\1047x576black.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\vignette\\1047x576black.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2e8 [0134.293] SetErrorMode (uMode=0x0) returned 0x1 [0134.293] GetFileType (hFile=0x2e8) returned 0x1 [0134.294] GetFileSize (in: hFile=0x2e8, lpFileSizeHigh=0x12d8c8 | out: lpFileSizeHigh=0x12d8c8*=0x0) returned 0x11da [0134.294] ReadFile (in: hFile=0x2e8, lpBuffer=0x28a1cd0, nNumberOfBytesToRead=0x11da, lpNumberOfBytesRead=0x12d7a8, lpOverlapped=0x0 | out: lpBuffer=0x28a1cd0*, lpNumberOfBytesRead=0x12d7a8*=0x11da, lpOverlapped=0x0) returned 1 [0134.320] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Vignette\\1047x576black.png", nBufferLength=0x105, lpBuffer=0x12d270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Vignette\\1047x576black.png", lpFilePart=0x0) returned 0x46 [0134.320] SetErrorMode (uMode=0x1) returned 0x0 [0134.320] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Vignette\\1047x576black.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\vignette\\1047x576black.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0134.322] SetErrorMode (uMode=0x0) returned 0x1 [0134.322] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Vignette\\15x15dot.png", nBufferLength=0x105, lpBuffer=0x12d5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Vignette\\15x15dot.png", lpFilePart=0x0) returned 0x41 [0134.322] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Vignette\\15x15dot.png", nBufferLength=0x105, lpBuffer=0x12d590, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Vignette\\15x15dot.png", lpFilePart=0x0) returned 0x41 [0134.322] SetErrorMode (uMode=0x1) returned 0x0 [0134.322] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Vignette\\15x15dot.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\vignette\\15x15dot.png"), fInfoLevelId=0x0, lpFileInformation=0x12d810 | out: lpFileInformation=0x12d810*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f87151b, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f87151b, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x554a7971, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xb05)) returned 1 [0134.323] SetErrorMode (uMode=0x0) returned 0x1 [0134.323] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Vignette\\15x15dot.png", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Vignette\\15x15dot.png", lpFilePart=0x0) returned 0x41 [0134.323] SetErrorMode (uMode=0x1) returned 0x0 [0134.323] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Vignette\\15x15dot.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\vignette\\15x15dot.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2e8 [0134.323] SetErrorMode (uMode=0x0) returned 0x1 [0134.323] GetFileType (hFile=0x2e8) returned 0x1 [0134.324] GetFileSize (in: hFile=0x2e8, lpFileSizeHigh=0x12d8c8 | out: lpFileSizeHigh=0x12d8c8*=0x0) returned 0xb05 [0134.324] ReadFile (in: hFile=0x2e8, lpBuffer=0x278e948, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12d7a8, lpOverlapped=0x0 | out: lpBuffer=0x278e948*, lpNumberOfBytesRead=0x12d7a8*=0xb05, lpOverlapped=0x0) returned 1 Thread: id = 2 os_tid = 0x32c Thread: id = 3 os_tid = 0x7b8 [0028.205] CoGetContextToken (in: pToken=0x1aeff390 | out: pToken=0x1aeff390) returned 0x800401f0 [0028.205] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 [0055.407] CloseHandle (hObject=0x1e4) returned 1 [0055.408] CloseHandle (hObject=0x1e0) returned 1 [0055.409] CloseHandle (hObject=0x1dc) returned 1 [0055.410] CloseHandle (hObject=0x1d8) returned 1 [0055.410] CloseHandle (hObject=0x4a0) returned 1 [0055.410] CloseHandle (hObject=0x1d4) returned 1 [0055.411] CloseHandle (hObject=0x1d0) returned 1 [0055.411] CloseHandle (hObject=0x1cc) returned 1 [0055.412] CloseHandle (hObject=0x1c8) returned 1 [0055.413] CloseHandle (hObject=0x2d4) returned 1 [0055.413] CloseHandle (hObject=0x1b4) returned 1 [0055.414] CloseHandle (hObject=0x344) returned 1 [0055.414] CloseHandle (hObject=0x2d0) returned 1 [0055.414] CloseHandle (hObject=0x278) returned 1 [0055.415] CloseHandle (hObject=0x274) returned 1 [0055.416] CloseHandle (hObject=0x36c) returned 1 [0055.416] CloseHandle (hObject=0x1f4) returned 1 [0055.416] CloseHandle (hObject=0x1f0) returned 1 [0055.417] CloseHandle (hObject=0x1ec) returned 1 [0055.417] CloseHandle (hObject=0x1e8) returned 1 Thread: id = 4 os_tid = 0xb64 Thread: id = 5 os_tid = 0xb88 Thread: id = 6 os_tid = 0xb8c Thread: id = 7 os_tid = 0xb48 Thread: id = 8 os_tid = 0x858 Thread: id = 9 os_tid = 0xb38 [0034.538] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 [0034.545] ResetEvent (hEvent=0x1ac) returned 1 Thread: id = 10 os_tid = 0xa98 Thread: id = 11 os_tid = 0xb18 Process: id = "2" image_name = "vssadmin.exe" filename = "c:\\windows\\system32\\vssadmin.exe" page_root = "0x30ba6000" os_pid = "0xb28" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "1" os_parent_pid = "0x328" cmd_line = "\"C:\\Windows\\System32\\vssadmin.exe\" delete shadows /all /quiet" cur_dir = "C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\" os_username = "XDUWTFONO\\5p5NrGJn0jS HALPmcxz" bitness = "32" os_groups = "XDUWTFONO\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000e6e5" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 12 os_tid = 0xb60 Thread: id = 13 os_tid = 0x65c Thread: id = 14 os_tid = 0x15c Thread: id = 15 os_tid = 0x578 Thread: id = 16 os_tid = 0x240 Process: id = "3" image_name = "vssvc.exe" filename = "c:\\windows\\system32\\vssvc.exe" page_root = "0x32125000" os_pid = "0x7f0" os_integrity_level = "0x4000" os_privileges = "0xe60b7e890" monitor_reason = "rpc_server" parent_id = "2" os_parent_pid = "0x1d8" cmd_line = "C:\\Windows\\system32\\vssvc.exe" cur_dir = "C:\\Windows\\system32\\" os_username = "NT AUTHORITY\\SYSTEM" bitness = "32" os_groups = "Everyone" [0x7], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\SERVICE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT SERVICE\\VSS" [0xe], "NT AUTHORITY\\Logon Session 00000000:00070de1" [0xc000000f], "LOCAL" [0x7], "BUILTIN\\Administrators" [0xe] Thread: id = 17 os_tid = 0x220 Thread: id = 18 os_tid = 0x764 Thread: id = 19 os_tid = 0x788 [0051.710] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0xf3db80 | out: lpSystemTimeAsFileTime=0xf3db80*(dwLowDateTime=0x3eeb94b0, dwHighDateTime=0x1d5e786)) [0051.710] GetCurrentProcessId () returned 0x7f0 [0051.710] GetCurrentThreadId () returned 0x788 [0051.711] GetTickCount () returned 0x1155b69 [0051.711] QueryPerformanceCounter (in: lpPerformanceCount=0xf3db88 | out: lpPerformanceCount=0xf3db88*=19363125002) returned 1 [0051.711] malloc (_Size=0x100) returned 0x3e8e80 [0141.731] free (_Block=0x3e8e80) Thread: id = 20 os_tid = 0x7f4 Thread: id = 21 os_tid = 0x778 Thread: id = 22 os_tid = 0x24c Thread: id = 23 os_tid = 0x78c Thread: id = 38 os_tid = 0x874 Thread: id = 45 os_tid = 0x9f4 Thread: id = 50 os_tid = 0x308 Process: id = "4" image_name = "svchost.exe" filename = "c:\\windows\\system32\\svchost.exe" page_root = "0x9014000" os_pid = "0x3f8" os_integrity_level = "0x4000" os_privileges = "0x60800000" monitor_reason = "rpc_server" parent_id = "3" os_parent_pid = "0x1d8" cmd_line = "C:\\Windows\\system32\\svchost.exe -k LocalService" cur_dir = "C:\\Windows\\system32\\" os_username = "NT AUTHORITY\\Local Service" bitness = "32" os_groups = "Everyone" [0x7], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\SERVICE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT SERVICE\\EventSystem" [0xe], "NT SERVICE\\fdPHost" [0xa], "NT SERVICE\\lltdsvc" [0xa], "NT SERVICE\\netprofm" [0xa], "NT SERVICE\\nsi" [0xa], "NT SERVICE\\sppuinotify" [0xa], "NT SERVICE\\SstpSvc" [0xa], "NT SERVICE\\THREADORDER" [0xa], "NT SERVICE\\W32Time" [0xa], "NT SERVICE\\WdiServiceHost" [0xa], "NT SERVICE\\WebClient" [0xa], "NT SERVICE\\WinHttpAutoProxySvc" [0xa], "NT AUTHORITY\\Logon Session 00000000:0000db03" [0xc000000f], "LOCAL" [0x7] Thread: id = 24 os_tid = 0x7c0 Thread: id = 25 os_tid = 0x310 Thread: id = 26 os_tid = 0x128 Thread: id = 27 os_tid = 0x7c8 Thread: id = 28 os_tid = 0x6cc Thread: id = 29 os_tid = 0x644 Thread: id = 30 os_tid = 0x63c Thread: id = 31 os_tid = 0x154 Thread: id = 32 os_tid = 0x150 Thread: id = 33 os_tid = 0x120 Thread: id = 34 os_tid = 0x124 Thread: id = 35 os_tid = 0x118 Thread: id = 36 os_tid = 0x3fc Thread: id = 37 os_tid = 0x804 Thread: id = 47 os_tid = 0xa94 Thread: id = 48 os_tid = 0xaa8 Thread: id = 49 os_tid = 0x9d4 Thread: id = 52 os_tid = 0xbcc Process: id = "5" image_name = "svchost.exe" filename = "c:\\windows\\system32\\svchost.exe" page_root = "0x3132b000" os_pid = "0x814" os_integrity_level = "0x4000" os_privileges = "0x60814080" monitor_reason = "rpc_server" parent_id = "3" os_parent_pid = "0x1d8" cmd_line = "C:\\Windows\\System32\\svchost.exe -k swprv" cur_dir = "C:\\Windows\\system32\\" os_username = "NT AUTHORITY\\SYSTEM" bitness = "32" os_groups = "Everyone" [0x7], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\SERVICE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT SERVICE\\swprv" [0xe], "NT AUTHORITY\\Logon Session 00000000:000711d0" [0xc000000f], "LOCAL" [0x7], "BUILTIN\\Administrators" [0xe] Thread: id = 39 os_tid = 0x884 Thread: id = 40 os_tid = 0x864 Thread: id = 41 os_tid = 0x854 Thread: id = 42 os_tid = 0x844 Thread: id = 43 os_tid = 0x834 Thread: id = 44 os_tid = 0x824 Thread: id = 46 os_tid = 0xa04 Thread: id = 51 os_tid = 0x798 Process: id = "6" image_name = "System" filename = "" page_root = "0x187000" os_pid = "0x4" os_integrity_level = "0x4000" os_privileges = "0xe60b1e890" monitor_reason = "kernel_analysis" parent_id = "0" os_parent_pid = "0xffffffffffffffff" cmd_line = "" cur_dir = "" os_username = "NT AUTHORITY\\SYSTEM" bitness = "32" os_groups = "BUILTIN\\Administrators" [0xe], "Everyone" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7] Thread: id = 53 os_tid = 0x8 Thread: id = 54 os_tid = 0x30 Thread: id = 55 os_tid = 0x24 Thread: id = 56 os_tid = 0x9c Thread: id = 57 os_tid = 0x78 Thread: id = 58 os_tid = 0xc0 Thread: id = 59 os_tid = 0x28 Thread: id = 60 os_tid = 0x3c Thread: id = 61 os_tid = 0x4c Thread: id = 62 os_tid = 0x44 Thread: id = 63 os_tid = 0x40 Thread: id = 64 os_tid = 0x38 Thread: id = 65 os_tid = 0x5c Thread: id = 66 os_tid = 0x34 Thread: id = 67 os_tid = 0xc4 Thread: id = 68 os_tid = 0xcc Thread: id = 69 os_tid = 0xd0 Thread: id = 70 os_tid = 0xb8 Thread: id = 71 os_tid = 0xd4 Thread: id = 72 os_tid = 0xd8 Thread: id = 73 os_tid = 0xdc Thread: id = 76 os_tid = 0xf0 Thread: id = 77 os_tid = 0xb4 Thread: id = 78 os_tid = 0xf4 Thread: id = 80 os_tid = 0x80 Thread: id = 81 os_tid = 0x48 Thread: id = 82 os_tid = 0x68 Thread: id = 83 os_tid = 0x2c Thread: id = 84 os_tid = 0xb0 Thread: id = 85 os_tid = 0x100 Thread: id = 86 os_tid = 0x104 Thread: id = 87 os_tid = 0x10c Thread: id = 88 os_tid = 0x108 Thread: id = 89 os_tid = 0x110 Thread: id = 90 os_tid = 0x114 Thread: id = 91 os_tid = 0x98 Thread: id = 92 os_tid = 0x64 Thread: id = 93 os_tid = 0x118 Thread: id = 94 os_tid = 0x84 Thread: id = 95 os_tid = 0x90 Thread: id = 99 os_tid = 0x130 Thread: id = 100 os_tid = 0x134 Thread: id = 101 os_tid = 0x138 Thread: id = 102 os_tid = 0x13c Thread: id = 119 os_tid = 0x190 Thread: id = 133 os_tid = 0x88 Thread: id = 169 os_tid = 0x60 Thread: id = 170 os_tid = 0x74 Thread: id = 175 os_tid = 0x274 Thread: id = 201 os_tid = 0x2e4 Thread: id = 210 os_tid = 0x304 Thread: id = 211 os_tid = 0x314 Thread: id = 212 os_tid = 0xbc Thread: id = 213 os_tid = 0x20 Thread: id = 224 os_tid = 0x8c Thread: id = 255 os_tid = 0x3c4 Thread: id = 267 os_tid = 0x1c Thread: id = 268 os_tid = 0x50 Thread: id = 274 os_tid = 0xc8 Thread: id = 276 os_tid = 0x110 Thread: id = 300 os_tid = 0x38c Process: id = "7" image_name = "smss.exe" filename = "c:\\windows\\system32\\smss.exe" page_root = "0x17dcb000" os_pid = "0xe0" os_integrity_level = "0x4000" os_privileges = "0xe60b1e890" monitor_reason = "child_process" parent_id = "6" os_parent_pid = "0x4" cmd_line = "\\SystemRoot\\System32\\smss.exe" cur_dir = "C:\\Windows" os_username = "NT AUTHORITY\\SYSTEM" bitness = "32" os_groups = "BUILTIN\\Administrators" [0xe], "Everyone" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7] Thread: id = 74 os_tid = 0xe4 Thread: id = 75 os_tid = 0xe8 Thread: id = 96 os_tid = 0x11c Thread: id = 107 os_tid = 0x160 Process: id = "8" image_name = "autochk.exe" filename = "c:\\windows\\system32\\autochk.exe" page_root = "0x2cb02000" os_pid = "0xf8" os_integrity_level = "0x4000" os_privileges = "0xe60b1e890" monitor_reason = "child_process" parent_id = "7" os_parent_pid = "0xe0" cmd_line = "\\??\\C:\\Windows\\system32\\autochk.exe *" cur_dir = "C:\\Windows\\system32" os_username = "NT AUTHORITY\\SYSTEM" bitness = "32" os_groups = "BUILTIN\\Administrators" [0xe], "Everyone" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7] Thread: id = 79 os_tid = 0xfc Process: id = "9" image_name = "smss.exe" filename = "c:\\windows\\system32\\smss.exe" page_root = "0x2cb5b000" os_pid = "0x120" os_integrity_level = "0x4000" os_privileges = "0xe60b1e890" monitor_reason = "child_process" parent_id = "7" os_parent_pid = "0xe0" cmd_line = "\\SystemRoot\\System32\\smss.exe 00000000 0000003c " cur_dir = "C:\\Windows\\" os_username = "NT AUTHORITY\\SYSTEM" bitness = "32" os_groups = "BUILTIN\\Administrators" [0xe], "Everyone" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7] Thread: id = 97 os_tid = 0x124 Process: id = "10" image_name = "csrss.exe" filename = "c:\\windows\\system32\\csrss.exe" page_root = "0xeefe000" os_pid = "0x128" os_integrity_level = "0x4000" os_privileges = "0xe60b1e890" monitor_reason = "child_process" parent_id = "9" os_parent_pid = "0x120" cmd_line = "%SystemRoot%\\system32\\csrss.exe ObjectDirectory=\\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16" cur_dir = "C:\\Windows\\system32" os_username = "NT AUTHORITY\\SYSTEM" bitness = "32" os_groups = "BUILTIN\\Administrators" [0xe], "Everyone" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7] Thread: id = 98 os_tid = 0x12c Thread: id = 103 os_tid = 0x140 Thread: id = 104 os_tid = 0x144 Thread: id = 105 os_tid = 0x148 Thread: id = 106 os_tid = 0x14c Thread: id = 115 os_tid = 0x184 Thread: id = 120 os_tid = 0x194 Thread: id = 121 os_tid = 0x198 Thread: id = 126 os_tid = 0x1c4 Thread: id = 134 os_tid = 0x1d4 Process: id = "11" image_name = "smss.exe" filename = "c:\\windows\\system32\\smss.exe" page_root = "0x2c461000" os_pid = "0x150" os_integrity_level = "0x4000" os_privileges = "0xe60b1e890" monitor_reason = "child_process" parent_id = "7" os_parent_pid = "0xe0" cmd_line = "\\SystemRoot\\System32\\smss.exe 00000001 0000003c " cur_dir = "C:\\Windows\\" os_username = "NT AUTHORITY\\SYSTEM" bitness = "32" os_groups = "BUILTIN\\Administrators" [0xe], "Everyone" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7] Thread: id = 108 os_tid = 0x154 Process: id = "12" image_name = "wininit.exe" filename = "c:\\windows\\system32\\wininit.exe" page_root = "0x2c204000" os_pid = "0x158" os_integrity_level = "0x4000" os_privileges = "0xe60b1e890" monitor_reason = "child_process" parent_id = "9" os_parent_pid = "0x120" cmd_line = "wininit.exe" cur_dir = "C:\\Windows\\system32" os_username = "NT AUTHORITY\\SYSTEM" bitness = "32" os_groups = "BUILTIN\\Administrators" [0xe], "Everyone" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7] Thread: id = 109 os_tid = 0x15c Thread: id = 116 os_tid = 0x188 Thread: id = 117 os_tid = 0x18c Thread: id = 123 os_tid = 0x1a0 Thread: id = 124 os_tid = 0x1a4 Thread: id = 125 os_tid = 0x1b8 Thread: id = 137 os_tid = 0x1e4 Thread: id = 138 os_tid = 0x1e8 Process: id = "13" image_name = "csrss.exe" filename = "c:\\windows\\system32\\csrss.exe" page_root = "0x2c847000" os_pid = "0x164" os_integrity_level = "0x4000" os_privileges = "0xe60b1e890" monitor_reason = "child_process" parent_id = "11" os_parent_pid = "0x150" cmd_line = "%SystemRoot%\\system32\\csrss.exe ObjectDirectory=\\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16" cur_dir = "C:\\Windows\\system32" os_username = "NT AUTHORITY\\SYSTEM" bitness = "32" os_groups = "BUILTIN\\Administrators" [0xe], "Everyone" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7] Thread: id = 110 os_tid = 0x168 Thread: id = 111 os_tid = 0x16c Thread: id = 112 os_tid = 0x170 Thread: id = 113 os_tid = 0x174 Thread: id = 114 os_tid = 0x178 Thread: id = 122 os_tid = 0x19c Thread: id = 146 os_tid = 0x204 Thread: id = 147 os_tid = 0x208 Process: id = "14" image_name = "winlogon.exe" filename = "c:\\windows\\system32\\winlogon.exe" page_root = "0x1b44d000" os_pid = "0x17c" os_integrity_level = "0x4000" os_privileges = "0xe60b1e890" monitor_reason = "child_process" parent_id = "11" os_parent_pid = "0x150" cmd_line = "winlogon.exe" cur_dir = "C:\\Windows\\system32" os_username = "NT AUTHORITY\\SYSTEM" bitness = "32" os_groups = "BUILTIN\\Administrators" [0xe], "Everyone" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7] Thread: id = 118 os_tid = 0x180 Thread: id = 130 os_tid = 0x1c8 Thread: id = 131 os_tid = 0x1cc Thread: id = 192 os_tid = 0x2c4 Thread: id = 204 os_tid = 0x2f4 Thread: id = 272 os_tid = 0xf8 Thread: id = 273 os_tid = 0x104 Thread: id = 278 os_tid = 0x108 Process: id = "15" image_name = "services.exe" filename = "c:\\windows\\system32\\services.exe" page_root = "0x1af99000" os_pid = "0x1a8" os_integrity_level = "0x4000" os_privileges = "0xe60b1e890" monitor_reason = "child_process" parent_id = "12" os_parent_pid = "0x158" cmd_line = "C:\\Windows\\system32\\services.exe" cur_dir = "C:\\Windows\\system32\\" os_username = "NT AUTHORITY\\SYSTEM" bitness = "32" os_groups = "BUILTIN\\Administrators" [0xe], "Everyone" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7] Thread: id = 127 os_tid = 0x1ac Thread: id = 148 os_tid = 0x20c Thread: id = 149 os_tid = 0x210 Thread: id = 150 os_tid = 0x214 Thread: id = 151 os_tid = 0x218 Thread: id = 152 os_tid = 0x21c Thread: id = 153 os_tid = 0x220 Thread: id = 154 os_tid = 0x224 Thread: id = 155 os_tid = 0x228 Thread: id = 156 os_tid = 0x22c Thread: id = 157 os_tid = 0x230 Thread: id = 158 os_tid = 0x234 Thread: id = 174 os_tid = 0x270 Thread: id = 275 os_tid = 0x100 Process: id = "16" image_name = "lsass.exe" filename = "c:\\windows\\system32\\lsass.exe" page_root = "0xe49f000" os_pid = "0x1b0" os_integrity_level = "0x4000" os_privileges = "0xe60b1e890" monitor_reason = "child_process" parent_id = "12" os_parent_pid = "0x158" cmd_line = "C:\\Windows\\system32\\lsass.exe" cur_dir = "C:\\Windows\\system32\\" os_username = "NT AUTHORITY\\SYSTEM" bitness = "32" os_groups = "BUILTIN\\Administrators" [0xe], "Everyone" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7] Thread: id = 128 os_tid = 0x1b4 Thread: id = 132 os_tid = 0x1d0 Thread: id = 135 os_tid = 0x1d8 Thread: id = 136 os_tid = 0x1dc Thread: id = 139 os_tid = 0x1e0 Thread: id = 140 os_tid = 0x1ec Thread: id = 141 os_tid = 0x1f0 Thread: id = 142 os_tid = 0x1f4 Thread: id = 143 os_tid = 0x1f8 Thread: id = 144 os_tid = 0x1fc Thread: id = 145 os_tid = 0x200 Thread: id = 277 os_tid = 0x10c Thread: id = 302 os_tid = 0xfc Process: id = "17" image_name = "lsm.exe" filename = "c:\\windows\\system32\\lsm.exe" page_root = "0xdaaa000" os_pid = "0x1bc" os_integrity_level = "0x4000" os_privileges = "0xe60b1e890" monitor_reason = "child_process" parent_id = "12" os_parent_pid = "0x158" cmd_line = "C:\\Windows\\system32\\lsm.exe" cur_dir = "C:\\Windows\\system32\\" os_username = "NT AUTHORITY\\SYSTEM" bitness = "32" os_groups = "BUILTIN\\Administrators" [0xe], "Everyone" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7] Thread: id = 129 os_tid = 0x1c0 Thread: id = 160 os_tid = 0x240 Thread: id = 189 os_tid = 0x2b4 Thread: id = 190 os_tid = 0x2b8 Thread: id = 193 os_tid = 0x2c0 Thread: id = 194 os_tid = 0x2c8 Thread: id = 196 os_tid = 0x2d0 Thread: id = 199 os_tid = 0x2dc Thread: id = 200 os_tid = 0x2e0 Thread: id = 202 os_tid = 0x2e8 Process: id = "18" image_name = "svchost.exe" filename = "c:\\windows\\system32\\svchost.exe" page_root = "0xc7eb000" os_pid = "0x238" os_integrity_level = "0x4000" os_privileges = "0xe60b1e890" monitor_reason = "child_process" parent_id = "15" os_parent_pid = "0x1a8" cmd_line = "C:\\Windows\\system32\\svchost.exe -k DcomLaunch" cur_dir = "C:\\Windows\\system32\\" os_username = "NT AUTHORITY\\SYSTEM" bitness = "32" os_groups = "Everyone" [0x7], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\SERVICE" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT SERVICE\\DcomLaunch" [0xa], "NT SERVICE\\PlugPlay" [0xe], "NT SERVICE\\Power" [0xa], "NT AUTHORITY\\Logon Session 00000000:00007126" [0xc000000f], "LOCAL" [0x7], "BUILTIN\\Administrators" [0xe] Thread: id = 159 os_tid = 0x23c Thread: id = 161 os_tid = 0x244 Thread: id = 162 os_tid = 0x248 Thread: id = 163 os_tid = 0x24c Thread: id = 164 os_tid = 0x250 Thread: id = 165 os_tid = 0x254 Thread: id = 166 os_tid = 0x258 Thread: id = 167 os_tid = 0x25c Thread: id = 168 os_tid = 0x260 Thread: id = 171 os_tid = 0x264 Thread: id = 172 os_tid = 0x268 Thread: id = 173 os_tid = 0x26c Thread: id = 176 os_tid = 0x278 Thread: id = 178 os_tid = 0x284 Thread: id = 179 os_tid = 0x288 Thread: id = 180 os_tid = 0x28c Thread: id = 266 os_tid = 0x3f8 Process: id = "19" image_name = "svchost.exe" filename = "c:\\windows\\system32\\svchost.exe" page_root = "0xc320000" os_pid = "0x27c" os_integrity_level = "0x4000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "15" os_parent_pid = "0x1a8" cmd_line = "C:\\Windows\\system32\\svchost.exe -k RPCSS" cur_dir = "C:\\Windows\\system32\\" os_username = "NT AUTHORITY\\Network Service" bitness = "32" os_groups = "Everyone" [0x7], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\SERVICE" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT SERVICE\\RpcEptMapper" [0xe], "NT SERVICE\\RpcSs" [0xa], "NT AUTHORITY\\Logon Session 00000000:0000b741" [0xc000000f], "LOCAL" [0x7] Thread: id = 177 os_tid = 0x280 Thread: id = 181 os_tid = 0x290 Thread: id = 182 os_tid = 0x294 Thread: id = 183 os_tid = 0x298 Thread: id = 184 os_tid = 0x29c Thread: id = 185 os_tid = 0x2a0 Thread: id = 186 os_tid = 0x2a4 Thread: id = 187 os_tid = 0x2a8 Thread: id = 265 os_tid = 0x3f4 Process: id = "20" image_name = "svchost.exe" filename = "c:\\windows\\system32\\svchost.exe" page_root = "0xc52d000" os_pid = "0x2ac" os_integrity_level = "0x4000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "15" os_parent_pid = "0x1a8" cmd_line = "C:\\Windows\\System32\\svchost.exe -k LocalServiceNetworkRestricted" cur_dir = "C:\\Windows\\system32\\" os_username = "NT AUTHORITY\\Local Service" bitness = "32" os_groups = "Everyone" [0x7], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\SERVICE" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT SERVICE\\Audiosrv" [0xa], "NT SERVICE\\Dhcp" [0xa], "NT SERVICE\\eventlog" [0xe], "NT SERVICE\\HomeGroupProvider" [0xa], "NT SERVICE\\lmhosts" [0xa], "NT SERVICE\\WPCSvc" [0xa], "NT SERVICE\\wscsvc" [0xa], "NT AUTHORITY\\Logon Session 00000000:0000ba20" [0xc000000f], "LOCAL" [0x7] Thread: id = 188 os_tid = 0x2b0 Thread: id = 191 os_tid = 0x2bc Thread: id = 195 os_tid = 0x2cc Thread: id = 197 os_tid = 0x2d4 Thread: id = 198 os_tid = 0x2d8 Thread: id = 218 os_tid = 0x31c Thread: id = 219 os_tid = 0x320 Thread: id = 222 os_tid = 0x33c Thread: id = 223 os_tid = 0x340 Thread: id = 225 os_tid = 0x344 Thread: id = 226 os_tid = 0x348 Thread: id = 241 os_tid = 0x388 Thread: id = 242 os_tid = 0x38c Thread: id = 243 os_tid = 0x390 Thread: id = 246 os_tid = 0x3a0 Thread: id = 247 os_tid = 0x3a4 Thread: id = 308 os_tid = 0x1f8 Process: id = "21" image_name = "logonui.exe" filename = "c:\\windows\\system32\\logonui.exe" page_root = "0xc12e000" os_pid = "0x2ec" os_integrity_level = "0x4000" os_privileges = "0xe60b1e890" monitor_reason = "child_process" parent_id = "14" os_parent_pid = "0x17c" cmd_line = "\"LogonUI.exe\" /flags:0x0" cur_dir = "C:\\Windows\\system32\\" os_username = "NT AUTHORITY\\SYSTEM" bitness = "32" os_groups = "BUILTIN\\Administrators" [0xe], "Everyone" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7] Thread: id = 203 os_tid = 0x2f0 Thread: id = 205 os_tid = 0x2f8 Thread: id = 206 os_tid = 0x2fc Thread: id = 207 os_tid = 0x300 Thread: id = 208 os_tid = 0x30c Thread: id = 209 os_tid = 0x310 Thread: id = 214 os_tid = 0x318 Thread: id = 215 os_tid = 0x324 Thread: id = 216 os_tid = 0x328 Thread: id = 217 os_tid = 0x32c Process: id = "22" image_name = "svchost.exe" filename = "c:\\windows\\system32\\svchost.exe" page_root = "0x9d36000" os_pid = "0x330" os_integrity_level = "0x4000" os_privileges = "0xe60b1e890" monitor_reason = "child_process" parent_id = "15" os_parent_pid = "0x1a8" cmd_line = "C:\\Windows\\System32\\svchost.exe -k LocalSystemNetworkRestricted" cur_dir = "C:\\Windows\\system32\\" os_username = "NT AUTHORITY\\SYSTEM" bitness = "32" os_groups = "Everyone" [0x7], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\SERVICE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT SERVICE\\AudioEndpointBuilder" [0xe], "NT SERVICE\\CscService" [0xa], "NT SERVICE\\dot3svc" [0xa], "NT SERVICE\\hidserv" [0xa], "NT SERVICE\\HomeGroupListener" [0xa], "NT SERVICE\\IPBusEnum" [0xa], "NT SERVICE\\Netman" [0xa], "NT SERVICE\\PcaSvc" [0xa], "NT SERVICE\\StorSvc" [0xa], "NT SERVICE\\TabletInputService" [0xa], "NT SERVICE\\TrkWks" [0xa], "NT SERVICE\\UmRdpService" [0xa], "NT SERVICE\\UxSms" [0xa], "NT SERVICE\\WdiSystemHost" [0xa], "NT SERVICE\\Wlansvc" [0xa], "NT SERVICE\\WPDBusEnum" [0xa], "NT SERVICE\\wudfsvc" [0xa], "NT AUTHORITY\\Logon Session 00000000:0000cf01" [0xc0000007], "LOCAL" [0x7], "BUILTIN\\Administrators" [0xe] Thread: id = 220 os_tid = 0x334 Thread: id = 221 os_tid = 0x338 Thread: id = 227 os_tid = 0x34c Thread: id = 228 os_tid = 0x350 Thread: id = 229 os_tid = 0x354 Thread: id = 232 os_tid = 0x364 Thread: id = 233 os_tid = 0x368 Thread: id = 235 os_tid = 0x370 Thread: id = 238 os_tid = 0x37c Thread: id = 239 os_tid = 0x380 Thread: id = 251 os_tid = 0x3b4 Thread: id = 254 os_tid = 0x3c0 Thread: id = 257 os_tid = 0x3d0 Thread: id = 258 os_tid = 0x3d4 Thread: id = 259 os_tid = 0x3d8 Thread: id = 264 os_tid = 0x3f0 Thread: id = 280 os_tid = 0xf0 Thread: id = 281 os_tid = 0x130 Thread: id = 299 os_tid = 0x364 Thread: id = 301 os_tid = 0x3b8 Thread: id = 307 os_tid = 0x1b4 Thread: id = 309 os_tid = 0x404 Process: id = "23" image_name = "svchost.exe" filename = "c:\\windows\\system32\\svchost.exe" page_root = "0x9d3e000" os_pid = "0x358" os_integrity_level = "0x4000" os_privileges = "0xe60b1e890" monitor_reason = "child_process" parent_id = "15" os_parent_pid = "0x1a8" cmd_line = "C:\\Windows\\system32\\svchost.exe -k netsvcs" cur_dir = "C:\\Windows\\system32\\" os_username = "NT AUTHORITY\\SYSTEM" bitness = "32" os_groups = "Everyone" [0x7], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\SERVICE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT SERVICE\\BDESVC" [0xa], "NT SERVICE\\BITS" [0xa], "NT SERVICE\\CertPropSvc" [0xa], "NT SERVICE\\EapHost" [0xa], "NT SERVICE\\hkmsvc" [0xa], "NT SERVICE\\IKEEXT" [0xa], "NT SERVICE\\iphlpsvc" [0xa], "NT SERVICE\\LanmanServer" [0xa], "NT SERVICE\\MMCSS" [0xe], "NT SERVICE\\MSiSCSI" [0xa], "NT SERVICE\\RasAuto" [0xa], "NT SERVICE\\RasMan" [0xa], "NT SERVICE\\RemoteAccess" [0xa], "NT SERVICE\\Schedule" [0xa], "NT SERVICE\\SCPolicySvc" [0xa], "NT SERVICE\\SENS" [0xa], "NT SERVICE\\SessionEnv" [0xa], "NT SERVICE\\SharedAccess" [0xa], "NT SERVICE\\ShellHWDetection" [0xa], "NT SERVICE\\wercplsupport" [0xa], "NT SERVICE\\Winmgmt" [0xa], "NT SERVICE\\wuauserv" [0xa], "NT AUTHORITY\\Logon Session 00000000:0000d21e" [0xc0000007], "LOCAL" [0x7], "BUILTIN\\Administrators" [0xe] Thread: id = 230 os_tid = 0x35c Thread: id = 231 os_tid = 0x360 Thread: id = 234 os_tid = 0x36c Thread: id = 236 os_tid = 0x374 Thread: id = 237 os_tid = 0x378 Thread: id = 240 os_tid = 0x384 Thread: id = 252 os_tid = 0x3b8 Thread: id = 253 os_tid = 0x3bc Thread: id = 256 os_tid = 0x3cc Thread: id = 262 os_tid = 0x3e8 Thread: id = 263 os_tid = 0x3ec Thread: id = 282 os_tid = 0x134 Thread: id = 283 os_tid = 0x138 Thread: id = 285 os_tid = 0x124 Thread: id = 293 os_tid = 0x1fc Thread: id = 294 os_tid = 0x1f4 Process: id = "24" image_name = "audiodg.exe" filename = "c:\\windows\\system32\\audiodg.exe" page_root = "0x985e000" os_pid = "0x394" os_integrity_level = "0x4000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "20" os_parent_pid = "0x2ac" cmd_line = "C:\\Windows\\system32\\AUDIODG.EXE 0x2d4" cur_dir = "C:\\Windows" os_username = "NT AUTHORITY\\Local Service" bitness = "32" os_groups = "Everyone" [0x7], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\SERVICE" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT SERVICE\\Audiosrv" [0xe], "NT SERVICE\\Dhcp" [0xa], "NT SERVICE\\eventlog" [0xe], "NT SERVICE\\HomeGroupProvider" [0xa], "NT SERVICE\\lmhosts" [0xa], "NT SERVICE\\WPCSvc" [0xa], "NT SERVICE\\wscsvc" [0xa], "NT AUTHORITY\\Logon Session 00000000:0000ba20" [0xc000000f], "LOCAL" [0x7] Thread: id = 244 os_tid = 0x398 Thread: id = 245 os_tid = 0x39c Thread: id = 248 os_tid = 0x3a8 Thread: id = 249 os_tid = 0x3ac Thread: id = 250 os_tid = 0x3b0 Process: id = "25" image_name = "svchost.exe" filename = "c:\\windows\\system32\\svchost.exe" page_root = "0x9e80000" os_pid = "0x3dc" os_integrity_level = "0x4000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "15" os_parent_pid = "0x1a8" cmd_line = "C:\\Windows\\system32\\svchost.exe -k LocalService" cur_dir = "C:\\Windows\\system32\\" os_username = "NT AUTHORITY\\Local Service" bitness = "32" os_groups = "Everyone" [0x7], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\SERVICE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT SERVICE\\EventSystem" [0xe], "NT SERVICE\\fdPHost" [0xa], "NT SERVICE\\lltdsvc" [0xa], "NT SERVICE\\netprofm" [0xa], "NT SERVICE\\nsi" [0xa], "NT SERVICE\\sppuinotify" [0xa], "NT SERVICE\\SstpSvc" [0xa], "NT SERVICE\\THREADORDER" [0xa], "NT SERVICE\\W32Time" [0xa], "NT SERVICE\\WdiServiceHost" [0xa], "NT SERVICE\\WebClient" [0xa], "NT SERVICE\\WinHttpAutoProxySvc" [0xa], "NT AUTHORITY\\Logon Session 00000000:0000e02d" [0xc000000f], "LOCAL" [0x7] Thread: id = 260 os_tid = 0x3e0 Thread: id = 261 os_tid = 0x3e4 Thread: id = 269 os_tid = 0x3fc Thread: id = 270 os_tid = 0xcc Thread: id = 271 os_tid = 0xfc Thread: id = 279 os_tid = 0x114 Thread: id = 284 os_tid = 0x12c Process: id = "26" image_name = "dllhost.exe" filename = "c:\\windows\\system32\\dllhost.exe" page_root = "0x7b9b000" os_pid = "0x120" os_integrity_level = "0x4000" os_privileges = "0xe60b1e890" monitor_reason = "child_process" parent_id = "18" os_parent_pid = "0x238" cmd_line = "C:\\Windows\\system32\\DllHost.exe /Processid:{E10F6C3A-F1AE-4ADC-AA9D-2FE65525666E}" cur_dir = "C:\\Windows\\system32\\" os_username = "NT AUTHORITY\\SYSTEM" bitness = "32" os_groups = "Everyone" [0x7], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\SERVICE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT SERVICE\\BDESVC" [0xa], "NT SERVICE\\BITS" [0xa], "NT SERVICE\\CertPropSvc" [0xa], "NT SERVICE\\EapHost" [0xa], "NT SERVICE\\hkmsvc" [0xa], "NT SERVICE\\IKEEXT" [0xa], "NT SERVICE\\iphlpsvc" [0xa], "NT SERVICE\\LanmanServer" [0xa], "NT SERVICE\\MMCSS" [0xe], "NT SERVICE\\MSiSCSI" [0xa], "NT SERVICE\\RasAuto" [0xa], "NT SERVICE\\RasMan" [0xa], "NT SERVICE\\RemoteAccess" [0xa], "NT SERVICE\\Schedule" [0xa], "NT SERVICE\\SCPolicySvc" [0xa], "NT SERVICE\\SENS" [0xa], "NT SERVICE\\SessionEnv" [0xa], "NT SERVICE\\SharedAccess" [0xa], "NT SERVICE\\ShellHWDetection" [0xa], "NT SERVICE\\wercplsupport" [0xa], "NT SERVICE\\Winmgmt" [0xa], "NT SERVICE\\wuauserv" [0xa], "NT AUTHORITY\\Logon Session 00000000:0000d21e" [0xc0000007], "LOCAL" [0x7], "BUILTIN\\Administrators" [0xe] Thread: id = 286 os_tid = 0x13c Thread: id = 287 os_tid = 0x168 Thread: id = 288 os_tid = 0x154 Thread: id = 289 os_tid = 0x150 Thread: id = 290 os_tid = 0x1a0 Thread: id = 291 os_tid = 0x1f8 Thread: id = 292 os_tid = 0x1b4 Process: id = "27" image_name = "userinit.exe" filename = "c:\\windows\\system32\\userinit.exe" page_root = "0x1a0f1000" os_pid = "0x24c" os_integrity_level = "0x2000" os_privileges = "0x800000" monitor_reason = "child_process" parent_id = "14" os_parent_pid = "0x17c" cmd_line = "C:\\Windows\\system32\\userinit.exe" cur_dir = "C:\\Windows\\system32\\" os_username = "XDUWTFONO\\5p5NrGJn0jS HALPmcxz" bitness = "32" os_groups = "XDUWTFONO\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0x10], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000e7dc" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 295 os_tid = 0x278 Process: id = "28" image_name = "explorer.exe" filename = "c:\\windows\\explorer.exe" page_root = "0x7cea000" os_pid = "0x298" os_integrity_level = "0x2000" os_privileges = "0x800000" monitor_reason = "child_process" parent_id = "27" os_parent_pid = "0x24c" cmd_line = "C:\\Windows\\Explorer.EXE" cur_dir = "C:\\Windows\\system32\\" os_username = "XDUWTFONO\\5p5NrGJn0jS HALPmcxz" bitness = "32" os_groups = "XDUWTFONO\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0x10], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000e7dc" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 296 os_tid = 0x2e4 Thread: id = 297 os_tid = 0x354 Thread: id = 298 os_tid = 0x388 Thread: id = 304 os_tid = 0x124 Thread: id = 305 os_tid = 0x38c Thread: id = 306 os_tid = 0x364 Thread: id = 310 os_tid = 0x40c Process: id = "29" image_name = "dwm.exe" filename = "c:\\windows\\system32\\dwm.exe" page_root = "0x5d1c000" os_pid = "0xf8" os_integrity_level = "0x2000" os_privileges = "0x800000" monitor_reason = "child_process" parent_id = "22" os_parent_pid = "0x330" cmd_line = "\"C:\\Windows\\system32\\Dwm.exe\"" cur_dir = "C:\\Windows\\system32\\" os_username = "XDUWTFONO\\5p5NrGJn0jS HALPmcxz" bitness = "32" os_groups = "XDUWTFONO\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0x10], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000e7dc" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 303 os_tid = 0x108